Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/8B584EC2337D11EF9D71B72DC4F9AE02.roa
File:                     8B584EC2337D11EF9D71B72DC4F9AE02.roa (raw, json)
Hash identifier:          /YUxnx7XKt88d6KR3YrNJ+z6x4A8VeRz9jNPl+bg9ic=
Subject key identifier:   08:D0:9F:2D:40:B3:4F:00:3A:C2:01:B2:11:D8:40:78:5A:72:35:B9
Certificate issuer:       /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial:       02
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/8B584EC2337D11EF9D71B72DC4F9AE02.roa
Signing time:             Wed 26 Jun 2024 05:32:57 +0000
ROA not before:           Wed 26 Jun 2024 05:32:57 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     38716
IP address blocks:        2402:1300::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
                          rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
        Validity
            Not Before: Jun 26 05:32:57 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=667ba809-6145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:66:4a:56:5b:96:0d:6d:0a:7f:1f:1e:37:
                    d4:4e:c1:d5:91:51:c3:4c:56:a9:93:2f:15:10:3f:
                    aa:b8:c6:59:1f:07:c2:b6:41:fd:ea:cf:e0:62:62:
                    47:5a:af:8f:36:e8:19:bb:31:70:fc:bc:6a:69:2f:
                    36:a7:40:1a:bb:ab:e4:00:b0:b1:26:8c:b1:b4:04:
                    5e:58:46:d7:37:9d:cd:17:c4:18:2b:52:81:29:5f:
                    24:04:71:ba:4e:7e:02:4f:47:fe:58:ec:23:ca:de:
                    34:41:cd:9e:e4:36:e2:c6:50:4f:2e:5f:9d:c0:65:
                    13:6c:12:80:85:7a:05:1a:ae:3e:c5:07:39:b6:37:
                    a8:24:8b:1c:ed:5b:f4:74:90:80:e5:f9:0e:a7:2c:
                    61:19:11:da:d8:7c:d0:0d:c3:e0:50:7b:ae:cf:07:
                    c8:3a:58:0c:35:03:de:de:47:e7:50:39:cc:4a:ec:
                    d1:7a:6d:3a:cb:c3:40:36:f1:12:7a:20:03:eb:6e:
                    5e:3d:49:78:8d:37:83:81:49:1b:34:bb:64:35:33:
                    1f:22:c6:bb:6c:61:8b:7b:6b:1e:ee:22:66:53:4c:
                    61:96:2c:d3:b6:81:27:2a:28:df:17:23:4d:2e:10:
                    a7:c2:76:bc:03:de:c2:50:0f:e9:8d:26:54:e0:1a:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D0:9F:2D:40:B3:4F:00:3A:C2:01:B2:11:D8:40:78:5A:72:35:B9
            X509v3 Authority Key Identifier:
                keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/8B584EC2337D11EF9D71B72DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1300::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:a1:4e:89:b4:b5:0b:27:8d:08:b1:37:70:0c:65:86:40:
         a3:e1:08:23:dc:16:7b:94:58:c7:96:27:99:8d:81:80:4c:ad:
         47:3e:46:5b:e2:e0:10:a2:5d:f9:a9:2b:3e:69:d4:c1:2d:9b:
         13:27:6b:38:ec:fe:98:d5:59:a6:18:26:76:18:52:77:7f:67:
         db:3b:10:b1:28:29:1b:f6:2c:f1:63:3f:93:05:70:e8:ac:f9:
         d8:17:3c:79:9a:df:aa:53:99:22:96:91:e3:d4:f1:17:32:1a:
         33:0c:e6:79:59:55:3b:c3:74:cc:3c:23:82:2a:2f:e3:f0:0d:
         e7:a6:4e:42:10:44:6c:3f:de:b5:4c:32:16:88:41:38:0c:e7:
         7e:c8:9b:d6:37:1e:d1:fd:94:c6:7e:b9:51:14:2d:f1:49:5a:
         7a:2a:4d:de:e7:f6:9b:b9:21:00:3f:6b:c5:4d:83:d0:d3:8a:
         f4:9c:6b:21:29:99:f4:46:72:14:81:44:72:ab:61:4f:07:a4:
         10:fb:e0:19:a7:1d:f8:cb:26:3f:9b:e4:1b:17:ec:73:8f:ce:
         69:6f:ac:16:ac:04:08:d0:0e:6a:d3:5d:d6:2c:21:6f:22:8b:
         3d:af:0d:45:82:16:8b:ee:b7:7d:b7:b7:45:b6:4e:8e:6b:1a:
         ab:26:7e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org