Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/EF885538C28B11EBBF310469C4F9AE02.roa
File:                     EF885538C28B11EBBF310469C4F9AE02.roa (raw, json)
Hash identifier:          k7Sf29bC+xftoYX4+MLN3p/bo3gNzhxxgaSkznvzPXw=
Subject key identifier:   D6:CF:4D:D0:A7:B7:38:60:6C:2A:56:D9:1A:43:3D:A5:72:1E:2D:4A
Certificate issuer:       /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial:       167F
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/EF885538C28B11EBBF310469C4F9AE02.roa
Signing time:             Thu 30 Nov 2023 17:24:49 +0000
ROA not before:           Thu 30 Nov 2023 17:24:49 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     56207
IP address blocks:        2403:4c0:7000::/36 maxlen: 36
                          2403:4c0:7800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
                          rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5759 (0x167f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
        Validity
            Not Before: Nov 30 17:24:49 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6568c561-38d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:49:a0:f8:92:ff:de:f0:01:0c:e7:4c:c9:
                    c2:bd:55:5d:bd:42:8e:c8:9f:fb:6b:e6:41:37:fb:
                    cb:b8:38:cb:c3:84:69:4d:11:7e:73:60:7f:c3:79:
                    9e:00:43:68:0f:d2:66:ad:3c:f1:dd:e7:06:64:56:
                    d6:9d:3a:ce:c1:6d:a2:a7:a2:45:91:4c:2c:e5:1f:
                    81:15:d2:22:9d:a8:46:59:db:5d:09:a0:31:76:42:
                    21:ce:cb:34:57:4d:87:74:87:f7:e8:58:f8:23:f4:
                    8d:ff:2d:1b:84:d7:f0:d2:e2:ae:c8:98:e7:b6:96:
                    cf:16:4d:bb:ff:1a:67:c7:c5:b2:17:49:f4:b1:5c:
                    02:35:e8:4a:4a:5c:d1:33:35:dc:08:b1:b7:cd:21:
                    bf:7e:0d:c5:c0:37:84:73:54:f4:13:e2:72:ef:ae:
                    3c:cd:49:24:b6:d5:de:86:02:11:33:87:70:04:82:
                    87:c4:c9:b8:f2:b6:da:c5:6b:f5:83:c4:cb:39:26:
                    a6:72:c8:c1:7e:ba:c6:98:49:83:b6:54:c3:90:48:
                    c0:2a:45:6a:40:de:f7:56:4e:88:98:ff:ee:e1:7f:
                    c0:a6:9a:bd:06:a1:f6:19:b5:b9:24:38:05:02:f9:
                    4a:e1:8a:db:03:87:18:f3:0e:b7:6f:7a:fb:f5:85:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CF:4D:D0:A7:B7:38:60:6C:2A:56:D9:1A:43:3D:A5:72:1E:2D:4A
            X509v3 Authority Key Identifier:
                keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/EF885538C28B11EBBF310469C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:4c0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:d5:b8:8a:a8:02:c0:6f:96:23:1b:0a:70:5f:fe:2c:46:d4:
         67:d1:51:ad:b8:fe:41:91:26:b1:1f:63:fa:a7:d9:1f:d3:85:
         58:55:94:d0:6f:ad:2e:44:a9:b7:1d:6b:a1:14:d1:90:1f:44:
         86:4c:6c:8c:ae:d7:be:ba:dc:3e:14:46:87:ec:50:5d:6e:96:
         13:fe:97:e8:9e:a7:14:6e:56:05:fc:dc:3b:ae:f6:70:13:27:
         3a:fc:de:98:ec:0a:8c:81:d6:d0:73:58:12:c3:79:b7:23:39:
         e5:f7:69:6a:c3:3d:b8:e1:f6:47:af:91:74:cd:b1:02:5d:41:
         10:63:ae:fd:b0:1f:f3:cf:64:61:28:1d:29:16:d6:81:8c:a3:
         15:24:cd:2a:bc:98:b8:31:49:0a:f9:26:ca:d0:7c:da:18:86:
         c1:b5:de:5b:0f:52:da:d2:99:99:ad:df:91:74:31:bf:5b:f7:
         3b:12:53:6d:2c:b7:48:bc:5e:e4:40:92:bc:5c:34:b1:01:a6:
         3d:31:1a:57:6d:81:b0:e5:5c:4d:27:41:46:c6:1f:19:fb:30:
         4a:7c:38:64:9d:a1:cf:67:06:90:34:2b:b7:92:6c:f5:46:ed:
         e5:72:23:e0:ed:a6:20:83:8c:4c:2f:b4:a9:ed:b4:f4:40:4b:
         ab:4c:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org