Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
File:                     0448C04E5CC211E8AC07E63AC4F9AE02.roa (raw, json)
Hash identifier:          P4pXm3Akk+1BNm0AErATD6yX0hSNAer5oQwcgjfFUX8=
Subject key identifier:   92:90:58:2D:87:D5:0F:7A:FC:15:1E:CE:52:68:9D:1C:89:08:1A:DE
Certificate issuer:       /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial:       13F7
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
Signing time:             Mon 13 May 2024 06:31:00 +0000
ROA not before:           Mon 13 May 2024 06:31:00 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     9411
IP address blocks:        2406:3100::/32 maxlen: 32
                          2406:3100::/36 maxlen: 36
                          2406:3100:1000::/36 maxlen: 36
                          2406:3100:2000::/36 maxlen: 36
                          2406:3100:3000::/36 maxlen: 36
                          2406:3100:4000::/36 maxlen: 36
                          2406:3100:5000::/36 maxlen: 36
                          2406:3100:6000::/36 maxlen: 36
                          2406:3100:7000::/36 maxlen: 36
                          2406:3100:8000::/36 maxlen: 36
                          2406:3100:9000::/36 maxlen: 36
                          2406:3100:a000::/36 maxlen: 36
                          2406:3100:b000::/36 maxlen: 36
                          2406:3100:c000::/36 maxlen: 36
                          2406:3100:d000::/36 maxlen: 36
                          2406:3100:e000::/36 maxlen: 36
                          2406:3100:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
                          rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5111 (0x13f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
        Validity
            Not Before: May 13 06:31:00 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6641b3a4-bec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:8b:f5:c9:b8:70:65:a2:53:04:eb:59:a6:
                    8a:cc:ea:49:99:b7:c8:ef:18:69:c7:8a:b0:4e:bd:
                    d6:2e:39:d7:b2:28:01:e1:e4:b0:08:a3:d7:3b:75:
                    e0:b7:ff:6f:30:2c:d9:c7:4f:8f:c9:26:1a:7f:3c:
                    ea:d2:6e:e4:e7:c8:12:a0:b5:62:0e:38:ea:c2:81:
                    41:2f:32:f4:03:5e:f5:c4:65:e4:80:a6:93:45:1f:
                    0a:ff:a6:b8:eb:52:71:33:87:8f:98:9f:89:15:dc:
                    d9:bc:7a:d2:4a:46:0e:b9:9f:24:b6:7a:d7:4b:e2:
                    86:22:7e:fb:6d:1e:ed:81:68:6f:8d:6d:da:96:81:
                    f6:c6:6f:a0:01:a8:95:8d:f8:5f:e6:7a:5c:4e:dd:
                    99:09:83:12:64:6e:10:47:b8:68:e1:ac:37:a2:e2:
                    c5:9a:ae:e5:1b:ff:04:70:29:48:f2:b5:2a:4e:98:
                    5d:eb:56:99:ba:05:eb:68:72:3c:e6:1c:ef:0f:76:
                    7d:72:3f:e9:28:e1:45:8e:21:eb:b4:63:f9:9c:62:
                    cd:40:19:38:01:2d:94:f2:f3:8e:7a:3e:25:25:32:
                    dc:15:90:5d:88:7b:ab:10:ac:16:c3:36:01:20:47:
                    2c:7f:9d:23:1b:c0:20:e7:43:2e:18:83:a5:54:25:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:90:58:2D:87:D5:0F:7A:FC:15:1E:CE:52:68:9D:1C:89:08:1A:DE
            X509v3 Authority Key Identifier:
                keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3100::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:05:cc:28:be:72:36:92:1c:43:ff:86:c7:d8:27:c0:71:
         ad:36:66:d1:b1:7e:6e:be:ab:2e:41:b7:f2:e5:48:4e:df:52:
         ef:fc:03:c2:89:cb:05:a7:99:53:ff:bb:77:7e:e6:e8:e8:10:
         ed:86:08:73:ae:91:fb:4e:74:2d:96:a9:2f:50:e2:bb:1a:bb:
         86:ce:38:ad:39:7f:fd:1f:b6:a7:e3:ea:6c:91:51:cc:c5:be:
         26:1e:3d:ff:8c:74:65:36:0a:83:18:d8:22:e8:26:69:05:ae:
         13:3c:27:00:47:bc:e3:6c:e7:cd:7d:49:1d:4c:5a:8c:6f:0b:
         45:26:7b:cb:f6:66:6a:e2:de:36:b4:c7:43:05:89:1a:a9:4d:
         3a:8d:77:29:62:d5:c2:44:d9:6f:f4:b0:65:3c:c8:83:bb:2a:
         e8:91:d8:2b:45:f7:22:90:88:76:83:62:88:71:4f:e1:70:b8:
         f9:11:d8:2c:72:3b:8e:58:2b:68:61:7f:62:e0:3c:63:5f:2d:
         5e:e4:91:7c:4c:70:e7:f0:b7:e9:68:6b:6f:68:d2:4a:4a:0e:
         2a:5e:68:fb:9a:55:ca:4c:58:04:06:f6:92:35:d8:9e:21:d0:
         32:81:cb:5c:de:a7:77:2e:1d:bc:ae:bc:ee:b6:c5:df:3a:17:
         8d:c0:13:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org