Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/5818925E826A11ECBF45DE23C4F9AE02.roa
File:                     5818925E826A11ECBF45DE23C4F9AE02.roa (raw, json)
Hash identifier:          4icuUSKqKo2QJPkSrodEInfP0cRxUmkdK43z1P7OpSk=
Subject key identifier:   46:79:D0:F9:6D:46:21:85:40:D8:C0:94:B1:76:E3:75:52:27:4A:4A
Certificate issuer:       /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial:       0777
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/5818925E826A11ECBF45DE23C4F9AE02.roa
Signing time:             Fri 10 May 2024 22:31:57 +0000
ROA not before:           Fri 10 May 2024 22:31:57 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     17439
IP address blocks:        2400:ffc0::/47 maxlen: 48
                          2400:ffc0:13c::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
                          rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 21:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
        Validity
            Not Before: May 10 22:31:57 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=663ea05d-4820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:78:d3:f6:73:7b:ef:21:70:b5:b5:d9:90:bf:
                    96:e8:e8:10:86:8e:7a:d2:7f:ea:67:b1:db:3e:71:
                    f3:c5:ac:04:da:59:ec:a3:3d:cd:76:d8:6c:97:3a:
                    b2:24:f9:18:07:b9:da:21:20:37:8e:ac:66:3c:8d:
                    01:1d:f2:f7:33:db:14:ce:1f:4b:b7:0d:57:08:55:
                    89:16:47:89:ef:40:80:3f:6c:bd:ff:42:0f:d5:77:
                    bf:34:65:fc:ea:d9:bb:13:d5:2a:ff:52:eb:ab:d3:
                    e4:11:ff:24:b4:f1:44:65:a9:26:a5:a7:89:33:b9:
                    0d:24:b0:d3:ed:9c:2a:8f:29:c2:3d:15:d5:40:e1:
                    ac:ea:21:20:b5:f2:b6:cd:58:fd:c8:65:8a:e0:10:
                    df:0c:ad:87:3f:11:b6:7b:46:ba:c1:d1:f3:0f:1f:
                    da:87:03:d8:79:0b:09:40:87:5b:63:95:3d:69:26:
                    b1:b9:5c:d9:7e:82:ef:fc:b0:e6:88:4d:be:a3:12:
                    79:9a:d0:d2:3a:82:62:96:65:18:ed:d6:50:f8:d3:
                    21:c3:fb:ac:67:88:95:da:13:72:e4:6a:cf:27:93:
                    ac:b6:68:05:6f:d7:87:2c:50:3b:29:f5:68:23:cd:
                    b1:95:81:27:b3:ca:2f:54:35:37:18:6d:9c:65:f8:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:79:D0:F9:6D:46:21:85:40:D8:C0:94:B1:76:E3:75:52:27:4A:4A
            X509v3 Authority Key Identifier:
                keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/5818925E826A11ECBF45DE23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:ffc0::/47
                  2400:ffc0:13c::/47

    Signature Algorithm: sha256WithRSAEncryption
         39:18:2a:21:42:53:32:e2:44:cd:1c:df:ed:3d:81:bd:df:a9:
         1f:70:b7:d8:81:a9:5a:a7:12:7f:44:c1:74:32:2c:40:c9:5c:
         a0:f8:07:4d:8f:ad:af:c0:c9:be:32:14:17:ef:3b:0b:2c:74:
         45:49:1d:77:85:8b:42:64:4d:b0:c5:eb:d1:d5:eb:f4:19:52:
         33:4f:8d:fa:9a:8b:51:0c:9c:04:72:9d:33:3d:8c:d7:05:d6:
         00:e5:4a:77:1a:80:60:44:c9:40:c9:a5:57:e6:90:0f:ea:e3:
         81:02:25:be:f8:b4:e9:76:eb:4e:48:55:e1:6e:3b:52:2d:b2:
         20:7c:78:85:f1:dd:67:69:46:31:d3:a2:16:38:9a:d8:cb:b0:
         73:65:12:9e:d8:ef:1b:d0:58:30:57:5c:3c:66:8e:b7:b3:8c:
         e5:49:cd:1f:d4:bd:93:e2:87:40:81:c7:c9:5b:0d:67:f6:cc:
         7d:09:3f:9d:03:c1:30:8d:54:11:5e:21:2b:25:49:85:3d:92:
         3e:24:bc:a1:13:79:e8:c9:5b:df:29:ba:a1:26:73:6f:c6:c8:
         95:b3:f2:ca:d8:6a:fa:83:28:b5:4c:4f:93:de:c0:36:c5:10:
         1c:0e:7b:c3:27:e2:c6:81:2d:ae:06:53:3b:bd:c6:01:42:4a:
         24:fa:55:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 23:40:16 2024 by rpki-client on console-ams.rpki-client.org