Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/3217A18E809711EFB1A3805FC4F9AE02.roa
File:                     3217A18E809711EFB1A3805FC4F9AE02.roa (raw, json)
Hash identifier:          IExbtiolQQ65jCv5u1UwJWeDcm4gG8UyargWa4/V1IY=
Subject key identifier:   B6:99:6D:B8:1C:6E:00:53:78:0F:D7:66:8C:2E:0E:1B:FA:24:28:2E
Certificate issuer:       /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Certificate serial:       34EC
Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/3217A18E809711EFB1A3805FC4F9AE02.roa
Signing time:             Wed 02 Oct 2024 08:20:34 +0000
ROA not before:           Wed 02 Oct 2024 08:20:34 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     133062
IP address blocks:        2001:448a:f000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
                          rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 14:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13548 (0x34ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
        Validity
            Not Before: Oct  2 08:20:34 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66fd0252-4597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:27:61:eb:61:77:01:15:5f:52:92:f0:5a:
                    79:e0:5e:25:d7:a7:30:b2:0e:f4:04:98:ca:ba:b7:
                    4a:8e:83:aa:29:74:e6:ff:d7:5b:78:06:9b:6c:54:
                    8a:9b:a1:76:3f:ad:30:77:da:b6:7e:96:28:32:0d:
                    91:76:46:82:a0:2c:c3:7a:d0:70:0e:cf:9d:b4:93:
                    eb:9d:52:b9:51:4b:c6:cd:12:af:31:ad:78:92:bd:
                    00:b4:49:5f:f4:25:06:a5:77:46:db:16:85:b1:16:
                    ab:bc:48:8a:28:f4:89:57:85:b2:5c:12:dd:32:f9:
                    72:92:b9:e1:76:c8:16:8d:47:2b:dd:d8:1f:7f:bd:
                    7c:ac:8a:4c:a1:63:b8:cc:58:de:d8:73:74:80:9c:
                    c7:90:77:fc:30:c5:ca:bc:3c:b8:bd:8c:3f:84:77:
                    4e:fb:36:b0:71:6f:a3:3f:6e:c5:06:14:33:e7:cf:
                    e7:ae:c9:13:f8:77:ab:50:4f:91:c4:f8:6e:63:f1:
                    b4:bb:86:43:c9:f5:3d:41:e0:f7:cd:89:dd:93:9f:
                    22:dc:bc:5d:18:87:2d:80:38:b6:23:c2:fd:f3:bc:
                    df:cf:d6:59:5d:22:59:b7:40:8d:ad:61:ea:93:22:
                    e7:79:49:5e:6d:38:a2:b3:50:b1:6d:2f:b2:c5:ee:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:99:6D:B8:1C:6E:00:53:78:0F:D7:66:8C:2E:0E:1B:FA:24:28:2E
            X509v3 Authority Key Identifier:
                keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/3217A18E809711EFB1A3805FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:448a:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:5f:65:09:32:2d:e5:88:bd:4f:ef:6d:f0:35:35:23:e9:ae:
         23:66:15:4a:34:dc:dd:7f:f2:c1:1e:ba:2e:a6:89:29:db:b2:
         eb:e5:28:df:65:1c:4c:8d:2f:64:d6:fd:8a:aa:d2:94:46:2c:
         75:b6:d9:6f:b2:5c:7f:cd:aa:17:9f:ca:ed:b6:fc:cc:11:78:
         12:2e:9f:44:1c:6c:9e:29:a4:f2:53:d3:91:c6:57:35:24:59:
         a9:68:7f:9f:62:9c:35:b9:c6:b8:7a:72:4d:79:bd:3d:1b:4f:
         66:56:b1:87:be:dd:e8:8f:0d:80:25:87:da:d7:6f:bb:d4:50:
         d1:d2:fd:72:33:88:0a:96:41:1c:66:19:91:fe:13:fd:08:51:
         bf:2d:c3:ba:24:e2:d6:6f:38:b3:17:83:f5:04:b7:ca:34:fc:
         ca:cd:d8:42:a3:bf:88:c9:3c:dd:81:71:99:6a:92:e6:2d:d2:
         c0:6d:a2:f2:55:03:8c:f4:7d:b6:3f:09:b3:38:05:97:08:06:
         0f:47:41:af:a6:85:aa:a5:e9:7d:c2:0e:8d:77:46:55:34:68:
         c8:48:57:09:dc:4c:e6:21:5b:d5:57:a2:c5:d3:cc:50:44:13:
         3f:ed:59:50:8f:d1:89:04:36:c6:19:8b:36:7b:a2:78:b2:52:
         f8:4c:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:18:04 2024 by rpki-client on console-fra.rpki-client.org