Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/86B7624062FE11EEB277647CC4F9AE02.roa
File:                     86B7624062FE11EEB277647CC4F9AE02.roa (raw, json)
Hash identifier:          ju5JyrFx3QMBkBKEHYJiAiwk+yeEJfkrgdj7RoSr48w=
Subject key identifier:   35:49:E3:44:D7:7F:03:48:81:3D:67:BC:49:F0:66:10:57:36:C1:4F
Certificate issuer:       /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial:       106C
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/86B7624062FE11EEB277647CC4F9AE02.roa
Signing time:             Fri 02 Feb 2024 18:06:20 +0000
ROA not before:           Fri 02 Feb 2024 18:06:20 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     135106
IP address blocks:        2404:5c0:2800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
                          rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4204 (0x106c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
        Validity
            Not Before: Feb  2 18:06:20 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65bd2f1b-7d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:75:62:56:d0:d3:78:7b:21:30:60:9f:5f:
                    ab:1f:c5:6b:81:0c:00:e8:c6:96:60:4f:29:66:9b:
                    78:5c:48:12:2a:1e:e7:b5:97:67:88:1c:54:64:dd:
                    50:1b:87:c0:fe:c0:13:c9:7d:48:d7:51:56:da:e9:
                    69:ce:c8:c8:9e:b7:15:f7:50:9a:ab:e9:e7:1f:7f:
                    22:c7:45:c4:97:29:e5:f9:0d:62:af:09:7b:40:70:
                    96:c6:cc:6f:4b:7e:ee:0d:29:98:17:51:17:19:55:
                    9e:ba:b3:2b:cf:33:fb:f9:34:8d:73:5c:a5:49:57:
                    97:f5:5c:14:20:31:ac:f7:17:58:f9:0b:3b:77:78:
                    f6:22:36:9d:9f:e1:df:b5:3b:06:dd:cc:72:f1:6b:
                    53:da:74:37:d0:67:d3:90:ab:27:71:67:d6:a4:35:
                    8e:c8:38:57:3c:ef:03:2e:eb:1a:10:5f:0e:ff:96:
                    6b:ac:87:33:5e:84:13:b0:8a:a3:6e:37:ee:f9:4e:
                    ae:e2:e8:92:79:75:de:2d:12:a4:b8:0c:3a:bf:20:
                    e0:60:0c:c7:04:3a:53:80:ff:a2:a0:35:2e:0d:8a:
                    bc:32:69:29:98:0b:74:57:ba:89:0d:b0:48:7f:46:
                    72:fb:4b:b8:bc:e3:6d:ae:e2:d0:2f:91:28:22:09:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:49:E3:44:D7:7F:03:48:81:3D:67:BC:49:F0:66:10:57:36:C1:4F
            X509v3 Authority Key Identifier:
                keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/86B7624062FE11EEB277647CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:5c0:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:45:b1:8a:ba:a5:08:6a:a5:46:52:9e:70:a1:22:e3:ee:
         fb:69:d5:cc:c7:ea:24:05:09:20:58:83:72:46:d3:78:bc:38:
         9a:8e:af:d1:73:6d:89:9a:db:73:b6:a8:be:a6:c7:3b:6c:51:
         a0:c3:fe:2b:84:73:bd:84:e9:d2:87:c0:ff:64:81:02:e0:59:
         b0:6b:c0:87:48:58:5d:f1:89:17:b0:7e:cd:4d:7e:5e:37:3b:
         bf:36:b0:b8:d9:1d:7b:10:d1:f8:04:01:ae:9d:40:be:94:ce:
         18:28:da:7c:f8:e9:e5:20:34:09:d2:07:ca:11:34:6a:1f:09:
         da:7c:d4:53:2e:b9:4e:01:5d:a6:bf:e8:32:37:8f:ed:aa:53:
         9c:53:1f:b5:9e:7a:6c:63:4b:0a:e0:43:d1:6f:df:bb:d4:46:
         62:40:a5:c1:7d:26:6d:78:c5:27:58:08:19:2b:3f:cf:17:86:
         f3:75:6d:cf:45:9d:a4:ac:df:59:e4:9e:90:d9:a4:b6:dc:03:
         e0:18:ea:6d:84:4c:e6:43:87:7b:33:95:65:46:fe:c5:5a:2e:
         5e:0a:4e:45:05:ec:45:9b:0f:ef:11:53:6e:b4:c2:7f:73:6c:
         95:6d:20:df:96:a7:aa:e2:8b:44:46:5a:12:8f:8e:aa:d2:87:
         d4:db:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org