Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa
File:                     6023AFB22F5F11EEBE311577C4F9AE02.roa (raw, json)
Hash identifier:          DST7aY8U7pn+fcW6ISk7J3CqqppEvOX29fKYTnqiYaI=
Subject key identifier:   ED:C6:D6:BB:43:67:80:F5:12:F2:EA:55:AF:D4:65:3A:30:0C:0A:D5
Certificate issuer:       /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
Certificate serial:       0112
Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa
Signing time:             Thu 11 Jul 2024 04:55:55 +0000
ROA not before:           Thu 11 Jul 2024 04:55:55 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     7674
IP address blocks:        2401:4640:170::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl
                          rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
        Validity
            Not Before: Jul 11 04:55:55 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=668f65db-af4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:d4:94:46:aa:24:4a:a2:b3:ba:04:6a:b1:
                    c3:76:22:f0:98:6f:ec:72:b1:85:96:5d:c7:d3:8b:
                    43:38:cb:5a:93:32:10:5a:eb:d8:93:2f:10:02:17:
                    00:48:8f:c0:e2:e3:f6:e5:18:4e:7e:bf:ce:c0:12:
                    06:4b:48:28:4e:19:65:1b:eb:8f:f7:a2:fa:ba:ba:
                    0d:70:c6:0e:64:5b:8d:da:76:3c:14:29:69:ff:ef:
                    80:89:f7:87:d6:30:71:80:f7:61:86:bd:f2:71:93:
                    f3:2c:f3:0c:4a:08:e1:b2:97:80:88:b2:a9:79:0e:
                    9a:f8:67:78:78:dd:d1:a8:23:71:76:9d:b9:33:28:
                    97:e6:7b:5d:eb:fb:2d:56:5b:6e:69:91:92:47:9c:
                    bb:d9:5c:bd:e8:70:10:e2:f3:97:6c:8a:31:f1:7d:
                    25:24:6a:6b:b4:4f:cf:40:f7:29:a0:d8:b3:3e:31:
                    ae:a7:c4:0f:c9:95:bd:cf:40:e8:87:75:e8:60:5f:
                    35:2b:f3:e6:ff:6b:69:f0:9f:24:00:68:d3:42:95:
                    86:89:b8:19:35:17:b8:f0:f0:87:75:4f:89:94:4a:
                    09:e2:04:56:a2:a8:af:f5:23:46:25:bb:a0:23:5c:
                    53:e2:49:1f:7d:0e:1d:b0:3e:51:fd:bc:14:9e:4b:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C6:D6:BB:43:67:80:F5:12:F2:EA:55:AF:D4:65:3A:30:0C:0A:D5
            X509v3 Authority Key Identifier:
                keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4640:170::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:f4:fd:0c:22:69:ba:2f:23:4b:7e:72:74:16:2e:b6:47:0f:
         db:bf:14:10:fc:47:ca:8b:ce:e0:14:37:34:6e:7e:c5:05:3d:
         d0:3d:58:44:8f:a9:4e:25:4b:23:ef:2b:4c:30:cd:a0:5d:23:
         bd:66:7b:66:c2:08:ec:41:01:f6:ad:da:00:95:d4:bb:2b:72:
         50:1a:e2:fa:d8:15:69:d7:10:11:23:47:11:df:b0:7b:e9:15:
         42:98:1f:22:b7:3f:81:56:d8:ae:7f:78:7d:f7:ee:b5:a0:05:
         60:10:13:34:ce:f1:dc:3e:0b:20:82:12:d7:2e:3a:31:1c:30:
         e1:23:eb:05:26:83:8c:b8:ad:31:8c:d3:0a:64:09:d9:26:67:
         3c:f2:57:a9:bc:31:d1:ca:c6:16:da:43:f4:21:c3:b3:2f:e9:
         90:3a:a5:8a:7d:3c:86:98:24:ae:8a:87:8f:4a:88:a0:af:da:
         03:a0:c5:cc:25:0b:82:04:4a:08:14:a6:f2:39:2a:e1:12:7c:
         a3:28:85:10:a2:ab:1b:7e:95:e9:33:d0:18:c3:2f:86:fc:18:
         ef:2a:b3:fa:35:e5:3d:ec:9b:e9:61:e4:f9:86:33:c0:ab:92:
         5f:bc:be:3d:63:e3:93:39:e9:c1:9a:f4:05:ee:f4:3d:23:3a:
         f9:21:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org