Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/47854B9031DB11EEA02CF647C4F9AE02.roa
File:                     47854B9031DB11EEA02CF647C4F9AE02.roa (raw, json)
Hash identifier:          vZyDruUuGk4hx5G1OpTn2aVtFxEyPcTfQBZ971Jhif8=
Subject key identifier:   75:44:0F:69:DE:15:63:C9:A0:41:99:8E:65:56:8F:5C:7C:9D:A4:E2
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       37
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/47854B9031DB11EEA02CF647C4F9AE02.roa
Signing time:             Sun 29 Oct 2023 05:57:10 +0000
ROA not before:           Sun 29 Oct 2023 05:57:10 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     149778
IP address blocks:        2405:4cc1:300::/40 maxlen: 40
                          2405:4cc1:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Oct 29 05:57:10 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653df436-8d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:a3:11:d6:cc:a8:0f:fe:99:f9:e0:1c:b4:
                    1a:3d:4d:04:8e:5a:4e:fd:6b:03:71:95:69:d7:31:
                    8a:e1:23:9f:93:42:a6:44:50:6a:06:50:f6:91:24:
                    cf:4c:7c:d5:54:4b:86:5c:3c:ef:48:1f:ac:af:52:
                    88:5d:5a:da:c7:47:5a:07:01:a3:5f:97:33:27:2c:
                    d6:ca:81:37:75:74:20:2d:c0:1f:ef:42:49:6a:3a:
                    c5:78:c5:04:34:64:3f:0b:f7:cb:97:90:3c:29:03:
                    25:21:f2:fc:3e:b7:54:32:80:62:0c:55:d1:de:23:
                    42:df:91:10:9b:f4:6a:10:ce:65:c8:23:ff:29:80:
                    f9:2b:52:8f:e9:98:61:4e:36:d5:b8:95:40:7c:66:
                    69:a3:90:20:2a:a3:08:4e:57:4c:9d:42:ec:4e:03:
                    31:73:2b:86:ea:bb:79:07:06:c1:62:be:42:d7:22:
                    5e:43:69:36:af:cf:89:41:a8:c9:06:d6:32:d4:b4:
                    28:cf:c8:c9:fc:bf:a0:54:cb:05:0a:24:aa:ec:f4:
                    a9:b2:ba:a9:19:f2:dd:8d:31:87:b2:8a:10:00:1e:
                    42:d4:44:0d:7f:66:5f:11:20:7c:3b:7e:4a:06:d0:
                    21:6f:42:f2:3e:86:38:26:ea:58:f4:46:25:90:58:
                    27:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:44:0F:69:DE:15:63:C9:A0:41:99:8E:65:56:8F:5C:7C:9D:A4:E2
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/47854B9031DB11EEA02CF647C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:4cc1:300::/40
                  2405:4cc1:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:d6:e3:a6:7e:c7:af:9b:74:5f:f2:89:f6:d0:0d:99:67:6e:
         29:98:3c:af:46:eb:78:34:ba:ef:78:2b:80:6d:48:e0:16:47:
         24:19:e8:62:d2:80:41:80:42:1f:31:2c:ae:52:af:ed:7c:da:
         34:f2:78:81:83:d7:42:ab:89:f1:9b:94:f2:0d:84:2e:46:5f:
         14:15:69:f5:ff:d6:f0:ed:a6:73:2b:4e:cb:df:b9:7e:3e:a7:
         ef:18:0b:0a:2c:0f:79:38:3e:00:21:e7:b5:b1:96:7c:1d:49:
         38:20:1e:e0:ed:69:af:89:9c:98:b1:b3:5c:0c:f1:38:3c:d8:
         91:54:6e:6a:51:42:54:26:f1:21:a2:b5:0d:14:cb:cf:0e:41:
         f5:11:81:a5:67:58:20:5a:c5:53:43:3a:6c:0f:ae:61:4d:44:
         2b:03:f8:3e:e8:ad:e2:e2:48:17:35:1e:39:57:2f:54:e9:f4:
         9e:61:ec:91:25:44:9c:87:07:fc:4b:05:1f:02:6c:b8:95:ba:
         e8:30:e6:6e:c9:37:7f:9d:78:19:73:29:43:e9:cc:ff:02:3d:
         6c:4f:c1:5b:b7:5c:20:cd:24:7b:53:d7:25:f0:52:81:c7:8a:
         76:9b:27:eb:22:f2:b0:09:5d:9d:60:9d:51:65:f5:4a:16:a0:
         f8:88:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:01:43 2024 by rpki-client on console-ams.rpki-client.org