Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/9166F61638E511EF803AF660C4F9AE02.roa
File:                     9166F61638E511EF803AF660C4F9AE02.roa (raw, json)
Hash identifier:          QNsCGBs1m1kxcH19eAL+oNOTk3BSVk/mrReHFne6EVo=
Subject key identifier:   04:06:B8:1E:AF:11:D4:38:84:DB:D9:D0:83:E3:6A:8F:A2:46:57:93
Certificate issuer:       /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial:       04
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/9166F61638E511EF803AF660C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 02:40:11 +0000
ROA not before:           Wed 03 Jul 2024 02:40:11 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     4764
IP address blocks:        2001:df0:201::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
        Validity
            Not Before: Jul  3 02:40:11 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6684ba0b-93b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:3f:77:d1:65:f4:6c:47:67:fd:b2:6b:79:
                    9c:6c:87:88:20:a6:69:df:e1:ac:4d:5d:58:52:7b:
                    43:fe:eb:28:93:88:ae:79:cf:65:6c:f3:82:e8:77:
                    69:80:82:bf:28:ba:cd:09:da:a1:83:7b:4b:7b:43:
                    90:c9:61:21:c8:3c:9e:67:23:23:2c:7b:0e:f9:fd:
                    44:0f:b3:7e:a3:89:bd:e3:e3:85:75:73:f8:a7:24:
                    56:9c:1d:43:4f:c2:00:a1:ff:f5:c8:52:39:4d:13:
                    c3:94:b5:ff:4a:30:47:4c:00:87:04:41:79:b5:8a:
                    9a:3f:c2:e1:26:8a:b1:f8:62:56:ba:f5:91:f0:c4:
                    d0:07:b7:56:0f:5d:d9:ec:be:c2:2d:12:34:db:5f:
                    4e:66:4e:c9:5b:94:c3:64:6e:f7:c9:33:d8:9b:ba:
                    ee:46:fb:b8:e3:48:17:18:36:03:4d:7f:a3:2e:bf:
                    e4:4d:b4:d7:a5:43:16:87:5a:da:68:cb:3f:24:06:
                    75:07:73:59:7e:e3:40:0b:d9:80:11:7a:ca:11:46:
                    bc:a9:74:af:19:c4:0e:42:86:56:b8:22:0f:4b:67:
                    c8:44:5c:74:f9:9d:72:71:cd:f3:fc:07:ed:92:69:
                    c8:c2:fd:02:17:a6:6f:63:a7:05:50:6a:3f:93:bb:
                    07:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:06:B8:1E:AF:11:D4:38:84:DB:D9:D0:83:E3:6A:8F:A2:46:57:93
            X509v3 Authority Key Identifier:
                keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/9166F61638E511EF803AF660C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:201::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:e0:95:88:53:27:7e:82:02:d9:55:b6:09:16:e0:a9:99:
         92:c9:45:4e:e7:6f:2d:c3:3a:7d:8a:1b:7a:44:06:75:fb:7d:
         f7:e8:60:e0:7e:0a:77:ba:58:ef:07:a6:4a:36:61:63:f2:25:
         be:6d:70:8a:3e:fa:a9:96:dc:9b:2a:a7:f7:75:0b:2a:b0:f8:
         8c:3a:6e:3e:00:17:d7:a8:c3:08:bc:85:8f:fd:08:f0:8b:ab:
         16:59:67:bf:55:93:7a:6c:b5:81:84:21:13:5c:34:36:04:e7:
         86:77:57:98:95:56:41:fa:1a:3f:29:97:cb:54:2d:ff:25:e5:
         42:1d:2d:44:86:c7:d6:fd:b3:04:1e:ce:e2:f6:3b:5e:04:a2:
         07:e9:7d:46:ab:af:f6:a7:b3:14:93:7a:4f:77:a3:49:59:dc:
         86:aa:f0:0f:cb:c8:71:ae:eb:09:45:c9:8b:b3:78:1e:a8:b0:
         fa:83:aa:cb:9f:f2:f5:24:eb:cf:ac:80:ec:b7:4e:c2:7d:58:
         7c:96:be:1c:f5:63:04:0e:ee:79:df:51:77:a0:09:72:9f:ae:
         63:e0:e0:01:32:dc:88:22:1b:77:77:51:6c:bb:fd:2f:c1:00:
         fb:8b:ff:9c:ff:68:84:fd:b2:a4:bb:d0:f9:bf:ae:ee:ea:a3:
         d6:75:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 08:11:55 2024 by rpki-client on console-ams.rpki-client.org