Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/DCFFE916452611EDA4853E62C4F9AE02.roa
File:                     DCFFE916452611EDA4853E62C4F9AE02.roa (raw, json)
Hash identifier:          cg0pTB0tQ3lVw+//8QI1VGIKFNM43Q8JPHW5fx5VAek=
Subject key identifier:   F0:10:C2:46:AE:64:D0:28:DB:E6:52:0D:17:31:35:A0:56:E9:66:9C
Certificate issuer:       /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial:       0A50
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/DCFFE916452611EDA4853E62C4F9AE02.roa
Signing time:             Tue 16 Apr 2024 20:59:55 +0000
ROA not before:           Tue 16 Apr 2024 20:59:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138195
IP address blocks:        2404:a140:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2640 (0xa50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
        Validity
            Not Before: Apr 16 20:59:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=661ee6cb-360d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:cb:e8:97:4b:0d:c1:50:58:53:51:78:a3:
                    79:08:10:45:51:20:47:70:93:34:8c:01:50:6b:9d:
                    e9:61:b8:3d:1e:68:65:19:d2:1f:a2:f9:06:c8:c1:
                    f3:97:fc:33:7a:04:e6:d7:a3:c2:56:d5:cd:04:d4:
                    a7:17:5d:16:35:3d:30:88:39:93:27:d7:24:72:78:
                    d1:63:81:ae:09:07:ce:e3:aa:18:9b:38:fa:f8:bf:
                    b3:27:10:cc:cc:52:2c:7e:c1:7c:ea:88:0b:a0:63:
                    24:fb:ac:a3:46:0d:48:b3:20:39:ff:06:14:61:ab:
                    23:16:5f:99:07:c5:80:95:61:db:5d:74:ca:e0:bc:
                    c0:b3:8a:36:1b:e2:98:01:d7:fe:6c:c9:58:84:35:
                    0c:57:97:a7:b4:a6:8d:c5:db:fe:d9:16:48:b5:b5:
                    d8:84:f0:22:7c:c5:25:83:cd:5a:12:38:6b:de:45:
                    e0:74:b6:b3:75:f6:52:58:ae:bb:43:6a:f2:74:25:
                    43:c5:6f:a2:5c:d1:c4:26:f9:94:f8:34:28:22:8e:
                    55:3b:7d:8e:56:ca:8b:33:5d:e1:a0:54:4a:a1:01:
                    3b:80:8b:f2:27:92:f7:cf:71:a7:0d:4e:44:48:17:
                    0d:0b:94:2e:db:49:23:f1:ac:95:09:ff:0f:f3:90:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:10:C2:46:AE:64:D0:28:DB:E6:52:0D:17:31:35:A0:56:E9:66:9C
            X509v3 Authority Key Identifier:
                keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/DCFFE916452611EDA4853E62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a140:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:5f:5b:bb:4b:3a:6b:c6:f2:b8:f6:e8:42:53:90:f1:fe:
         d0:6f:7c:06:0e:77:43:cf:73:af:2c:18:24:7a:04:0e:17:bc:
         7f:fe:07:17:61:41:12:b7:48:47:a6:b0:ac:b2:b4:b2:9b:0b:
         c3:95:17:7a:aa:dd:0e:85:42:71:01:69:94:a9:68:d6:ad:47:
         88:62:8e:94:df:43:00:4b:b3:33:69:da:c6:d8:24:80:4a:40:
         c7:d9:1b:41:bc:a0:cd:48:55:5b:b7:b1:5f:35:be:97:ce:36:
         da:18:f5:84:77:81:46:8c:46:be:13:7e:48:c2:a3:0f:81:c5:
         01:bb:8d:67:77:b5:cd:54:b4:44:ba:5c:0d:77:f7:97:01:90:
         d7:b0:5e:de:35:62:c5:50:3e:66:82:45:56:19:66:b1:cc:d7:
         e7:73:37:0d:65:fb:67:c9:de:05:40:e1:e3:3d:ae:55:6f:6a:
         89:0e:70:ac:54:ba:af:72:55:c4:4b:fe:b5:0e:28:44:34:d4:
         73:e7:5d:e6:4a:db:61:99:10:56:54:cd:4c:cd:33:58:f1:9f:
         c0:bd:da:b2:f3:97:14:ff:d7:61:74:f9:e5:bd:54:90:85:2b:
         82:d6:f2:c3:b3:51:2e:c7:81:92:64:9e:43:0e:c3:1c:66:ea:
         93:a0:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:46 2024 by rpki-client on console-ams.rpki-client.org