Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/309A0AEC073D11EE94A9410CC4F9AE02.roa
File:                     309A0AEC073D11EE94A9410CC4F9AE02.roa (raw, json)
Hash identifier:          34mVt8KDeQIiFh5q4FQNM2/Hz6nw+/aMWnc/7Wb1lCk=
Subject key identifier:   57:61:68:59:94:03:82:FC:96:A6:6B:19:1D:B0:69:56:41:CD:E3:62
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       DF
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/309A0AEC073D11EE94A9410CC4F9AE02.roa
Signing time:             Thu 27 Jun 2024 05:47:31 +0000
ROA not before:           Thu 27 Jun 2024 05:47:31 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     212483
IP address blocks:        2401:5a0:ff00::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Jun 27 05:47:31 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667cfcf2-b481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:52:8a:83:22:73:6b:35:99:67:ec:0d:b4:
                    e6:af:a1:e5:2d:d3:18:d5:bd:e6:1e:56:32:eb:57:
                    43:74:26:6c:19:5e:e0:f6:f1:54:e4:8f:72:20:49:
                    8e:34:e4:53:57:f7:80:10:9d:4f:12:06:6c:db:dc:
                    cb:a7:31:d5:e2:f6:a4:9e:e8:19:40:a2:62:92:5e:
                    34:b3:6a:b7:b8:7c:f4:2e:89:1a:7a:07:bb:3f:0d:
                    f7:7b:67:67:b0:86:ea:02:c6:ea:5b:f5:bd:b3:41:
                    e2:35:ac:93:c2:7c:c6:8c:80:e3:15:ef:87:1f:fa:
                    6d:8e:03:c0:39:1b:69:43:cc:f3:21:8b:99:6f:41:
                    98:70:73:e1:d9:ad:df:7d:e7:70:86:98:c7:5b:54:
                    3d:dd:09:c1:2a:f5:66:97:6e:dc:e7:6a:ca:39:53:
                    63:33:5a:12:71:34:9d:93:0a:c2:cd:b0:1c:53:ae:
                    26:d5:a2:3d:00:db:23:77:c1:c2:64:60:ed:f6:a8:
                    da:80:f6:3f:cc:28:71:57:d7:a0:f0:16:9b:c0:9f:
                    83:49:54:9a:2a:f3:06:c1:78:87:b1:6f:5c:c5:fe:
                    f3:1d:67:7d:f0:39:59:bd:7c:00:75:80:9d:05:d0:
                    31:1c:fe:b8:1a:81:16:c5:42:b2:62:be:68:33:fa:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:61:68:59:94:03:82:FC:96:A6:6B:19:1D:B0:69:56:41:CD:E3:62
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/309A0AEC073D11EE94A9410CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5a0:ff00::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:69:ec:8f:6b:60:dc:39:bf:f6:46:15:8d:3d:47:e7:71:c1:
         c5:de:fb:bc:2c:e4:33:ca:26:4b:57:ac:d6:38:78:a4:fb:d7:
         b0:04:cb:2a:9e:8d:e9:30:5c:47:4a:63:34:a9:b9:f8:e3:34:
         20:e0:d1:34:f3:12:64:4f:ac:ef:c3:e3:f8:37:8d:17:17:72:
         de:42:76:34:45:6b:9e:93:bc:c4:f1:f9:cb:5b:76:82:b3:c2:
         0d:92:e3:23:cb:8a:b8:6c:40:72:8d:0a:49:d3:76:e0:17:bb:
         78:71:01:e4:24:84:9c:2c:e1:c2:64:ed:14:35:e7:32:c2:44:
         3e:e9:08:f5:91:ba:97:78:45:21:a0:64:ba:a5:6c:92:72:c3:
         61:ef:c9:b4:44:e0:55:49:bf:84:e8:0f:3b:62:7d:4c:f3:80:
         ee:ea:c2:b8:a7:38:cf:c7:69:f1:0a:8d:94:56:4e:9e:d1:6d:
         8e:a0:e3:6d:ef:b8:f5:92:e5:47:9f:08:7d:32:53:43:f7:5b:
         8c:a8:83:50:57:40:b3:09:7e:60:ca:e2:4d:86:15:39:20:ae:
         76:a3:f9:8f:c4:55:6c:9a:4f:10:a8:99:64:5c:bc:44:b7:ca:
         45:f2:df:12:8e:c0:6b:81:9d:ad:5f:8f:f7:d2:7a:cf:73:68:
         bb:2c:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org