Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/9DC49A2449A011EEB3DFDD0DC4F9AE02.roa
File:                     9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (raw, json)
Hash identifier:          I/sFHc7XYiJ8eT0AIMA2+7XdYKHUvmlkXtbK7T+Me2I=
Subject key identifier:   A7:B1:C1:E1:F4:E5:8C:70:09:45:5B:49:DF:D4:48:A2:BA:18:76:F6
Certificate issuer:       /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial:       020F
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/9DC49A2449A011EEB3DFDD0DC4F9AE02.roa
Signing time:             Sat 03 Aug 2024 03:54:56 +0000
ROA not before:           Sat 03 Aug 2024 03:54:56 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     216401
IP address blocks:        2400:9ce0:2000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
                          rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
        Validity
            Not Before: Aug  3 03:54:56 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66adaa10-f552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:df:d5:df:74:2c:be:ef:6d:41:42:a2:53:
                    31:cf:79:14:23:f2:2f:27:f6:80:5d:a4:6c:24:63:
                    12:6d:c6:1a:1b:1d:39:a0:f5:c2:15:b7:4d:13:60:
                    95:fd:ae:1f:b0:c8:27:61:c3:3a:00:c9:aa:f5:ad:
                    8f:7b:06:71:ab:e5:a5:d0:6d:c0:65:2c:03:ca:52:
                    d9:d6:99:44:0c:81:3b:eb:4e:be:1b:df:44:dd:af:
                    9f:0b:7d:68:e1:c8:0f:6e:af:04:b6:c4:9c:77:3f:
                    c8:8f:5b:3d:e1:07:4d:12:60:ff:18:49:c9:8e:10:
                    3c:69:de:06:a4:57:7a:33:38:ac:78:d3:68:8f:24:
                    b5:c4:96:0b:47:84:12:f9:f1:a6:88:2d:8e:54:41:
                    c5:37:46:92:f0:76:17:28:b3:e7:50:73:8e:d0:1c:
                    35:d1:66:83:0b:5e:70:c1:d3:b2:ff:38:3f:12:3e:
                    69:8d:f1:c2:bd:91:9e:a9:55:e3:cc:2c:73:ec:61:
                    51:c4:d9:85:6c:5e:37:b5:16:83:82:9a:5c:bc:b3:
                    c2:5b:85:ef:e7:6b:d6:5e:88:c7:18:e1:bb:a8:f9:
                    59:62:d0:eb:d0:4b:34:04:54:ba:f7:8a:17:e4:f0:
                    96:66:b0:86:a2:18:9d:e4:28:b1:ec:7d:83:74:14:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B1:C1:E1:F4:E5:8C:70:09:45:5B:49:DF:D4:48:A2:BA:18:76:F6
            X509v3 Authority Key Identifier:
                keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/9DC49A2449A011EEB3DFDD0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9ce0:2000::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:29:9f:82:c1:4c:0f:1f:4d:59:68:70:c2:5d:e4:f0:30:bf:
         31:50:fa:e0:22:3d:82:f1:86:0b:2d:be:bb:7f:62:5f:8c:d5:
         90:a6:4d:df:e2:f0:c9:db:d0:f9:33:07:3d:54:0d:c0:72:f3:
         0e:15:e2:af:e3:92:30:4a:68:f3:bc:78:7d:49:92:c3:ed:4b:
         b9:90:81:fa:b8:f7:24:b2:b8:87:fd:18:be:a6:31:b6:ea:88:
         a6:5d:d7:cf:07:c9:c6:97:83:cc:07:52:2f:b5:92:16:f6:ee:
         6a:05:a3:ab:15:c3:00:01:d0:4f:99:7e:52:79:34:74:25:35:
         fd:a2:ca:73:4f:1f:5e:a2:4f:62:c5:69:c7:12:98:fa:fe:82:
         8a:25:f3:24:25:c5:84:db:0a:30:0c:68:9a:09:8f:99:9c:0e:
         68:be:c5:71:1f:d6:2e:71:47:3d:78:6d:b7:58:2a:e9:29:8f:
         58:03:39:05:01:86:55:25:d9:91:59:1d:8d:6a:df:ca:fa:a1:
         39:15:8e:15:6b:d9:be:c7:6e:07:36:e6:83:3c:e7:c7:31:a5:
         9b:eb:6d:88:5d:1f:6c:e2:d7:f0:94:93:dc:b1:2a:50:b1:bd:
         98:a2:d4:61:e0:7e:5e:ab:af:3f:17:ba:a6:82:42:c7:c1:c3:
         de:66:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:47 2024 by rpki-client on console-ams.rpki-client.org