Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa
File:                     C2C37E56153A11EF9E378A14C4F9AE02.roa (raw, json)
Hash identifier:          poEtgPZtcpiKYKdYhV9CVGAapseARodx6sLWBCWZ/Pg=
Subject key identifier:   6F:A4:AA:94:FA:4A:C2:72:03:76:F1:B3:8E:F1:0A:24:EB:AA:17:2B
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       DD
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa
Signing time:             Thu 27 Jun 2024 05:47:29 +0000
ROA not before:           Thu 27 Jun 2024 05:47:29 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     201217
IP address blocks:        2401:5a0:ff10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Jun 27 05:47:29 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667cfcf1-c062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:e0:16:4a:69:59:a8:4a:f6:59:e3:d4:d3:
                    6b:2c:6f:11:ab:bf:cd:fb:84:91:1c:8d:33:3e:11:
                    8f:dc:cc:97:85:37:12:25:56:55:bd:02:74:2a:f4:
                    42:85:5b:5b:2c:d3:49:62:6b:fe:2b:fc:df:71:75:
                    25:bf:88:1c:ee:a4:2d:d7:ae:13:b4:d1:be:52:80:
                    07:75:79:00:1f:34:4e:19:fc:66:3a:ee:e8:ce:f2:
                    40:82:b7:5c:fe:a6:c4:e3:0c:6c:5f:a6:d2:1c:cf:
                    9a:89:7a:fd:68:ee:c1:a1:9e:a0:38:e1:03:34:11:
                    ac:23:c5:ea:09:dc:66:a4:5b:34:a7:4e:7e:4a:78:
                    45:3c:d5:a9:e1:c5:a0:06:e4:d5:97:1f:6b:56:05:
                    c4:cb:37:ab:11:d3:a3:01:3a:b4:9a:8d:1e:db:78:
                    83:5a:14:e7:96:2a:dc:b7:fb:2a:d1:ef:be:72:07:
                    50:8b:55:eb:86:ec:f4:d5:dd:4b:b6:40:11:c5:4d:
                    c0:cc:60:66:19:c0:12:a4:a1:23:53:71:18:c5:17:
                    2c:90:54:52:d4:97:b9:99:07:1b:70:51:69:a6:41:
                    08:ae:8e:07:23:57:9a:79:25:05:7c:23:f6:eb:5b:
                    4c:25:bd:8f:20:cc:2c:ed:76:c7:9c:01:05:5e:f6:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A4:AA:94:FA:4A:C2:72:03:76:F1:B3:8E:F1:0A:24:EB:AA:17:2B
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5a0:ff10::/44

    Signature Algorithm: sha256WithRSAEncryption
         a0:fa:ae:9d:ff:e6:9b:75:b1:c3:9d:b1:35:99:c4:f5:1c:61:
         01:e8:06:2c:44:4f:b7:43:19:be:3d:87:d7:b1:22:3c:21:12:
         de:9a:1f:d9:c1:26:a5:ec:fc:4d:ee:d6:36:43:f3:2f:8b:9c:
         91:32:72:8b:ea:20:16:b3:1a:ec:51:d0:c2:fd:20:ec:d4:d2:
         fa:81:f6:a1:33:d3:5a:36:5c:74:42:10:a9:1a:f9:7b:19:7a:
         a5:86:4d:19:95:b8:3f:03:70:d7:3b:aa:4c:16:37:e6:d0:96:
         18:7f:83:01:c6:57:a3:a6:b3:02:7d:4a:3b:88:00:c5:98:cf:
         26:05:03:67:cb:46:da:a9:ae:72:07:73:f3:ac:9f:f3:57:af:
         67:3d:41:55:54:a5:f6:d0:c8:d4:12:72:9e:84:d6:7e:4f:9f:
         f8:cd:97:e1:2b:f4:ba:b7:21:f7:17:92:20:0f:29:43:f7:4d:
         52:2b:00:ec:6c:ec:e6:85:ce:60:35:4d:31:1b:dd:ab:54:ad:
         8e:2a:5e:13:c1:c1:a3:1a:04:1e:7b:42:ed:53:dd:08:14:22:
         0e:3c:50:0b:ab:57:41:93:69:a0:9e:d0:cc:01:6f:0c:af:8b:
         f4:4b:a9:20:59:31:f4:3b:41:12:4c:e5:5a:ce:cc:e8:6d:b0:
         60:da:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org