Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
File:                     CE24A9DE739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier:          xL/k+TfCwLayKxswmt54aytLjEtFObnRK+hDRvj6xls=
Subject key identifier:   03:96:79:D0:73:3A:74:D9:C0:A8:0B:6C:B2:51:D3:F0:55:D9:5C:A6
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       04
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
Signing time:             Thu 26 Oct 2023 00:15:45 +0000
ROA not before:           Thu 26 Oct 2023 00:15:44 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     7718
IP address blocks:        2401:3900::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 07:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Oct 26 00:15:44 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6539afb0-b5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:28:b5:b4:78:f2:e7:30:6f:05:ed:49:94:
                    5e:bf:56:f7:aa:20:0a:73:3e:c6:2a:22:2c:f8:9a:
                    ba:2f:4f:4e:61:8a:53:58:8c:28:0e:9a:6f:93:38:
                    95:aa:b3:4f:5a:4b:5c:cf:9e:e9:a4:bf:8d:17:31:
                    ab:d1:ce:87:4a:8c:1d:f0:d9:e7:79:e3:d5:62:6a:
                    4b:57:8c:c9:cc:b0:94:d9:1d:7d:ad:17:e9:c5:81:
                    a4:0c:02:7e:eb:e9:31:f3:9d:fc:35:f6:fe:b6:bf:
                    21:4c:2d:ae:5c:7d:5c:61:55:42:73:d1:0c:21:1c:
                    cb:9c:a0:2f:69:8c:5f:14:e7:c9:58:32:4a:44:1d:
                    42:a0:e2:56:f7:b9:15:80:a2:c2:6b:5e:4a:f2:d1:
                    ea:51:e8:13:85:18:b4:84:86:d1:20:1a:4e:9a:a1:
                    5c:8f:53:f4:a7:fa:60:39:34:1e:6f:b7:7f:b3:fe:
                    83:1e:24:0c:65:3a:b4:61:b5:49:77:31:35:97:73:
                    6f:20:ae:0a:27:b9:0e:16:af:d7:17:7e:96:64:c4:
                    bc:51:32:40:fc:bc:2d:12:f5:81:0f:17:80:15:f8:
                    49:2f:75:7d:f0:81:06:6d:c5:13:12:da:fa:dd:21:
                    cd:44:04:32:44:0a:7e:0a:51:9f:c4:61:e2:d5:68:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:96:79:D0:73:3A:74:D9:C0:A8:0B:6C:B2:51:D3:F0:55:D9:5C:A6
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3900::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:50:31:0a:46:53:05:7a:fa:e2:06:fd:48:f6:13:94:cc:50:
         44:54:b6:5f:f6:8b:8b:76:9c:aa:e1:37:79:00:69:a1:54:3e:
         33:25:4a:42:ee:0f:95:31:f8:7b:a1:eb:20:fb:cb:bf:ab:1b:
         10:d8:47:ff:5c:a4:a0:bb:dc:ac:7b:1e:83:a8:40:7d:64:4e:
         43:b4:cf:85:42:53:63:3b:fc:bd:12:38:12:8a:7f:60:03:08:
         13:74:70:b6:7c:7b:5f:af:39:cd:46:43:23:53:24:be:05:49:
         04:95:30:73:ed:f0:58:71:67:f3:04:68:59:ef:59:da:63:d7:
         d1:d2:a2:d6:70:0f:7d:61:70:e2:ec:e8:e0:be:77:67:56:71:
         f9:cd:df:08:97:6f:08:8a:34:c1:7e:04:8f:a4:34:ca:e1:f8:
         31:60:0a:bf:ea:7e:39:7c:ff:1c:62:4f:b3:8b:32:79:c2:5b:
         b5:9e:f4:e3:c7:56:c0:32:41:af:36:11:e8:89:ae:e2:05:ff:
         23:d9:cf:1c:95:36:ca:7a:c5:9e:0e:6d:b9:32:68:5e:b5:72:
         21:15:df:ac:4d:bf:f0:08:d2:c8:f3:1a:b7:24:09:f3:9a:45:
         de:21:6d:24:6d:b5:67:55:a0:be:54:25:88:ab:3f:7c:94:63:
         25:3c:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 11:22:49 2024 by rpki-client on console-ams.rpki-client.org