Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/459087B0C4A411EB90A2C754C4F9AE02.roa
File:                     459087B0C4A411EB90A2C754C4F9AE02.roa (raw, json)
Hash identifier:          FUvbvupZMSdGClwmyLJUN0LQUs/rAewHwV1Hd6aOfHI=
Subject key identifier:   E4:BF:17:B2:D3:FF:08:A5:74:F4:8D:E4:8A:27:10:18:D5:74:C6:52
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       125E
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/459087B0C4A411EB90A2C754C4F9AE02.roa
Signing time:             Sat 10 Aug 2024 17:44:48 +0000
ROA not before:           Sat 10 Aug 2024 17:44:48 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     16625
IP address blocks:        2406:3000:35::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4702 (0x125e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug 10 17:44:48 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66b7a710-564e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:77:23:87:59:c5:34:f0:d0:47:e1:00:f5:
                    a7:4c:1a:9a:e3:12:6e:d3:47:d3:0c:27:06:d7:22:
                    c1:b6:21:30:75:f6:ac:57:23:6d:7f:40:7a:8b:19:
                    de:30:5f:29:de:9e:cc:42:43:75:28:9c:6c:42:80:
                    65:fc:d9:10:5b:e8:53:e4:13:2a:fe:01:c8:5c:df:
                    31:61:90:7e:00:14:b1:c0:46:44:82:1c:1f:db:6a:
                    0e:4e:76:11:13:68:a3:fc:19:e7:6c:4c:c9:fa:73:
                    2e:cc:0a:72:35:0e:34:5b:60:73:28:72:87:5d:b5:
                    38:e9:1f:5a:4a:e0:6b:d7:7d:d4:2d:2e:0f:36:0c:
                    01:72:4a:ed:ea:81:b5:d6:86:b8:d3:1b:eb:b5:8b:
                    39:c1:c4:d8:82:94:57:b0:7d:5e:49:ec:d6:ea:e2:
                    1a:d4:2e:2a:3a:f6:5d:dd:89:c9:03:f8:61:2f:87:
                    e1:a9:6a:b7:00:ca:4d:94:59:98:ea:31:4b:a4:79:
                    b7:3c:65:b8:79:e2:68:47:32:f0:04:df:32:ff:a2:
                    7d:cf:4c:f0:1e:eb:48:ad:cb:0a:25:0d:fb:2e:c4:
                    5b:8d:d1:ca:c7:50:b8:ef:f8:38:12:36:d5:33:b0:
                    6d:64:89:b5:11:37:de:e2:0e:92:a6:c5:84:89:c9:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BF:17:B2:D3:FF:08:A5:74:F4:8D:E4:8A:27:10:18:D5:74:C6:52
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/459087B0C4A411EB90A2C754C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3000:35::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:bb:5c:09:53:d3:09:7b:a7:a5:86:ce:d0:20:31:74:e6:d6:
         b2:27:af:9a:4f:ac:56:97:88:9c:fa:5d:1a:5c:5a:1d:e3:10:
         94:98:a3:44:3e:59:0f:7d:43:a9:11:69:40:37:2a:bc:d2:0a:
         73:05:61:ba:cd:3a:75:a1:7f:65:1e:46:16:00:00:3d:04:19:
         34:39:44:be:6b:eb:75:28:25:66:c6:3d:a1:97:44:81:8d:9a:
         08:90:5e:a4:cf:b3:c5:a7:55:55:0b:b8:75:e2:17:e4:30:7f:
         d5:56:f0:05:d9:14:15:22:f4:8d:d6:fb:0a:bd:0c:62:f1:7d:
         a9:48:8e:56:05:83:5e:16:59:0a:4a:3f:e3:37:f4:c6:37:2d:
         9d:7a:19:f3:96:7d:0f:dc:72:94:b7:87:69:89:24:a0:a2:ae:
         4b:07:c2:7c:ae:08:37:9c:9d:ff:f6:78:a5:68:1e:bf:11:31:
         97:26:ea:a9:a3:35:52:9d:a5:9a:46:f2:ef:9b:d4:fb:d7:ad:
         bd:99:ba:e1:b4:97:e4:b4:52:96:bf:38:71:8f:8c:ba:8e:98:
         0a:c2:cf:6c:26:ef:c3:80:14:14:0d:3e:9c:e4:c9:72:0c:72:
         78:b0:5f:c4:5b:d0:e8:31:7c:b2:e0:98:b9:a8:d5:49:3a:ea:
         22:6f:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:16 2024 by rpki-client on console-ams.rpki-client.org