Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/64782D1E607E11ED9CD7EF0FC4F9AE02.roa
File:                     64782D1E607E11ED9CD7EF0FC4F9AE02.roa (raw, json)
Hash identifier:          RdvlkapM35MRJfHVT6ITjiEohu/282iaA5oNrFH45uM=
Subject key identifier:   7E:1E:75:B3:C0:4F:05:E4:0D:FD:F5:87:A4:84:23:B0:C8:95:05:04
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       032A
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/64782D1E607E11ED9CD7EF0FC4F9AE02.roa
Signing time:             Thu 21 Mar 2024 02:45:15 +0000
ROA not before:           Thu 21 Mar 2024 02:45:15 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     150404
IP address blocks:        2400:58a0:1800::/44 maxlen: 44
                          2400:58a0:1800::/48 maxlen: 48
                          2400:58a0:1801::/48 maxlen: 48
                          2400:58a0:1802::/48 maxlen: 48
                          2400:58a0:1803::/48 maxlen: 48
                          2400:58a0:1804::/48 maxlen: 48
                          2400:58a0:1805::/48 maxlen: 48
                          2400:58a0:1806::/48 maxlen: 48
                          2400:58a0:1807::/48 maxlen: 48
                          2400:58a0:1808::/48 maxlen: 48
                          2400:58a0:1809::/48 maxlen: 48
                          2400:58a0:180a::/48 maxlen: 48
                          2400:58a0:180b::/48 maxlen: 48
                          2400:58a0:180c::/48 maxlen: 48
                          2400:58a0:180d::/48 maxlen: 48
                          2400:58a0:180e::/48 maxlen: 48
                          2400:58a0:180f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Mar 21 02:45:15 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65fb9f3a-f0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:cd:34:d2:54:34:24:24:41:24:11:9a:25:
                    c6:73:d8:dc:46:f0:80:72:c4:41:3f:09:7b:06:64:
                    4f:78:d3:63:7d:17:86:d3:fd:dd:b7:36:cd:c7:89:
                    9a:a8:dd:f4:73:f0:a7:3d:10:1e:cf:8b:08:65:d2:
                    af:5f:2e:82:5b:96:d7:7a:20:46:27:f2:c5:9f:d2:
                    ad:fd:16:dd:9b:8f:59:99:b6:2d:68:8f:10:77:e5:
                    dc:2e:25:84:d2:9d:7f:e4:9c:85:6a:7e:62:96:c6:
                    5f:f5:03:0a:00:47:e0:98:9b:61:e1:ef:d9:5f:8f:
                    96:bb:1b:56:1a:5c:cc:3d:9f:c0:75:b5:ad:7a:7d:
                    e2:7d:85:14:9c:9f:20:fe:3a:10:26:28:a0:b5:ff:
                    85:01:5b:6a:cf:dd:ed:4e:31:a9:07:63:e5:1a:21:
                    78:ba:97:ca:32:a9:d1:8c:0f:c1:73:09:a9:55:71:
                    af:83:17:1d:8a:73:12:cd:c2:a4:38:b1:80:8f:b1:
                    62:97:26:6d:86:43:fa:56:87:14:e8:dd:b9:65:fb:
                    03:fb:95:4f:70:5a:9a:68:9b:49:34:5d:4d:17:b1:
                    1a:d4:61:f0:f5:c5:2f:b1:4f:5c:c4:b4:e2:82:a2:
                    dd:8e:a2:d1:a3:ec:2a:f3:64:3c:4b:1a:56:07:5f:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1E:75:B3:C0:4F:05:E4:0D:FD:F5:87:A4:84:23:B0:C8:95:05:04
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/64782D1E607E11ED9CD7EF0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:58a0:1800::/44

    Signature Algorithm: sha256WithRSAEncryption
         b9:f9:34:77:39:1f:57:40:63:fd:78:44:4f:34:0f:55:6d:ec:
         97:37:22:ba:0f:77:5a:2a:00:0f:20:22:c9:ec:ee:bf:7b:56:
         2e:7c:f0:1f:55:de:0a:db:7a:c0:b3:b5:1a:e5:e6:f9:90:b8:
         0a:c1:c5:10:91:76:6e:16:a3:f1:1f:66:b5:66:bd:61:1d:21:
         47:59:61:2f:67:56:c3:73:24:4c:65:bd:f3:3b:a1:c6:1a:5c:
         67:4b:69:79:18:c7:b6:d2:07:5d:b0:35:d8:23:de:7d:58:cf:
         f4:a6:1d:32:af:a5:cf:66:3a:1f:90:03:6b:f2:26:22:c5:38:
         31:b3:d1:ac:50:79:b2:b0:67:90:85:d5:ca:99:44:cc:ec:91:
         4d:08:10:8d:de:7e:be:0f:c8:66:ec:65:ba:9a:2c:cb:55:86:
         91:1b:1e:72:0b:20:a3:6d:7f:e7:b5:8c:2e:8d:80:73:f2:ad:
         6b:cc:c9:49:3e:01:fe:62:94:84:72:c6:b5:fa:88:df:e3:1c:
         69:49:27:8f:87:d4:ef:c8:68:f4:f9:be:dc:34:c9:38:32:2e:
         fc:2b:c8:0c:52:a1:48:ff:94:99:bd:33:a7:0c:d2:6e:f0:ba:
         a2:d2:a7:9e:94:92:37:ae:be:71:70:ff:d0:2d:59:b1:cf:d3:
         0b:a0:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org