Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/65BB2B42C0E311EEBEF3D409C4F9AE02.roa
File:                     65BB2B42C0E311EEBEF3D409C4F9AE02.roa (raw, json)
Hash identifier:          FBrlkBqzBW8n5WN2ZH1BTOB/eDK8V6xYRPTXrha9uDI=
Subject key identifier:   79:EF:DD:B7:31:C7:43:01:F1:43:ED:1C:A8:21:2E:AF:5C:F1:5E:DA
Certificate issuer:       /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Certificate serial:       0AC9
Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/65BB2B42C0E311EEBEF3D409C4F9AE02.roa
Signing time:             Thu 01 Feb 2024 09:22:19 +0000
ROA not before:           Thu 01 Feb 2024 09:22:19 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     138640
IP address blocks:        2401:79e0:8000::/34 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
                          rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2761 (0xac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
        Validity
            Not Before: Feb  1 09:22:19 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65bb62cb-50a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:f5:2e:28:38:41:0b:b0:a2:f7:ed:5a:cb:
                    2d:3a:2d:79:21:9e:fc:ec:c1:08:b1:be:9a:20:4e:
                    21:50:8a:c0:fa:c3:0b:b8:b3:f3:04:a6:e1:70:a9:
                    53:78:75:84:7c:db:94:85:91:f0:53:e5:0d:11:23:
                    fa:71:ff:c8:88:d9:bc:2b:c2:38:46:87:3f:d4:21:
                    a0:6d:7d:bb:4d:af:45:44:56:7e:15:6d:24:9a:08:
                    62:50:9b:cf:31:69:41:66:cc:08:33:8e:47:74:14:
                    b0:eb:28:7b:cb:37:56:29:45:5e:1b:41:80:7d:c2:
                    1d:d7:61:f3:cd:76:ce:7c:c2:90:47:55:df:0c:e2:
                    b8:33:53:88:ac:f6:41:85:b2:f6:b7:22:b5:51:e4:
                    f4:fa:2a:c8:5f:a9:ce:a5:a8:c1:04:83:12:cf:d3:
                    10:0a:a0:90:26:fb:ea:42:04:99:08:89:ca:b6:a4:
                    b5:69:12:69:95:4c:d2:64:53:57:9c:d3:6c:05:ba:
                    12:10:38:69:6a:fa:e5:f9:42:56:f0:25:db:44:e1:
                    48:6f:11:82:83:7f:27:45:d2:40:ac:2d:32:e8:ff:
                    0f:3a:ff:f7:68:27:f3:70:21:23:79:46:bb:77:21:
                    1e:78:a0:9f:ca:1d:50:58:46:a6:15:ac:b3:fc:fd:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EF:DD:B7:31:C7:43:01:F1:43:ED:1C:A8:21:2E:AF:5C:F1:5E:DA
            X509v3 Authority Key Identifier:
                keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/65BB2B42C0E311EEBEF3D409C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:79e0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:df:63:5e:a4:19:18:07:c6:f7:22:d9:01:38:7b:69:dd:
         1c:41:28:00:43:59:c9:41:1c:9d:a6:c3:c6:c5:1d:c0:0a:87:
         d3:c9:fc:78:5f:6d:c7:fe:d1:22:0c:14:7d:2d:d2:de:1a:87:
         0c:3a:4d:1b:fc:fc:ab:af:03:e2:90:16:bb:bc:43:70:d0:20:
         56:e2:c8:37:8f:e0:a2:49:d1:6d:9a:a0:88:2c:1b:48:ca:f2:
         ed:24:f9:92:fe:6c:6a:54:a6:31:86:1a:9d:63:24:a7:71:b6:
         4d:f2:1b:54:19:81:01:03:4e:53:bc:2d:1f:b2:fb:42:7f:59:
         54:b3:11:c6:dc:1a:c0:e4:50:ff:33:0d:21:cf:6f:b2:ac:d4:
         36:d9:74:30:7a:57:cb:e8:4e:70:93:72:12:78:bf:bb:39:2c:
         20:e3:6e:b6:8e:60:97:e1:fe:fe:74:63:07:fd:75:87:70:d7:
         4d:42:c9:6c:7a:02:cb:18:8d:f4:bc:98:d0:a8:73:34:64:a9:
         cc:9b:79:42:c6:9c:b4:ee:23:48:4b:59:1d:b6:cb:e7:7a:79:
         cc:11:e0:85:54:4c:36:10:30:3e:9a:ad:22:c7:f8:d2:dd:00:
         13:ae:8e:1d:3e:d7:84:51:9c:4b:13:ef:a1:11:5e:15:4a:8e:
         69:b5:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:45 2024 by rpki-client on console-ams.rpki-client.org