Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/9D490526003B11ED8D290A30C4F9AE02.roa
File:                     9D490526003B11ED8D290A30C4F9AE02.roa (raw, json)
Hash identifier:          cKggDPZ8/9wnZy6IM0COHlOryfSj0wEpAKYxCOJeoDg=
Subject key identifier:   17:31:1D:D9:9A:65:9A:33:08:91:19:46:C5:37:01:A0:54:FD:8A:0F
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       04F8
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/9D490526003B11ED8D290A30C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:21 +0000
ROA not before:           Wed 31 Jul 2024 02:33:21 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     135586
IP address blocks:        2404:b0:1005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:33:21 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a271-02ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:0b:0c:0b:78:5f:ee:fa:2d:6d:0c:c8:d0:
                    47:24:94:16:e7:0e:0b:30:ce:67:2b:03:56:58:76:
                    74:fe:4b:76:e1:46:bf:63:ba:a8:d3:cc:4c:fd:df:
                    bd:d9:a2:c7:d9:e7:aa:c7:2e:dd:1f:fb:ea:b1:2f:
                    32:5d:08:e7:84:b5:29:79:f9:e1:a1:96:65:13:04:
                    62:e9:04:12:f2:33:13:64:b9:4f:1f:7e:92:95:b2:
                    9f:00:1b:24:74:d0:e0:b7:a5:7f:f7:32:ee:04:ef:
                    79:fa:6a:3e:eb:a6:23:5b:e3:1f:91:64:ae:74:5f:
                    d3:62:0a:25:bc:87:fd:93:80:71:82:92:1a:59:68:
                    b3:ff:8b:e5:75:7b:93:89:21:3a:e9:8c:66:41:17:
                    47:e0:30:98:01:98:92:96:3b:ab:90:49:3b:21:42:
                    7c:c4:87:52:91:fb:28:08:a8:9c:3a:9e:a2:9c:a4:
                    68:46:24:83:9d:11:93:d5:f0:94:17:4b:91:94:ef:
                    f1:fb:d3:9d:29:66:ac:e6:3a:0f:9d:e4:5a:75:e1:
                    95:0b:b8:b7:65:13:d4:6c:a6:69:18:bd:44:1b:d0:
                    8c:62:f7:bb:8c:99:2c:f0:31:24:a5:dd:f7:86:11:
                    8d:cd:08:12:c7:17:55:be:0a:c7:e3:b7:92:82:ca:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:31:1D:D9:9A:65:9A:33:08:91:19:46:C5:37:01:A0:54:FD:8A:0F
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/9D490526003B11ED8D290A30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:b0:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:a9:a0:ca:10:89:1c:5d:63:18:f4:a9:07:66:dc:34:3c:c1:
         0e:b9:b8:55:af:da:51:83:2a:7a:35:24:1c:55:d8:2c:a7:d6:
         45:f1:fa:83:86:d9:14:57:2c:58:9a:bb:b8:95:a7:31:2c:c6:
         96:05:46:4b:4e:2d:7f:9f:f5:41:f5:5c:f9:50:ea:5b:f9:71:
         4e:69:9e:38:36:f1:54:4b:f7:98:74:3e:99:69:b9:1b:12:69:
         17:34:56:be:d9:d3:31:7c:86:e9:7f:4d:2e:43:50:a6:0d:ff:
         81:97:48:aa:31:d3:63:ad:21:99:7b:33:42:4c:2c:7e:8f:f8:
         dc:e6:72:e3:0f:79:33:ce:be:f4:fb:ee:cb:aa:2f:2d:f9:76:
         16:af:7c:53:e6:05:97:4f:ee:c2:fd:6e:55:7f:b0:6e:b7:c0:
         90:0e:d7:c9:bd:06:12:06:6f:97:c7:93:2f:e1:53:dd:33:bd:
         c7:fa:e8:f8:5e:b4:88:49:c8:8e:88:58:d1:3d:b4:bf:26:08:
         2f:15:49:1e:8e:40:d9:94:4e:e1:83:c1:4a:db:06:51:a4:e2:
         80:be:ab:5f:c9:eb:2a:29:6a:5f:86:de:76:4a:c0:3e:c2:c7:
         51:19:39:d8:cc:1d:cf:4e:71:7f:3e:3d:fe:d4:62:c9:fc:c1:
         aa:43:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org