Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
File:                     0FE13C92EBB411EE9D86095BC4F9AE02.roa (raw, json)
Hash identifier:          Urnbb3WwZrA7rnMnP0+t9Rx88lYq3mJh+CKBhIzde4E=
Subject key identifier:   E2:7B:72:48:A3:5E:55:50:54:5D:6E:2A:BC:67:56:7A:23:C3:F3:1E
Certificate issuer:       /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial:       18
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
Signing time:             Tue 26 Mar 2024 21:01:49 +0000
ROA not before:           Tue 26 Mar 2024 21:01:49 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     139623
IP address blocks:        2401:7f20::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
        Validity
            Not Before: Mar 26 21:01:49 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660337bd-7f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:4c:6f:4f:61:97:b4:5e:44:0b:a6:ea:08:
                    8a:ea:26:94:2b:5f:4f:c4:20:69:dc:93:49:aa:2f:
                    35:18:ae:15:b1:d1:99:8c:ce:38:14:9c:c0:1d:f3:
                    2c:4f:a3:c9:a2:9a:dd:80:49:d5:e2:c4:6c:74:47:
                    00:7e:e6:9f:d7:27:a4:6b:09:fb:f6:97:29:fe:ff:
                    87:29:00:3e:d3:96:d3:72:51:fc:15:96:81:7b:06:
                    92:6c:fe:d7:d1:a8:d4:8f:87:e0:a0:e3:25:74:5b:
                    b7:3a:21:ec:68:63:bc:40:af:38:5e:61:8c:b6:65:
                    a3:f4:4e:57:fd:87:0f:4f:70:5b:b1:57:df:8b:ba:
                    c0:69:d3:87:61:18:73:f0:11:9c:2f:a3:9e:b8:8a:
                    25:5f:53:5b:0a:3c:ca:e3:3d:16:ea:cb:09:49:c6:
                    f6:a0:ac:fb:14:a0:8d:cb:10:89:7c:6b:e5:25:a3:
                    89:73:dd:fd:3b:38:10:d8:bb:0b:87:ca:49:83:1a:
                    bc:ca:23:65:a8:cf:5c:8f:9d:3f:a2:6c:9c:af:aa:
                    9c:38:d1:6b:8c:d5:d3:6f:0f:51:60:c1:5c:52:26:
                    2c:07:c8:ac:d4:22:63:23:95:75:ae:d0:22:5a:f4:
                    51:de:da:ea:89:7d:b3:56:ca:c9:9e:cc:6a:c9:fe:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7B:72:48:A3:5E:55:50:54:5D:6E:2A:BC:67:56:7A:23:C3:F3:1E
            X509v3 Authority Key Identifier:
                keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:73:36:f5:dc:08:bb:79:8c:38:0f:6e:54:c9:1d:8d:54:5f:
         46:25:1e:fc:a7:1c:71:4a:fe:b5:7f:11:09:71:45:39:54:bf:
         4f:35:fd:dc:4e:c5:66:ff:fc:26:dc:4f:40:cb:e3:db:cd:b0:
         27:23:47:d9:67:68:64:19:32:83:cf:75:e1:c3:f5:67:51:7a:
         ea:49:cf:4c:48:57:49:10:11:04:ce:11:e3:dd:ea:e6:34:b5:
         cd:1a:fe:ca:56:18:f1:27:6e:ea:5a:63:ad:8d:98:58:b0:79:
         4b:2a:03:60:93:ff:a0:e3:2b:80:f2:d1:69:11:62:33:8d:13:
         5f:bd:41:e9:fb:be:5d:36:f9:d4:e1:98:d8:9e:8c:4e:71:ec:
         9e:b8:61:57:82:d0:61:0d:79:1f:91:cd:28:4a:bd:bc:b7:cd:
         e4:42:b4:5c:59:2c:0c:01:a1:fe:c0:8e:3d:1b:4c:f0:28:be:
         1d:4a:4e:c1:04:26:49:f1:51:c0:96:64:cb:27:13:db:e1:27:
         dc:7c:f1:69:b6:48:c4:c9:2f:89:ca:64:28:66:43:5b:2a:32:
         3f:d0:99:c3:33:e3:d3:c0:df:58:36:48:1f:6f:47:56:83:12:
         16:16:ba:c0:67:13:ce:f3:78:a1:9b:62:0e:25:3c:dd:8c:dd:
         eb:f5:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org