Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AA730ACCBCFA11EDAD328D3AC4F9AE02.roa
File:                     AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (raw, json)
Hash identifier:          WToU+UpRxbQJKSr2QGut5hwA296t8z/pXjsZxqDqyvg=
Subject key identifier:   BF:9F:6A:94:E2:E6:A8:CB:19:4A:70:25:3A:8F:7C:2A:C1:92:C7:2E
Certificate issuer:       /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial:       02BB
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AA730ACCBCFA11EDAD328D3AC4F9AE02.roa
Signing time:             Sun 21 Apr 2024 03:45:27 +0000
ROA not before:           Sun 21 Apr 2024 03:45:27 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     150318
IP address blocks:        2401:1740:c01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
                          rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
        Validity
            Not Before: Apr 21 03:45:27 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66248bd7-462d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:9a:4c:fa:e5:c5:cf:16:db:ba:b1:dc:ef:
                    33:e6:90:6b:58:e3:ba:a5:f9:57:87:ac:e4:71:f5:
                    a5:7c:c0:39:b9:a3:8e:f7:f6:3a:b7:cb:c5:63:bb:
                    46:7a:7a:39:d8:08:6a:93:ef:1f:5d:e3:06:c9:be:
                    fc:cc:c0:43:dc:51:81:a8:16:fc:d8:df:fe:48:fb:
                    09:01:e7:77:f6:0c:6c:74:a5:2b:2d:56:fe:7b:6d:
                    38:64:5d:ff:db:6f:0c:c3:1d:6d:97:45:80:66:ef:
                    19:95:bb:08:23:7d:d8:d2:dd:77:67:dd:be:08:9e:
                    44:99:ef:ab:64:f8:87:49:a1:1c:1d:70:e5:ef:34:
                    7d:11:24:90:fe:25:10:2b:3d:15:fc:15:6f:91:ac:
                    5b:56:9e:0f:8b:37:2a:49:18:65:dc:99:83:38:94:
                    28:5d:74:c5:78:58:c1:9e:46:15:bf:e5:b2:e5:f4:
                    2c:71:64:6b:20:1f:55:68:a2:90:2d:fe:9b:b0:9b:
                    c2:4c:a7:3e:ea:28:25:27:cd:4e:ed:a5:c4:63:f8:
                    d6:18:75:1f:f4:1b:1b:35:13:ab:7a:46:01:27:f4:
                    b6:b4:1a:c3:99:0d:f4:05:30:8a:f9:a6:51:14:73:
                    b9:37:60:6c:31:cf:36:26:ef:53:79:ee:79:3b:a6:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9F:6A:94:E2:E6:A8:CB:19:4A:70:25:3A:8F:7C:2A:C1:92:C7:2E
            X509v3 Authority Key Identifier:
                keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AA730ACCBCFA11EDAD328D3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1740:c01::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:e8:39:aa:79:cb:bd:71:d4:52:b4:fe:7c:33:c7:a5:ae:d8:
         af:8c:ca:7c:0c:fe:de:32:6d:fd:90:54:37:ad:52:e2:36:e9:
         1b:5d:77:23:46:88:75:8c:e6:12:8b:65:8e:6f:4d:8d:d1:6c:
         5a:d0:40:c7:51:c1:52:47:2e:bb:96:8c:05:16:c4:78:eb:a9:
         f8:61:9a:1d:82:10:26:12:e3:60:85:e3:97:a3:34:7a:01:d5:
         29:a1:bb:46:eb:85:e2:b2:a9:73:6d:d8:e3:e5:6a:bf:ba:51:
         96:4b:5d:17:85:6a:f0:29:6c:2a:bb:cb:61:15:9a:ff:f7:1f:
         93:76:d0:9a:49:d0:88:ea:5c:da:18:ba:63:9e:45:b9:15:e7:
         33:01:98:3b:62:d9:b1:64:23:20:5f:4d:71:4e:63:5c:c9:a6:
         58:02:06:40:c6:c0:aa:60:53:6a:67:a2:6d:14:63:55:2c:4f:
         1e:e1:7f:ac:e6:a6:61:07:e7:b4:04:7e:24:ce:58:44:3e:91:
         c1:c5:13:8b:ca:59:47:10:ef:96:52:17:63:16:01:54:92:8a:
         13:1b:38:9f:ef:d6:9c:3f:b0:71:fc:62:29:0f:82:e3:7c:76:
         37:80:f9:b3:57:6e:6a:b1:84:c7:a2:70:c2:d3:5b:0b:23:c2:
         e7:f5:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:53 2024 by rpki-client on console-fra.rpki-client.org