Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/01380E8A73C011EE92311C44C4F9AE02.roa
File:                     01380E8A73C011EE92311C44C4F9AE02.roa (raw, json)
Hash identifier:          SCG+kUzu+Kv0pHzhAiIpOKevFJXWIR4pgQ0QqgUX4hM=
Subject key identifier:   57:3F:35:E2:FD:C5:65:F0:7E:CD:32:EB:9E:DA:23:3D:FD:F1:8D:3E
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0CB1
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/01380E8A73C011EE92311C44C4F9AE02.roa
Signing time:             Sun 26 May 2024 21:32:57 +0000
ROA not before:           Sun 26 May 2024 21:32:57 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     32167
IP address blocks:        2406:840:fa80::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3249 (0xcb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 26 21:32:57 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6653aa89-9628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:b0:08:c1:55:25:c0:db:c0:a4:16:45:3e:
                    f6:bc:08:03:09:06:ba:1d:ec:cf:59:91:24:09:b1:
                    f2:b9:56:ee:d6:2e:10:61:36:22:05:af:1a:a9:59:
                    60:82:50:92:e4:ac:22:97:28:e8:9a:61:08:99:c8:
                    f1:08:51:e4:2f:43:4c:9d:12:ce:5a:fa:fd:9a:49:
                    8b:22:c9:ce:12:e3:37:f7:ac:36:5c:53:c8:66:45:
                    20:b0:16:04:95:f2:a4:a1:64:a2:b9:43:52:12:fa:
                    c0:39:6d:96:74:2b:6c:6e:20:7f:5f:da:6b:7b:71:
                    3b:5c:de:5e:fd:a1:95:65:f3:1d:06:5c:3a:5d:5b:
                    78:f0:b3:a5:70:96:a6:49:ce:51:72:06:cd:d3:a0:
                    8c:9b:7f:23:11:a2:aa:4d:bb:a9:c3:00:8f:c8:52:
                    1b:7f:38:c5:ff:53:11:43:43:88:4a:d5:e4:5f:c9:
                    a9:fe:f5:ae:48:ae:7a:de:28:98:9d:52:e4:64:be:
                    96:3c:2a:86:0c:63:30:6b:af:50:e1:4d:ef:ec:44:
                    40:ac:66:a0:81:3c:1e:fc:3c:78:58:c5:58:fd:df:
                    2c:2f:f1:fc:e3:6c:a0:7c:55:18:a8:c1:88:d9:a8:
                    d1:9e:ac:14:d0:e9:95:88:74:39:35:87:f8:d5:77:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3F:35:E2:FD:C5:65:F0:7E:CD:32:EB:9E:DA:23:3D:FD:F1:8D:3E
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/01380E8A73C011EE92311C44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fa80::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:b8:5a:7a:8d:64:c4:a1:5d:66:6b:e8:cb:67:fd:58:85:04:
         b3:0e:19:38:c5:0a:2b:9e:9e:88:4f:0a:89:13:82:75:54:33:
         8f:dc:05:10:e7:d4:45:66:3a:b6:7f:9e:db:68:79:ae:4f:dd:
         f9:99:89:62:6d:91:4f:72:8c:cf:7f:43:c6:ba:80:44:e3:e8:
         6e:47:09:aa:64:a6:a9:ae:7d:9d:76:7c:c6:04:21:c6:48:71:
         a7:30:d3:fc:1c:f8:1d:f0:83:94:63:e6:0d:fc:ae:80:99:46:
         80:ce:11:c7:cf:99:02:02:63:f2:8e:91:d4:ad:87:fc:79:40:
         6a:53:26:09:8b:4f:47:84:6a:cd:86:93:72:f9:52:c9:9e:1d:
         cc:27:ed:2b:02:77:16:09:77:0c:58:af:49:55:bc:f8:96:e2:
         2f:bd:86:2d:b6:27:64:3a:fa:e3:7b:04:73:71:a3:3a:de:d6:
         59:36:57:9c:66:a2:49:d4:41:e3:6f:16:2c:d6:ff:ff:7e:0b:
         44:56:2a:34:f5:ea:14:81:16:b9:66:f8:ca:9e:7d:51:2f:81:
         f3:3b:fd:a3:dc:24:8c:50:fe:94:d0:ff:32:5a:13:36:3f:28:
         d5:6c:df:1e:dc:34:b6:18:d9:4e:6f:21:3d:73:08:75:ef:af:
         e8:5b:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:00 2024 by rpki-client on console-ams.rpki-client.org