Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
File:                     EF1D0466455311E98FA31F68C4F9AE02.roa (raw, json)
Hash identifier:          W59zPFhzH6srOXFLWboQB5VagZgE+I8u1/bvZ3GwejM=
Subject key identifier:   19:8C:95:78:9E:C9:60:54:BE:77:47:A1:1C:89:F5:15:3E:92:B0:80
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       3367
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 15:31:14 +0000
ROA not before:           Tue 12 Sep 2023 15:31:14 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     55433
IP address blocks:        2405:8a00:6029::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13159 (0x3367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Sep 12 15:31:14 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65008442-5521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:7e:fa:7b:02:5e:1e:05:41:a0:fc:ea:f8:
                    c8:66:44:b0:c9:05:57:99:0b:9e:2b:e7:e8:76:1f:
                    31:22:ec:22:28:1d:2c:71:c3:b9:e3:dd:75:69:18:
                    83:79:1d:34:97:39:5f:4f:b4:95:8f:07:68:d1:13:
                    b7:d9:b1:d5:07:cd:e5:19:79:e7:58:de:e6:e1:e6:
                    c9:6e:3b:49:c6:e5:d5:40:28:02:e2:14:d1:a8:8a:
                    da:05:4b:5c:36:d7:8b:5d:eb:b9:70:e7:a2:10:3e:
                    cc:59:67:ea:ba:92:74:55:1e:7c:7a:96:09:5e:d9:
                    b5:c2:5d:9b:b3:34:25:94:d2:7f:35:a6:ae:5d:fb:
                    9e:1d:de:49:96:5d:9c:74:4b:b4:66:0d:1b:f0:b4:
                    a3:6a:a3:55:db:09:fd:58:f2:8c:1c:10:f5:af:eb:
                    58:82:2a:a8:a9:be:b6:cf:d9:8c:cc:b0:0e:54:95:
                    57:7a:98:38:75:a4:0b:9e:a0:71:f8:fc:2e:f3:62:
                    c9:8c:e3:43:7c:6c:ef:83:40:95:a0:2f:98:a1:36:
                    24:f2:70:4e:4e:85:9a:c2:f3:08:46:bb:6e:34:35:
                    97:6d:82:42:a8:34:23:e4:0a:71:07:0d:05:7f:a8:
                    88:92:8c:44:7e:9e:03:7b:a3:f6:bb:16:a9:a6:a9:
                    a9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8C:95:78:9E:C9:60:54:BE:77:47:A1:1C:89:F5:15:3E:92:B0:80
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8a00:6029::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:82:06:dc:18:e3:86:b7:1e:57:91:50:d1:ce:35:56:a5:78:
         da:a3:d5:17:e6:ba:15:41:67:f3:44:b5:07:51:70:7e:0c:0c:
         cc:9e:46:d5:eb:cd:2e:a2:6a:84:77:8d:00:de:07:d3:88:80:
         cf:2c:9e:12:8f:ca:d3:09:3f:42:dd:5d:26:ed:02:d9:db:5f:
         99:6d:84:1b:39:cb:f5:84:53:cb:31:90:5c:3e:d2:5e:eb:d2:
         b1:c5:94:96:87:d3:be:66:00:4e:e8:42:0c:97:d4:f7:b4:de:
         bd:90:f4:e7:61:1c:28:96:d1:14:63:ee:36:ab:91:4a:19:fa:
         51:66:8f:35:82:4c:6d:dc:89:91:e7:c1:3d:2e:a7:e6:7d:35:
         65:02:e3:e1:f9:4b:30:11:6a:e7:b5:40:e1:fe:62:6e:89:2f:
         3f:f8:4f:00:c5:53:cd:32:49:42:c8:b5:7d:48:b6:0a:f6:6c:
         50:ce:64:80:e0:58:37:44:7d:8f:88:2f:7d:6a:70:6e:c2:f6:
         e9:2d:1d:32:c6:07:bc:90:1c:40:83:82:26:08:e7:6c:2c:7f:
         a5:51:9c:10:e9:21:8b:ce:3e:32:98:c8:55:bd:9e:17:02:7d:
         84:a4:8e:46:b8:b3:53:2a:75:a9:40:45:e2:32:33:d3:15:71:
         13:41:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org