Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/5C28B7DC91B211EC838CA523C4F9AE02.roa
File:                     5C28B7DC91B211EC838CA523C4F9AE02.roa (raw, json)
Hash identifier:          uiZOcuCrrczfZDpw78yiLaFOkK9r6+02DVBLWeiAWT4=
Subject key identifier:   BE:AF:EA:17:DB:DB:92:AD:00:32:F1:68:A4:19:CF:B1:9E:9D:D8:4C
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       03AC
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/5C28B7DC91B211EC838CA523C4F9AE02.roa
Signing time:             Wed 31 Jan 2024 03:05:21 +0000
ROA not before:           Wed 31 Jan 2024 03:05:21 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     212357
IP address blocks:        2407:9240:2300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: Jan 31 03:05:21 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9b8f1-ad85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7f:44:b4:20:cf:b9:6d:1f:f7:fb:79:00:35:
                    5a:23:79:9d:80:6d:3d:c0:13:d0:e3:ed:c5:fa:ad:
                    d2:2e:b9:f3:43:2d:e3:06:01:36:65:c1:a8:1f:55:
                    e9:e5:4a:07:b7:d6:59:53:1f:e0:0f:f9:0f:13:aa:
                    cb:fa:4f:2e:cb:be:3b:93:1e:97:5f:68:97:8e:9a:
                    85:ae:3f:2b:5a:1a:8a:d7:bf:9c:06:6a:6a:9a:fe:
                    6f:46:5b:f5:c8:4d:26:a9:95:80:8c:e0:7e:7d:32:
                    b7:98:97:f8:25:4f:6d:b0:87:10:74:34:3d:b6:22:
                    19:2e:bf:f2:f2:7a:61:30:d5:58:0b:de:ef:e2:4d:
                    45:10:ba:a2:2c:6e:f6:88:3d:39:df:6e:21:8f:7d:
                    f1:94:4c:2f:d6:aa:68:a5:a7:17:41:3c:02:6a:8d:
                    51:d8:39:03:9d:f2:ec:5c:51:02:b6:c0:3a:5b:12:
                    b8:d9:30:4f:1f:b6:f1:cd:1a:e4:22:a8:ae:2f:8f:
                    8a:cb:c9:a0:47:90:2f:ca:21:4f:06:6a:d8:d7:fc:
                    ef:01:c3:a0:14:f0:aa:28:3d:1e:48:7c:3a:07:73:
                    32:05:25:65:b3:a0:11:58:b9:c3:12:56:e9:c3:1b:
                    30:7b:54:04:6b:30:2a:5f:12:71:79:5a:82:a2:b1:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AF:EA:17:DB:DB:92:AD:00:32:F1:68:A4:19:CF:B1:9E:9D:D8:4C
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/5C28B7DC91B211EC838CA523C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9240:2300::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:db:21:43:e6:92:32:e0:b4:da:bd:ec:f7:2d:97:74:01:6b:
         95:ae:4f:44:11:6f:ed:1e:2d:7b:43:8e:bd:f8:c8:2b:0e:02:
         71:c0:33:33:ea:e6:ef:33:2a:09:6b:61:7c:8b:72:77:7b:bd:
         f6:4e:c4:64:04:07:0b:40:db:8b:5f:1b:47:98:c7:ce:f6:c8:
         16:6c:06:58:8c:a6:37:83:0f:c6:e6:52:f8:0e:aa:81:c6:96:
         ac:d8:b0:a2:bd:dc:b9:c2:95:8d:9d:bb:90:19:21:b9:3e:09:
         98:4a:c6:c2:82:bb:80:9d:89:bd:81:50:10:aa:28:9f:58:3e:
         96:0f:1e:9d:90:1c:0c:89:75:34:5a:8e:4d:f4:b2:df:bd:e8:
         90:40:d7:29:0f:53:a2:60:23:d6:c6:1e:d7:15:b6:d8:82:04:
         17:9a:2e:78:59:80:2a:13:a6:01:88:6b:cc:bc:9b:7c:5d:36:
         0e:94:c6:95:a6:aa:77:e5:d8:00:8a:38:59:29:f3:ef:ec:bc:
         12:77:c3:8c:ce:69:eb:d8:6b:1f:c4:00:a0:57:67:d3:be:27:
         d1:2c:e3:24:cd:00:f6:ba:68:f2:56:72:62:e6:f4:c2:7f:a9:
         20:5d:98:6f:0c:15:13:e3:6f:26:b9:51:83:27:22:cb:ad:3a:
         26:3d:2c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:58 2024 by rpki-client on console-ams.rpki-client.org