Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/13E97B38F84511ECAB467675C4F9AE02.roa
File:                     13E97B38F84511ECAB467675C4F9AE02.roa (raw, json)
Hash identifier:          3wuSN4HyCqYbHAokywiiQt1PuB9z4wf5NTlIrLqocIo=
Subject key identifier:   40:31:91:D8:48:9B:8D:68:68:76:C2:D6:59:81:18:7E:08:AF:AB:2E
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       03B4
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/13E97B38F84511ECAB467675C4F9AE02.roa
Signing time:             Wed 31 Jan 2024 03:05:29 +0000
ROA not before:           Wed 31 Jan 2024 03:05:29 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     7603
IP address blocks:        2407:9240:3500::/40 maxlen: 40
                          2407:9240:3500::/44 maxlen: 44
                          2407:9240:3500::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: Jan 31 03:05:29 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9b8f8-15cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:86:2d:98:ba:e9:79:86:34:0f:d3:77:c6:12:
                    07:3d:90:ac:80:14:6b:04:64:e1:71:78:63:19:f8:
                    bd:01:1f:6a:30:88:39:2e:da:b5:1e:eb:98:26:ab:
                    7c:8a:91:4e:62:02:27:5b:fe:c1:9e:57:3d:73:24:
                    70:b4:a2:3f:77:73:5c:39:3d:d0:5b:19:cd:e7:e5:
                    e1:e6:f2:0c:a3:d4:e8:28:dc:15:e8:d5:c0:5f:40:
                    21:fb:ed:8e:86:31:ef:fd:db:db:b1:83:61:76:5e:
                    91:aa:64:cf:76:00:bf:bc:df:14:c4:50:cf:6d:c2:
                    22:e7:00:c2:db:89:7d:e3:c9:33:7c:6b:22:67:3c:
                    a9:4b:fc:25:25:4d:53:e8:10:b0:ed:01:6f:29:fb:
                    80:d0:74:61:ff:96:09:f6:f1:ce:8b:79:73:32:c4:
                    ed:50:09:fe:04:f6:89:41:65:56:0a:77:a3:fe:9c:
                    19:98:2e:6e:56:53:ef:d5:53:76:57:65:8b:eb:85:
                    4b:70:de:23:c7:c8:33:bb:43:ac:03:af:49:0d:bb:
                    34:e7:4a:ee:b4:25:47:9f:43:13:20:c2:2f:36:86:
                    c7:42:7e:cd:9f:31:eb:0b:28:30:c8:1e:67:9f:cf:
                    e2:6b:f0:4f:2d:8f:b6:6b:87:6c:58:46:f1:02:aa:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:31:91:D8:48:9B:8D:68:68:76:C2:D6:59:81:18:7E:08:AF:AB:2E
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/13E97B38F84511ECAB467675C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9240:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:0e:b6:89:df:ce:6a:f8:58:bc:99:fe:e1:51:31:cb:8e:5c:
         d2:e8:82:fa:6e:7a:2e:35:e9:a6:3a:7b:4c:11:fa:5f:c7:8c:
         e2:2d:16:b0:9f:67:24:d7:9b:30:09:51:ad:ff:de:30:41:51:
         87:66:b7:fc:2f:cc:b3:28:3c:63:49:4c:44:c2:f8:a7:8f:1e:
         53:e1:7a:42:8b:98:8e:12:c5:75:10:33:ab:a1:7b:9d:eb:87:
         7a:d0:98:1d:c5:f6:de:12:d8:e2:09:94:c1:d2:dc:89:fc:2b:
         e0:31:7e:43:56:c4:16:9a:fd:a8:e0:3c:b2:7d:07:23:86:1f:
         f0:58:5a:f8:ca:2c:27:8b:d7:04:7d:d8:79:6e:95:cf:1f:0c:
         0d:1d:c6:5a:91:2a:ee:12:99:a7:63:e0:13:d4:00:86:0c:cd:
         58:6f:4e:2a:32:fb:ba:07:2d:03:1a:f4:4e:7b:e3:10:9b:43:
         41:0e:a8:29:dd:86:65:40:ca:f4:e9:41:38:de:79:72:06:53:
         99:a2:3f:1a:16:f5:1a:e4:1c:a2:0d:19:f1:c7:e2:11:c8:41:
         cb:7c:50:22:3f:3d:b6:b7:79:1a:fd:2a:c6:25:7d:f0:2f:38:
         a0:3f:61:b8:18:3c:20:93:93:1c:26:24:11:ab:ea:38:8e:f7:
         e3:88:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:54 2024 by rpki-client on console-fra.rpki-client.org