Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/00A27C54FE7311EB8FF2D172C4F9AE02.roa
File:                     00A27C54FE7311EB8FF2D172C4F9AE02.roa (raw, json)
Hash identifier:          8qIDqvf5xDYnKp4UFj0kJZbxE6lAu545d5/cnpSf2dE=
Subject key identifier:   CF:AB:52:30:D1:1D:E5:B5:30:80:A0:A6:A5:20:65:75:1F:43:75:75
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0A37
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/00A27C54FE7311EB8FF2D172C4F9AE02.roa
Signing time:             Sun 14 May 2023 22:14:08 +0000
ROA not before:           Sun 14 May 2023 22:14:08 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     136591
IP address blocks:        2406:840:e770::/44 maxlen: 48
                          2406:840:fef0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2615 (0xa37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 14 22:14:08 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64615d2f-a1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:eb:cf:84:32:02:56:fe:09:7d:da:48:f8:
                    51:ad:9f:c9:4c:8e:e4:a5:31:72:4f:bf:5f:d0:0e:
                    45:58:f7:3b:8b:d0:70:73:7c:c3:4c:74:a4:04:a2:
                    31:47:a0:43:c5:c0:37:c6:7e:57:fb:ee:b4:da:67:
                    09:e3:2d:cc:8c:66:57:76:40:ef:97:2f:02:1f:3a:
                    73:59:27:13:96:5a:a5:bf:c4:16:0b:ef:66:5a:d1:
                    b9:52:f2:1b:8d:42:d9:de:9d:c4:da:13:73:f9:a2:
                    fb:8d:41:63:a1:26:06:39:28:02:a1:8f:15:85:76:
                    be:16:5f:f4:a6:67:00:47:ba:0f:cc:c6:0c:e4:7e:
                    dc:e2:91:47:42:16:e3:2b:64:e1:19:2e:52:7e:bd:
                    63:4b:f6:b8:bf:28:e6:a2:ff:1e:01:ab:5b:3d:a2:
                    97:dd:79:a6:44:54:4e:76:3c:6b:8b:ac:5c:5c:45:
                    24:7e:99:62:6e:7b:76:02:0d:c7:8d:4a:5f:a1:eb:
                    e5:7d:6b:fd:3b:39:c1:72:05:25:8f:8f:78:6f:21:
                    a6:cd:df:75:8c:5f:cf:c6:85:65:a4:0d:82:4e:1f:
                    48:b8:c8:a4:0b:2d:8d:db:c0:29:36:d2:7a:9a:cc:
                    02:8f:c6:c1:a0:17:38:12:16:59:1d:d8:29:9e:42:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AB:52:30:D1:1D:E5:B5:30:80:A0:A6:A5:20:65:75:1F:43:75:75
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/00A27C54FE7311EB8FF2D172C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e770::/44
                  2406:840:fef0::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:44:8e:c6:1f:9d:b7:03:e4:7e:2a:3a:2c:1f:a1:bf:ca:06:
         30:34:d9:67:2b:5a:8d:a2:83:3b:4b:09:8d:1c:cc:af:47:4c:
         0b:b6:0c:bf:3f:44:90:68:00:9f:0e:1d:bf:ee:2d:d9:34:6f:
         d9:74:35:de:42:82:97:05:b2:05:12:e8:2d:5d:6c:89:5a:1c:
         71:a1:de:c4:aa:fa:8a:61:6d:54:e3:1b:11:7b:90:64:69:28:
         99:6c:5c:41:a3:38:ef:2e:bb:19:9f:0a:fd:f7:6d:78:f7:3e:
         5c:e8:b3:d7:03:b1:78:1e:20:e1:25:17:bb:aa:27:db:5d:c1:
         b2:94:8a:8f:16:81:7a:59:c0:10:0a:d3:5b:07:3a:02:22:09:
         16:db:8d:05:8f:f3:e9:c5:2e:a2:04:77:60:2d:ab:20:08:99:
         53:80:1a:1f:16:d5:e3:a9:2d:4d:88:2a:35:3c:78:d3:83:e7:
         ad:cf:49:f8:4d:87:e5:31:64:b8:12:0c:0b:29:fb:04:1d:51:
         92:10:f9:1a:d6:02:50:d1:dc:af:08:93:49:7e:ea:88:72:91:
         44:5f:9d:d6:70:b7:70:bf:0a:62:02:30:81:db:79:6f:cc:69:
         af:e7:1c:e9:b6:87:82:7f:95:e6:2b:a4:96:2e:5a:7d:85:00:
         5f:77:e0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:51:03 2024 by rpki-client on console-fra.rpki-client.org