Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/459087B0C4A411EB90A2C754C4F9AE02.roa
File:                     459087B0C4A411EB90A2C754C4F9AE02.roa (raw, json)
Hash identifier:          8jB7az11QBIVDMdvvKYE1NF4mzJHhMvUa+4DRumMSHE=
Subject key identifier:   6B:69:17:7E:31:A8:73:09:EC:56:43:F0:9D:AC:F7:87:7D:63:82:9A
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1187
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/459087B0C4A411EB90A2C754C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 17:55:16 +0000
ROA not before:           Tue 12 Sep 2023 17:55:16 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     16625
IP address blocks:        2406:3000:35::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4487 (0x1187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Sep 12 17:55:16 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6500a604-8707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:68:56:2e:20:b1:ee:3a:38:dc:a5:ca:e6:
                    85:b5:93:1d:19:91:3a:73:6f:12:e5:cb:47:56:fa:
                    0f:c9:d7:76:19:56:45:2c:2e:0f:05:85:64:f7:a2:
                    b2:26:bd:fa:96:76:58:a3:ff:db:d9:c8:9b:ab:38:
                    46:33:28:37:ac:78:03:7c:00:0a:7a:0f:33:cf:b9:
                    4b:40:9f:98:c7:c5:9a:a0:d7:ce:24:cc:64:1b:e6:
                    52:6b:a9:c1:bd:88:6d:1b:f1:a5:f8:0d:0a:e7:c9:
                    32:ca:96:24:8a:f7:63:e6:ec:0a:2f:e6:c3:54:ce:
                    07:1e:da:5a:60:4d:07:80:03:c3:40:59:fa:28:65:
                    5d:b5:9d:55:d0:2d:1d:da:71:d3:2e:5c:76:1f:87:
                    61:e2:52:d7:1f:4a:9a:bc:b4:0a:3d:cd:1e:71:6d:
                    29:cd:1d:14:45:d4:e2:66:88:cf:b1:e8:e9:93:06:
                    65:d4:aa:29:2f:a7:e4:37:26:dc:28:10:82:f5:ce:
                    8e:f5:cb:c6:6a:d3:5b:bf:9d:62:84:c0:b9:99:e4:
                    53:b1:d4:54:11:74:7f:cc:d1:05:5b:4a:21:72:75:
                    6c:5d:fe:ac:3c:d2:a8:d0:02:fa:ae:d9:10:19:71:
                    29:e1:1e:fd:9e:dd:42:7f:3d:95:74:7d:3c:74:63:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:69:17:7E:31:A8:73:09:EC:56:43:F0:9D:AC:F7:87:7D:63:82:9A
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/459087B0C4A411EB90A2C754C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3000:35::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:84:10:74:6d:aa:0d:5c:15:e3:d9:ad:bb:08:1a:04:24:f0:
         80:2c:f9:7c:52:21:fa:20:13:12:d7:23:e7:6c:43:0e:fe:45:
         81:95:21:a8:c2:13:63:1f:88:86:1a:22:75:9b:be:e3:c2:a5:
         db:ac:18:e1:92:f4:78:0d:44:b6:d4:5a:2b:cd:1c:de:e3:af:
         c5:69:23:ff:82:8b:58:0c:35:2b:12:1a:0b:6e:a5:73:70:f5:
         84:a7:af:ea:77:45:28:8f:29:76:5b:aa:8b:a6:0a:a8:ef:e2:
         28:70:95:51:10:e0:6d:4f:fa:9f:f6:2b:22:ac:1f:8b:78:d6:
         00:1f:8e:a9:d3:f4:a6:70:26:44:5c:c5:a5:7a:ff:d2:20:8a:
         2c:8e:b1:ea:95:ad:5b:3a:ec:7d:46:94:ed:e4:62:9a:e8:72:
         31:c6:49:85:3a:86:52:72:ef:f2:ed:05:05:1b:8c:77:88:ea:
         d5:ba:1c:3a:2c:c4:70:a2:88:58:01:06:38:8d:a2:09:d9:ad:
         2d:e8:f5:f2:48:cb:05:10:d3:f6:f2:f1:69:f3:16:b3:82:fa:
         02:ed:78:2c:0a:b2:85:dd:73:08:81:07:99:eb:19:a2:3c:52:
         69:03:b4:b6:ff:ee:c2:f2:ed:ce:6c:68:1d:08:5d:08:59:4e:
         d0:07:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:40 2024 by rpki-client on console-ams.rpki-client.org