Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/27A1A5A2174911EC896AD61BC4F9AE02.roa
File:                     27A1A5A2174911EC896AD61BC4F9AE02.roa (raw, json)
Hash identifier:          /R83jjCbU/gHUNqyRDjBLg8hoek5xuox7Fpd2KE126s=
Subject key identifier:   CA:F2:FC:DB:E9:58:FE:6D:F3:D8:F8:A1:CD:DF:4A:AA:BA:88:E4:A1
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       0441
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/27A1A5A2174911EC896AD61BC4F9AE02.roa
Signing time:             Thu 03 Aug 2023 01:02:06 +0000
ROA not before:           Thu 03 Aug 2023 01:02:06 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     17719
IP address blocks:        2405:9000:80::/48 maxlen: 48
                          2405:9000:90::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 01:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089 (0x441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 01:02:06 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64cafc8e-04b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:d7:56:33:32:be:75:e1:ac:51:4d:3c:0f:
                    fc:52:ce:e2:a0:a4:69:3b:ce:36:0e:be:b5:60:7d:
                    c0:df:2f:14:89:c1:03:8f:4a:e9:da:28:05:b9:f5:
                    68:14:9c:65:60:14:31:df:63:94:1f:82:a2:3c:4b:
                    6f:a6:78:40:ea:c2:99:7c:ac:c6:54:13:27:2b:07:
                    05:b0:04:01:67:cb:99:42:87:53:bb:d9:f0:d0:2e:
                    d1:7c:5c:46:d9:f7:f6:20:0f:cd:8e:6e:74:5d:3d:
                    e6:2b:82:7d:e1:8a:1f:9c:10:18:ad:a7:9d:ad:2f:
                    e5:42:f1:6e:63:a7:36:9c:ea:46:c7:69:12:e2:62:
                    96:ba:f9:46:90:cb:e8:b4:31:44:d5:b4:b7:5d:c0:
                    ab:c7:28:10:b8:ca:3a:0a:0d:b5:b2:00:3f:7c:27:
                    c4:2b:a2:7d:e4:a3:fe:bf:f1:c0:e0:19:f3:eb:1f:
                    6d:5f:d1:0e:7a:f4:04:03:c6:d1:08:21:82:c9:59:
                    c6:21:22:06:de:ec:7e:91:fe:e0:80:d6:91:e4:42:
                    8e:72:34:52:d2:b2:8c:d4:3d:1c:5d:7e:a8:22:41:
                    02:ac:60:e9:7f:8e:51:54:be:92:f4:7d:24:f5:09:
                    10:b1:73:f7:96:3a:93:6c:27:a3:83:7a:4b:98:b3:
                    39:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F2:FC:DB:E9:58:FE:6D:F3:D8:F8:A1:CD:DF:4A:AA:BA:88:E4:A1
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/27A1A5A2174911EC896AD61BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9000:80::/48
                  2405:9000:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:f8:7b:41:bf:4d:fa:47:ee:29:fb:fd:c6:d0:a6:ad:be:58:
         72:91:a9:bf:13:a3:11:fc:d2:9d:56:8f:c7:30:5b:9a:a9:f5:
         68:58:55:a9:3e:5d:ba:ce:b2:19:04:db:3f:f0:17:ea:1e:59:
         8b:30:c8:43:35:f8:6d:13:09:5d:06:9d:9d:b7:1c:1e:80:fd:
         16:f3:40:f5:d9:38:d3:94:2f:e9:9c:3c:25:6d:a2:b5:87:2d:
         95:7a:f1:e7:8f:f4:bd:5d:57:96:7e:54:bd:c2:60:13:19:9a:
         a1:1b:eb:f9:3f:78:9b:92:0c:2a:26:80:a5:92:99:b3:09:12:
         ae:18:83:f0:ed:fb:74:6a:4a:5b:0a:70:12:6d:0c:5f:8f:83:
         a2:55:f3:5f:ea:81:99:03:15:eb:ef:21:da:da:99:e1:74:27:
         db:60:d5:c1:31:26:7e:6e:f6:f6:2a:87:0d:53:86:58:1d:43:
         36:15:b9:50:0d:71:91:ec:a1:b8:15:30:5a:97:31:d6:67:90:
         c7:73:5e:6c:66:1e:36:43:6a:09:7f:88:5a:28:f9:5f:f4:a9:
         66:cc:79:0e:b8:0f:3b:b8:a0:9e:ff:e7:90:65:ff:2a:93:fd:
         59:43:2f:af:db:a5:74:d2:7c:fc:91:69:34:4e:9a:c0:84:11:
         49:8c:5e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:31 2024 by rpki-client on console-ams.rpki-client.org