Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6DE12084243F11EDB6C9D62AC4F9AE02.roa
File:                     6DE12084243F11EDB6C9D62AC4F9AE02.roa (raw, json)
Hash identifier:          UkhJIUL/Ldl3NbumSVZGfmojr5csuiDydS6HI26IpPE=
Subject key identifier:   72:47:A8:55:4E:B3:75:8D:AC:95:C6:2F:E2:69:E3:77:50:40:6B:E2
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       356A
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6DE12084243F11EDB6C9D62AC4F9AE02.roa
Signing time:             Thu 10 Oct 2024 14:50:46 +0000
ROA not before:           Thu 10 Oct 2024 14:50:46 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        175.29.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13674 (0x356a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct 10 14:50:46 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6707e9c6-0e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:ca:cd:17:75:14:69:b6:46:7b:0f:da:e5:
                    c2:98:29:a9:21:0d:13:d1:02:4a:f9:61:85:04:17:
                    5a:6c:f3:f9:ba:4e:be:17:6d:66:2d:af:c0:50:1a:
                    36:8c:f4:5d:69:70:97:ef:57:c7:38:fb:fe:c8:e5:
                    07:06:48:45:50:9d:7f:96:f5:af:fd:c3:da:5c:56:
                    b0:65:4a:d1:21:4c:65:f6:4d:cf:fa:b8:e2:dc:92:
                    37:d1:b3:ec:ca:d8:9a:58:56:b9:d8:d4:b6:7d:d1:
                    c9:68:d8:ba:98:16:65:19:d1:9b:dd:9f:fc:d2:e8:
                    35:e6:b3:68:31:41:48:4f:b3:7a:7c:50:94:2f:cd:
                    5b:24:04:7b:73:f6:ba:72:af:28:7b:65:e2:72:ea:
                    c2:12:0c:7e:ec:ac:ed:46:7a:a7:69:c1:e5:76:ad:
                    9f:19:0e:79:4f:a2:d4:03:ad:5e:52:ba:44:51:ac:
                    e7:2e:be:3d:c3:7b:ef:f9:40:e3:20:da:7f:42:11:
                    0e:b6:5b:84:0f:ff:39:1b:d8:11:a5:7e:53:ca:6a:
                    db:62:7e:73:62:ad:18:77:11:5b:f4:5b:e5:fe:1d:
                    91:56:f4:72:5f:44:b6:93:db:97:fe:8b:61:25:4f:
                    2d:dc:16:5e:38:d4:5a:04:7d:47:db:ee:25:fb:f8:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:47:A8:55:4E:B3:75:8D:AC:95:C6:2F:E2:69:E3:77:50:40:6B:E2
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6DE12084243F11EDB6C9D62AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:c3:1d:4a:09:db:2d:cd:9c:9a:9e:bc:3b:8a:5a:be:fd:50:
         2c:a6:f9:4d:0e:d1:0d:e5:72:fc:9f:59:05:aa:52:f4:a7:8b:
         f3:20:80:f7:7e:22:17:83:87:f1:5e:aa:a0:86:64:58:f3:bb:
         51:42:1a:1c:bd:b1:67:48:e0:06:f8:0c:c4:84:b4:21:0e:92:
         28:d2:8a:d8:ed:d5:0a:c0:28:52:af:1e:b4:9c:78:50:70:3c:
         68:78:4c:c6:95:d5:8a:05:6f:83:bc:bb:ef:98:46:12:23:8a:
         8a:b4:66:b0:4a:bd:53:62:41:dd:b7:46:c1:90:93:cf:a2:46:
         b9:0f:20:14:de:c1:6d:d6:0a:e0:c1:9b:91:d1:2a:cc:f4:9e:
         08:34:60:ce:b4:b7:3a:60:77:c1:04:fb:8c:43:b0:06:ac:7c:
         28:3c:3d:1c:42:5d:8c:c2:24:c0:7c:88:65:f7:ee:6c:d2:b0:
         43:8b:18:c4:03:24:ca:61:d4:a1:e4:54:fe:ad:0e:65:b0:57:
         35:cb:b2:00:e4:28:6c:b9:c2:4a:6c:60:44:13:65:51:fd:41:
         09:2e:b7:fc:cd:4d:7e:cb:eb:39:b1:53:ae:b7:ff:a3:b3:d6:
         79:c6:a2:7f:39:d1:09:f6:27:a7:8d:f8:6b:16:32:f0:65:f7:
         c2:f0:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:08 2024 by rpki-client on console-ams.rpki-client.org