Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa
File:                     AE977DF8337E11EFB3CCD72FC4F9AE02.roa (raw, json)
Hash identifier:          plIi+41lWpb6w3VNKuTTjFw/cUn/OAD0m7eyUjEewck=
Subject key identifier:   C2:FE:11:F2:17:19:D5:18:7A:17:EE:51:AC:52:5E:C7:B9:4B:00:1E
Certificate issuer:       /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial:       04
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa
Signing time:             Wed 26 Jun 2024 05:41:06 +0000
ROA not before:           Wed 26 Jun 2024 05:41:06 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     135302
IP address blocks:        2402:1300::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
                          rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
        Validity
            Not Before: Jun 26 05:41:06 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=667ba9f2-ef0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:a3:61:45:18:9c:cc:2b:c9:a8:1b:cc:a6:
                    ac:c1:e9:8e:6c:95:84:58:4a:a2:fb:5e:ca:d1:12:
                    d0:de:67:57:0a:69:53:b8:25:35:81:b0:50:bf:a2:
                    bf:8b:0b:02:c2:b3:84:78:f2:c1:91:66:7d:89:ff:
                    d5:a4:4e:4b:20:1c:ca:d9:84:d5:d3:16:0a:2e:98:
                    e8:70:8d:38:11:d0:5e:43:22:76:25:a1:56:b8:5f:
                    51:60:67:db:cf:48:df:15:6a:38:99:89:3b:2e:3e:
                    0b:39:e3:76:bf:10:a0:06:9e:09:0c:b2:79:17:9e:
                    dd:29:37:62:35:aa:f5:0f:ff:47:aa:98:d1:58:f7:
                    4f:1b:e5:fe:1a:fa:22:39:a8:ad:94:7b:a9:94:47:
                    d8:04:d0:66:16:4a:70:d2:0c:d1:8b:75:de:04:95:
                    8c:eb:05:46:9d:39:42:55:7b:cd:6c:23:15:e5:4b:
                    2b:af:c5:81:83:cb:3d:1a:27:3e:5f:e8:0c:cf:18:
                    f8:ab:8d:3e:33:a9:e6:e3:5c:52:41:a5:9d:60:75:
                    5f:7f:fe:5a:7e:8b:57:ac:d0:79:f3:aa:cc:13:f3:
                    0b:de:b8:54:20:73:95:bf:34:23:46:69:9a:31:f6:
                    15:66:94:d6:b9:ea:9d:16:a4:0d:dc:83:4d:8c:1e:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:11:F2:17:19:D5:18:7A:17:EE:51:AC:52:5E:C7:B9:4B:00:1E
            X509v3 Authority Key Identifier:
                keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1300::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:5a:33:c7:1f:02:b1:bd:2d:d1:96:19:8c:31:f9:b1:b4:4a:
         0e:78:cf:33:3a:b9:0c:ce:39:34:23:70:36:60:86:4e:9e:a3:
         50:52:a7:71:b6:83:f1:6b:8b:26:9f:16:fe:44:fc:b2:a0:0b:
         04:e2:57:02:40:94:64:43:d7:6b:d0:a7:6e:2d:5c:92:f3:a7:
         ec:39:8d:7e:6b:57:08:ec:68:ca:cc:d6:58:b0:1b:f0:82:87:
         6a:df:e5:87:e7:d0:4a:71:bf:81:8d:ea:40:e0:b2:ef:00:db:
         8c:90:e9:85:e4:99:57:d0:8d:73:36:99:b9:97:d3:bc:d0:59:
         55:f0:d5:59:dd:88:d3:a9:4e:e9:72:4e:4e:dd:9f:66:a7:e8:
         21:1e:bc:94:c2:83:22:d1:52:a4:7b:2b:4f:82:d4:11:31:a8:
         b9:16:f6:4a:4f:1c:8d:03:87:26:c4:ac:ba:cb:c9:9c:ca:4b:
         45:4c:2c:82:ff:24:39:ea:98:9b:4b:8b:4a:02:3b:9b:a8:14:
         18:77:6b:82:ed:3e:ce:e3:b6:83:f1:aa:6b:33:a2:fa:ba:34:
         a1:4f:8c:96:65:82:52:d3:71:04:be:fe:28:23:90:94:e2:ff:
         92:ea:fd:a4:4e:0c:80:33:68:28:75:43:b6:df:47:c5:d9:7c:
         db:3b:2d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org