Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6BF06690D18111EE9F4F1C6BC4F9AE02.roa
File:                     6BF06690D18111EE9F4F1C6BC4F9AE02.roa (raw, json)
Hash identifier:          o1xi24rxew8B+n1Ze2MpLgZqjLBg0vnQljf/FndK59Q=
Subject key identifier:   84:41:93:57:2D:F2:FA:50:4B:6F:29:B5:BB:E4:0E:71:78:97:59:21
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       274B
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6BF06690D18111EE9F4F1C6BC4F9AE02.roa
Signing time:             Tue 30 Jul 2024 16:03:50 +0000
ROA not before:           Tue 30 Jul 2024 16:03:50 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136557
IP address blocks:        2402:9e80:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10059 (0x274b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 30 16:03:50 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a90ee5-d9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:4a:c1:b3:e7:31:82:ac:69:29:3f:cf:80:
                    58:cf:96:de:9c:bc:14:4f:01:81:93:44:b9:6d:f3:
                    8c:bc:97:9d:86:41:fc:58:a6:13:8f:e2:e3:0f:0d:
                    05:40:25:7d:de:f4:e3:67:2e:c9:9c:6f:df:32:0c:
                    f0:1d:10:df:57:10:da:60:56:2d:35:82:ca:ed:23:
                    5e:2e:32:71:d7:9e:96:5b:a4:99:e9:13:04:a9:f4:
                    bb:57:04:9d:f6:c1:80:d4:ac:63:1e:3e:78:74:0a:
                    79:ab:fc:ba:ec:ec:a0:95:ec:0d:e7:03:be:3d:18:
                    1e:86:21:39:66:2f:25:bd:ae:df:54:83:8b:fb:f6:
                    d1:20:5b:1c:7d:62:26:03:bb:3d:f7:8d:32:6b:5f:
                    38:8d:01:d2:81:9f:d5:ff:f4:15:fd:22:fb:d7:48:
                    15:d8:41:7a:b1:5c:13:71:cc:16:5e:fc:aa:57:0c:
                    e0:1d:54:2c:aa:16:bf:21:66:da:69:35:6c:ed:2d:
                    7d:15:bf:63:27:be:17:35:a4:5a:2b:ad:f5:fc:9d:
                    9b:6d:98:d9:32:85:e0:07:1d:24:15:d0:5c:4e:a6:
                    9b:84:e8:69:0f:2d:de:4a:10:f5:bd:1a:8f:6b:71:
                    db:65:d0:e2:c7:15:36:7a:42:22:17:d5:53:55:71:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:41:93:57:2D:F2:FA:50:4B:6F:29:B5:BB:E4:0E:71:78:97:59:21
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6BF06690D18111EE9F4F1C6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:53:7c:4e:13:81:50:eb:c3:a3:0a:9c:7c:19:06:6c:6e:11:
         f9:7c:0c:ff:45:47:17:67:4d:63:e5:90:66:23:98:76:52:3a:
         d7:91:65:12:24:51:a8:39:cd:db:03:5f:55:6b:41:b8:29:be:
         3c:5d:39:c7:15:ff:66:74:8b:12:52:b8:c8:7e:3a:51:b6:d9:
         3b:8b:51:8e:93:8f:e0:8b:ae:23:d4:f4:8e:67:9d:ce:15:b3:
         b1:16:68:2b:75:e1:9b:31:4f:83:38:a3:63:73:be:e8:c2:7e:
         39:df:da:ba:ce:c5:ad:a0:4b:50:65:3d:2e:93:dc:0e:67:93:
         57:01:46:fa:9a:96:24:be:cd:97:c8:f9:c9:7a:29:6f:ed:d2:
         05:7a:b0:e6:a6:78:24:ab:3f:fe:a3:bf:74:c6:6c:75:19:51:
         76:39:f2:4b:21:51:2f:21:fe:d0:17:fb:22:4a:38:db:a4:5b:
         3f:3d:fe:de:51:13:81:d3:f8:d2:fb:3d:1f:95:e8:a5:17:50:
         3f:04:91:28:ff:5c:a2:20:7c:77:e5:3e:fc:e6:01:81:74:ec:
         50:5f:ad:d9:60:58:96:1c:46:95:48:bb:07:a9:c6:50:3f:30:
         3c:98:a3:7b:16:66:b6:a3:bb:5d:67:06:fd:d7:2c:7b:37:62:
         3b:97:45:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:11 2024 by rpki-client on console-ams.rpki-client.org