Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/A6449CBA54A011EFB35AED26C4F9AE02.roa
File:                     A6449CBA54A011EFB35AED26C4F9AE02.roa (raw, json)
Hash identifier:          MkKraPCVKYSh4EUGWEmc6lPBWcmV9tHqmd6kNTqMDpY=
Subject key identifier:   3E:F5:5E:D9:D2:9E:82:EC:90:A8:31:D4:DE:CC:F8:12:80:7C:31:A2
Certificate issuer:       /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Certificate serial:       02
Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/A6449CBA54A011EFB35AED26C4F9AE02.roa
Signing time:             Wed 07 Aug 2024 09:37:23 +0000
ROA not before:           Wed 07 Aug 2024 09:37:23 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131108
IP address blocks:        2401:b860::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
                          rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 05:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
        Validity
            Not Before: Aug  7 09:37:23 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b34053-f5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:84:8b:c4:cc:0a:bb:d2:1d:53:1f:9e:c4:
                    32:46:57:79:db:29:e8:62:43:3e:d6:9a:89:da:a8:
                    f0:99:89:97:aa:9d:70:e2:77:6a:02:54:60:eb:38:
                    07:58:fa:e0:24:e2:2c:a4:94:a9:5f:fc:b5:59:18:
                    f4:eb:8f:be:3b:62:08:3e:ec:03:c0:63:7d:e3:b3:
                    2c:b9:81:cf:7d:c9:d5:25:44:6e:e0:93:03:d4:d7:
                    41:5f:3a:dd:b7:b8:42:89:72:0f:9a:c7:d7:1b:71:
                    3a:fb:b0:5a:87:0e:50:2e:44:ca:67:a8:5f:b9:b7:
                    08:b9:40:2e:b8:e7:a0:ff:bc:f7:0b:97:17:b3:7a:
                    d3:af:af:cf:43:7a:35:9e:c0:73:9c:6e:57:e1:4e:
                    30:e0:96:9d:b0:bd:1c:29:0f:db:e9:f8:a1:35:41:
                    74:e0:a9:5b:04:be:9f:56:bb:3e:a9:6e:c4:02:59:
                    89:8f:a0:14:13:27:41:23:67:4c:cc:af:e3:5e:23:
                    7d:90:53:66:8f:73:b1:8f:53:89:52:32:33:35:ab:
                    d0:df:13:e6:28:18:46:5e:f2:90:65:4a:9d:f0:9c:
                    30:ca:60:76:ef:eb:e5:55:5a:6e:a5:d6:25:0a:3c:
                    d7:e0:84:3a:3c:c1:5a:5d:3d:39:75:0c:c9:c8:56:
                    70:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F5:5E:D9:D2:9E:82:EC:90:A8:31:D4:DE:CC:F8:12:80:7C:31:A2
            X509v3 Authority Key Identifier:
                keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/A6449CBA54A011EFB35AED26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b860::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:41:e6:94:fb:f9:96:7e:e2:f3:ef:36:2f:56:f5:d7:b1:32:
         50:70:87:6d:f1:cd:fc:74:fc:c1:0e:eb:b3:0f:61:56:ba:5e:
         59:48:f2:d9:49:1b:fe:00:2b:bf:a9:f3:68:c1:4c:71:ad:60:
         74:a7:33:27:23:34:ae:b8:d7:54:f5:81:f7:4e:1c:e7:56:73:
         bf:c8:2b:ff:13:7f:2e:d0:2f:59:bf:f1:f7:7b:a3:09:9c:e6:
         2a:15:b6:5a:75:43:9d:47:66:52:73:f1:99:ac:7f:a2:f7:7c:
         4c:cf:a4:fd:b5:dd:61:82:57:fc:82:6c:56:dd:f4:2c:9e:8a:
         75:61:f6:99:7a:5a:20:1d:5a:dc:56:66:4d:74:70:d5:4c:5d:
         a2:0c:f3:09:91:cd:e1:8c:cb:2a:84:57:e1:36:49:cf:ce:e9:
         30:44:60:8d:33:67:60:29:c6:69:22:08:0c:be:92:03:88:21:
         22:a1:4f:10:ba:d0:4f:56:b3:05:0b:db:bb:b6:4d:65:dc:60:
         2c:95:9e:3f:c2:f4:01:94:2d:66:7e:e8:5c:29:13:58:e9:1b:
         27:36:c6:79:d7:30:85:0f:b5:07:af:98:56:fd:b4:dd:fc:e1:
         4e:33:eb:47:0c:8c:3f:51:5d:75:a3:8e:62:bf:e2:0c:8c:9c:
         e0:47:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:45:54 2024 by rpki-client on console-ams.rpki-client.org