Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/E0FF171A440411EF85685B0DC4F9AE02.roa
File:                     E0FF171A440411EF85685B0DC4F9AE02.roa (raw, json)
Hash identifier:          KnSSA1Qq59sJxgKVj3jP8KkbnpUbCwhj2IXQBg8sTYM=
Subject key identifier:   01:77:37:63:D5:98:DE:B6:99:0B:6F:95:C1:EA:0A:D7:9C:65:42:32
Certificate issuer:       /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial:       EC
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/E0FF171A440411EF85685B0DC4F9AE02.roa
Signing time:             Sun 27 Oct 2024 04:15:23 +0000
ROA not before:           Sun 27 Oct 2024 04:15:23 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     152111
IP address blocks:        2401:3620:2200::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
        Validity
            Not Before: Oct 27 04:15:23 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671dbe5b-e256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:99:b9:ea:11:d6:57:a5:17:f7:fb:4e:a2:a1:
                    c3:e8:fd:2d:dc:ac:39:72:8e:b5:e0:47:d8:0f:99:
                    96:cc:11:e3:b4:05:3f:3e:f8:8c:23:ac:54:ef:cb:
                    5f:47:4b:6f:cf:8a:42:1e:81:3f:3b:10:57:b9:7e:
                    ee:a9:d2:8e:f0:57:5f:53:9f:b3:4f:38:6d:9e:fc:
                    61:be:01:a6:c1:8e:b6:9d:b1:30:b0:0c:9c:e8:b1:
                    3b:c5:46:c8:2e:13:db:65:e7:f9:bf:4c:5c:89:95:
                    db:4f:8a:04:0f:d7:93:01:52:f2:95:f8:5b:d0:95:
                    39:53:09:ee:be:b9:86:46:f3:18:45:c5:40:2a:19:
                    42:0e:83:63:8d:14:b5:18:fe:8c:52:e5:9a:f1:a2:
                    5a:e8:27:96:12:bb:ea:20:2e:62:0f:0a:51:51:4c:
                    9f:3c:27:33:fb:c3:93:59:6b:c9:cb:1b:d0:ff:49:
                    c6:cf:ca:8f:cd:75:64:79:86:a9:2c:ac:c1:9d:47:
                    e5:82:d4:52:fd:e7:15:a3:fa:30:7b:9b:24:17:1e:
                    58:a2:27:6d:1e:70:65:73:10:07:ba:35:26:97:5b:
                    e2:6e:28:37:6b:5a:49:c2:0a:3f:06:7e:32:e0:b9:
                    35:76:8c:80:22:be:80:5f:1b:e0:30:ad:54:df:e3:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:77:37:63:D5:98:DE:B6:99:0B:6F:95:C1:EA:0A:D7:9C:65:42:32
            X509v3 Authority Key Identifier:
                keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/E0FF171A440411EF85685B0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3620:2200::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:04:80:18:87:4d:3e:bc:62:11:08:cd:32:6d:5b:2b:f6:9b:
         f4:ca:5b:46:3b:8a:11:5c:8c:d7:d2:62:b7:1f:e2:e5:4e:2c:
         b0:09:51:d1:5f:6b:30:f3:67:ca:68:8a:68:04:2a:75:21:2d:
         8e:f8:33:ec:c1:53:a7:bd:4f:8f:88:f5:cd:0e:7d:a4:50:76:
         64:9f:f3:9a:e4:6c:e1:75:89:72:15:e0:48:40:c2:68:bf:a8:
         4b:dd:7c:2d:30:7f:7f:fd:18:f6:69:de:cd:53:a6:8b:7c:29:
         ab:54:54:7d:a0:8d:13:ba:e4:20:61:32:43:25:8f:3f:f2:04:
         0d:ef:02:8f:c9:6f:57:d8:fa:73:98:69:4e:41:7b:5a:62:01:
         85:2c:7b:13:f7:c2:e4:44:fc:38:d7:40:0b:fa:5a:76:97:e8:
         1d:e7:15:21:e4:2d:85:95:47:48:d0:2d:9c:71:ce:46:ef:c2:
         02:b2:45:9a:ee:05:96:c4:38:36:85:8a:a5:86:bb:e2:e9:46:
         3a:53:ab:8e:45:38:cf:a4:bc:a0:2b:64:d6:84:19:89:9a:51:
         6e:ed:f3:0c:89:de:0a:4f:5c:ab:dc:2b:e4:08:f3:ed:76:1b:
         34:63:e2:e9:39:ed:c7:02:bf:61:bf:f3:21:4a:42:33:0f:68:
         87:26:6f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:00 2024 by rpki-client on console-ams.rpki-client.org