Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/12A368AEDE8811EDB3954136C4F9AE02.roa
File:                     12A368AEDE8811EDB3954136C4F9AE02.roa (raw, json)
Hash identifier:          Tj0kXz0xV1VgBGo/uso+KCUbpYeLeqDxfyGrz9A3V74=
Subject key identifier:   0F:BA:FB:CE:4E:2E:C5:17:AF:ED:52:6C:97:81:48:BF:C5:62:62:3F
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0C7C
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/12A368AEDE8811EDB3954136C4F9AE02.roa
Signing time:             Sun 26 May 2024 21:32:09 +0000
ROA not before:           Sun 26 May 2024 21:32:09 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     151193
IP address blocks:        2406:840:fed5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3196 (0xc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 26 21:32:09 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6653aa59-9037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:16:92:20:ff:3d:9d:e8:74:1e:a6:9f:cf:97:
                    03:e3:ae:e0:d0:60:41:c6:9b:4a:46:a3:2a:8a:fe:
                    2d:24:e3:7d:90:57:8e:6d:20:9f:32:2c:a4:01:9a:
                    76:06:f7:0e:3b:38:db:ec:86:94:3a:b0:4b:24:25:
                    33:a8:ac:8e:d4:17:57:21:17:58:81:55:c2:39:31:
                    51:6b:13:0a:f4:c7:b3:6b:83:eb:df:cc:53:0f:a3:
                    4a:83:7a:94:14:83:c9:bf:b6:a7:54:a0:1d:df:ed:
                    45:93:59:3b:a5:ac:f3:1d:27:05:81:01:f5:a4:01:
                    47:34:e2:80:8d:03:67:f3:28:27:0e:24:d4:c6:09:
                    9c:a3:56:60:6c:30:ac:41:d7:7d:3d:39:10:28:ba:
                    3e:5f:65:93:52:d5:82:41:4e:b8:e0:cc:f1:c6:a5:
                    dc:38:30:b8:9a:f2:49:71:a5:0b:30:b9:d5:49:00:
                    1a:5b:f1:d2:46:e6:9e:2f:80:c7:94:33:49:ef:df:
                    c2:c6:c0:93:0b:be:24:00:fd:5f:aa:dd:22:10:75:
                    f8:f0:88:93:2e:39:c0:7f:06:3c:a2:c7:3a:e7:f5:
                    19:6a:16:9b:85:d9:ff:4c:a2:67:ce:a3:a8:83:c2:
                    58:f6:b9:90:fc:41:a9:fc:4d:c6:a4:71:e8:bc:7d:
                    75:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BA:FB:CE:4E:2E:C5:17:AF:ED:52:6C:97:81:48:BF:C5:62:62:3F
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/12A368AEDE8811EDB3954136C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fed5::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:07:b1:6d:df:2c:c5:7f:1a:24:52:55:aa:f8:51:47:71:35:
         74:dc:c1:9a:0c:d1:7a:66:c8:10:11:9e:91:61:f4:f6:0e:59:
         fd:0c:67:06:29:3e:c4:8a:be:e7:13:29:b9:b2:b6:9a:62:7d:
         00:da:57:29:0a:0e:06:bd:4c:a4:cd:b6:48:27:cb:a3:cf:be:
         f8:77:0a:73:37:ad:47:80:52:8b:e2:05:e6:60:12:c3:36:73:
         26:2b:01:1c:e2:a2:02:6f:4b:2b:7e:28:8d:fe:79:9a:a4:f7:
         55:cb:11:b7:3c:cb:f7:4a:b6:2a:9b:b0:62:7f:90:cf:3d:64:
         6f:34:aa:42:81:61:f9:1c:97:57:4f:f5:a0:d9:74:e7:e1:03:
         17:f1:d6:b5:e7:dd:b1:ba:6a:ef:df:a7:31:a0:ee:d6:8f:94:
         e5:d6:c0:bd:21:19:ee:56:88:0b:c0:80:31:a5:47:88:59:9a:
         e1:39:20:87:80:fc:91:a4:70:f4:e1:d0:b1:9b:4f:d1:20:bc:
         18:ec:f7:0b:07:dd:10:fd:a0:44:7a:d2:5c:5e:00:6c:19:36:
         68:55:e9:32:cf:9b:5c:cb:3e:fe:db:33:d8:d7:cd:6d:37:17:
         47:3b:09:06:ea:6c:f7:7f:76:a1:c1:fb:87:7e:a1:c3:c4:20:
         ee:75:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:00 2024 by rpki-client on console-ams.rpki-client.org