Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/5C9B073691CD11E7AD932563C4F9AE02.roa
File:                     5C9B073691CD11E7AD932563C4F9AE02.roa (raw, json)
Hash identifier:          qDvUpQ+pcBdp3oNoCaw3VUb20gdJh67KqNBk3Z1ztMU=
Subject key identifier:   4B:62:98:4F:E8:6B:28:DC:66:71:7F:A7:DE:4D:15:6A:27:EE:06:06
Certificate issuer:       /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial:       23C6
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/5C9B073691CD11E7AD932563C4F9AE02.roa
Signing time:             Thu 02 May 2024 16:33:18 +0000
ROA not before:           Thu 02 May 2024 16:33:18 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     2500
IP address blocks:        2001:200::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9158 (0x23c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
        Validity
            Not Before: May  2 16:33:18 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6633c04e-d340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:5a:66:fe:ac:6e:93:1d:99:47:a6:e1:03:
                    e1:3d:94:37:12:83:51:18:ef:de:b3:a2:c0:b6:03:
                    04:eb:49:90:e9:51:d4:14:63:5a:13:14:92:7f:b5:
                    cb:6f:b3:23:2c:47:fe:a0:60:00:09:17:55:1d:bd:
                    20:83:f7:aa:21:6a:f0:bb:65:50:55:c9:46:b5:5a:
                    5b:49:a0:68:dc:68:24:e0:a5:59:79:c7:c9:a6:0e:
                    25:32:75:fe:d1:ea:b3:95:92:cf:da:65:3f:5d:d7:
                    16:f4:ac:b3:7d:6a:42:e8:ca:d8:3a:f0:bb:a2:2a:
                    2e:22:cd:18:2f:23:54:16:01:0d:7a:1e:99:55:52:
                    e4:76:83:2c:de:18:b8:25:b6:db:c6:6f:42:c5:6f:
                    b4:2e:55:14:60:71:f4:5c:91:13:e7:ff:3a:5c:96:
                    a1:ec:92:f6:d4:2e:61:c5:36:1c:29:5d:98:20:47:
                    48:d8:29:15:e3:08:45:1b:3f:3f:97:db:89:16:1b:
                    29:08:61:2c:c8:70:d7:50:3a:8c:2c:19:73:5b:3e:
                    11:5c:26:30:23:6b:a7:e6:4e:72:99:20:6b:d7:1f:
                    d6:84:4a:bf:d2:4b:46:d2:ad:3e:19:7a:71:0b:df:
                    a7:10:0b:70:ac:62:c7:5f:b3:cb:fd:7a:17:08:81:
                    96:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:62:98:4F:E8:6B:28:DC:66:71:7F:A7:DE:4D:15:6A:27:EE:06:06
            X509v3 Authority Key Identifier:
                keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/5C9B073691CD11E7AD932563C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:200::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:60:04:6b:3c:e6:59:3a:67:34:cb:bd:15:c5:3b:18:5d:81:
         8c:6d:dc:7f:92:cf:50:be:8f:42:f5:e2:9a:44:75:e3:85:5b:
         13:33:1d:ec:b8:c7:c0:2f:4a:5e:fb:96:e8:8f:4d:fa:b9:6a:
         97:39:1a:ec:ad:ef:a3:f8:65:14:d8:f8:95:e7:de:f0:01:6c:
         30:29:b5:a5:73:30:93:32:fd:35:aa:65:66:e8:7b:67:6d:e3:
         b7:ac:02:e2:d4:54:d6:65:81:8f:db:aa:15:8c:ce:56:31:8d:
         50:ab:4a:ee:2b:9d:c9:73:17:08:7b:5f:ca:be:aa:c2:63:1e:
         e9:58:5c:4d:e8:d2:80:be:1d:99:82:9a:69:be:32:9f:37:a0:
         4c:e1:96:5e:37:0b:cc:8f:6a:6f:19:c6:e5:6b:9b:4e:79:98:
         f3:44:86:05:ad:6b:34:99:cc:3a:b5:a9:33:1b:d2:0a:db:7d:
         b4:00:2c:81:f8:2e:ea:14:9b:98:b9:8d:f1:30:5b:0e:63:c8:
         bb:da:0e:0f:5c:9a:ba:c7:fa:ce:5b:f5:8b:40:8e:b2:ff:dc:
         ee:88:8e:5d:84:83:7f:3e:ce:63:8d:01:89:e6:38:82:06:b1:
         45:6c:0c:88:58:32:65:c0:7b:7f:66:d3:ae:d5:4c:95:b1:fd:
         06:ca:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org