Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EB3FE5C924F11EFB20C515DC4F9AE02.roa
File:                     1EB3FE5C924F11EFB20C515DC4F9AE02.roa (raw, json)
Hash identifier:          aAT/94R8V8a6H3ASbqGyXee0COP067Ce/xVNeahwCBY=
Subject key identifier:   50:ED:6F:E3:B2:0B:D5:58:6E:6A:68:F6:08:97:8B:5E:45:0E:CE:E9
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       0683
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EB3FE5C924F11EFB20C515DC4F9AE02.roa
Signing time:             Thu 24 Oct 2024 21:29:59 +0000
ROA not before:           Thu 24 Oct 2024 21:29:59 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     8796
IP address blocks:        2401:2660:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Oct 24 21:29:59 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=671abc56-6da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:bd:4c:25:75:e1:b2:36:d5:5c:ee:2a:7a:
                    64:9b:91:ae:e9:79:1b:c5:ac:33:82:9b:13:fb:19:
                    f0:7b:40:0e:60:54:01:c8:11:c5:46:12:84:8a:94:
                    d7:32:79:fa:80:59:bb:bd:77:46:c9:34:92:14:aa:
                    e3:35:a0:31:cc:e4:38:b0:69:b6:f2:43:18:87:6d:
                    b0:b6:05:37:b9:44:dd:4e:d2:37:a0:33:29:c4:73:
                    28:04:54:47:39:bc:4e:f1:b3:3b:c9:ba:61:43:15:
                    b1:fc:81:e8:a4:cd:f6:fc:4f:2b:42:9f:02:fa:0c:
                    06:77:23:05:6b:40:ae:07:3f:73:12:d5:92:42:4b:
                    c4:6b:2f:76:6a:c5:24:50:2e:dc:46:8f:17:34:78:
                    4e:bc:d8:96:7e:34:99:6d:a9:3d:04:c2:72:9a:d6:
                    2b:78:a2:33:53:df:b8:f8:12:e3:fc:4f:44:6a:f7:
                    01:c4:23:be:8f:7a:f6:06:cf:d0:a8:16:aa:5a:3d:
                    72:6f:ff:9b:5d:73:9f:22:0e:55:71:45:73:d0:76:
                    00:7b:7b:5a:44:28:f9:16:67:ba:30:c2:07:cd:ae:
                    5f:ab:f1:ce:4c:46:40:f3:7e:fb:38:7f:c8:7f:69:
                    c0:82:1a:a8:38:d6:22:0c:37:d1:d2:9e:ff:02:0f:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:ED:6F:E3:B2:0B:D5:58:6E:6A:68:F6:08:97:8B:5E:45:0E:CE:E9
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EB3FE5C924F11EFB20C515DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2660:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a1:a1:04:77:bf:4a:36:9a:21:34:86:22:b2:c1:df:2c:a2:56:
         a2:1e:55:0a:44:9d:47:f9:b9:a0:2e:5a:25:3e:ef:f9:05:86:
         9c:e3:10:a5:00:b2:66:84:7d:ef:50:57:28:b6:e2:c9:3a:50:
         10:c0:8e:91:2e:45:95:72:73:31:2a:ae:3c:0b:7d:cc:63:25:
         e4:0c:7a:56:54:08:db:88:97:dc:aa:72:86:3b:ba:7b:ca:0f:
         8d:23:ae:de:6d:85:36:4e:84:9a:a9:30:85:46:2c:b0:23:69:
         10:15:51:1b:35:01:c9:25:56:44:fd:1c:f2:2e:57:2d:d5:d1:
         b6:67:db:10:70:52:d3:45:4d:a1:da:db:75:92:c8:6b:a4:02:
         0e:b7:db:b7:8a:9d:48:ff:82:fd:3c:23:a0:0f:31:75:66:31:
         08:81:43:65:fa:40:f5:5b:3e:4f:1d:85:31:dc:e8:1d:bf:77:
         8d:3f:21:62:8d:9d:5c:89:79:6f:a5:62:4e:8d:77:5d:42:32:
         f5:c2:68:4d:0c:11:31:3a:96:12:b1:f0:fe:fe:43:96:a8:7f:
         89:df:2e:47:25:50:f6:61:62:62:3c:c9:2a:2e:4c:e1:6e:2a:
         3b:ec:8d:d3:59:51:d3:47:a5:9e:97:a2:fa:1c:9c:5a:d3:27:
         66:29:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org