Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/F6FCB8E21B5011EF8BF0AD17C4F9AE02.roa
File:                     F6FCB8E21B5011EF8BF0AD17C4F9AE02.roa (raw, json)
Hash identifier:          vl+0zKb6RC1QCG54t4yq7igHrF//hZvIU2iFdByDI9M=
Subject key identifier:   C6:B8:62:59:87:77:20:D3:D5:99:7C:8A:92:C1:AE:38:68:47:DF:16
Certificate issuer:       /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial:       34
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/F6FCB8E21B5011EF8BF0AD17C4F9AE02.roa
Signing time:             Sun 26 May 2024 11:13:23 +0000
ROA not before:           Sun 26 May 2024 11:13:23 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     152606
IP address blocks:        2401:8660::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
                          rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
        Validity
            Not Before: May 26 11:13:23 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66531952-7828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:f9:6f:cf:7d:fd:e2:7e:1c:25:5a:e8:7a:
                    e5:03:77:f3:23:47:8b:7d:9b:29:30:2d:6a:c7:8a:
                    1c:31:40:33:9a:88:82:ef:c5:39:c4:6d:7d:e8:4f:
                    1c:cf:db:65:47:78:4d:42:c4:53:61:49:81:29:92:
                    66:0d:9c:ca:6a:9b:fd:4d:9a:8f:ce:a0:44:05:97:
                    14:92:3e:64:51:43:61:b2:82:48:0f:e4:84:fa:2d:
                    23:7a:12:d6:d9:a9:f2:8a:8b:b2:02:e1:1b:14:6a:
                    f5:cf:69:d4:65:3a:17:68:e0:aa:44:17:f6:a4:0f:
                    0f:7a:9c:ee:e2:d8:b3:74:f2:cc:13:2c:f3:28:fa:
                    79:6a:ea:d1:e6:16:bb:06:44:cf:f9:01:31:7d:25:
                    88:03:0c:b0:f8:bc:4b:40:9f:31:be:f8:e1:f9:d1:
                    40:73:11:90:c0:95:ef:b8:d0:65:75:9a:19:41:09:
                    68:d2:d1:db:9f:01:86:fa:52:d0:df:d5:85:2d:cd:
                    11:1f:26:90:3d:bb:23:c4:19:6d:8e:0e:9f:0f:46:
                    50:33:fd:26:7d:59:e6:fd:1c:73:71:4d:b8:ac:8b:
                    87:e6:df:de:99:16:a4:03:c6:c3:71:1c:ac:16:8f:
                    a5:0b:11:96:51:88:6a:d5:5e:d3:4a:61:c6:cc:0f:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B8:62:59:87:77:20:D3:D5:99:7C:8A:92:C1:AE:38:68:47:DF:16
            X509v3 Authority Key Identifier:
                keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/F6FCB8E21B5011EF8BF0AD17C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8660::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:69:69:78:05:aa:a9:e5:26:1c:9e:27:dc:f3:1a:a2:48:a8:
         f6:e0:f7:3e:e0:59:6a:92:73:c4:2c:a2:dc:41:13:06:13:d1:
         7b:d3:d9:52:37:46:7e:e1:c2:e1:a1:35:cf:69:d5:d4:ac:7f:
         e8:73:e8:3a:56:51:2c:5a:26:df:43:80:bb:c0:4e:7d:4c:d5:
         10:44:79:d2:9a:b9:db:c1:36:57:94:ad:1a:c6:09:f7:c7:08:
         13:b6:d4:0e:7c:24:47:8d:d6:53:4e:91:b3:ef:62:65:3d:ab:
         78:20:45:46:3b:35:7b:26:0c:be:64:cd:1b:2b:e5:22:99:7d:
         20:1b:77:dc:f1:fb:71:7d:8a:f5:77:21:fb:6c:d8:a8:0a:46:
         fd:82:10:c8:8b:99:33:84:32:00:a0:10:52:5e:41:ca:48:49:
         0d:6e:48:b2:1b:a9:64:d7:9f:69:c1:ff:c5:57:59:db:d6:4f:
         40:d0:82:4b:69:22:06:36:93:94:6a:63:cb:e7:dc:db:f7:f3:
         2f:a0:0a:08:93:39:cf:a8:ea:e4:fb:d5:eb:6c:f8:18:b9:02:
         dd:34:41:91:cd:4f:b4:94:cd:85:a4:ca:55:b1:1c:7e:b3:59:
         08:ed:86:c3:e3:7f:53:f8:55:93:89:05:58:6e:bf:86:e3:13:
         13:ab:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:14 2024 by rpki-client on console-fra.rpki-client.org