Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/59125552AAE411ED85DB9C62C4F9AE02.roa
File:                     59125552AAE411ED85DB9C62C4F9AE02.roa (raw, json)
Hash identifier:          WxELmlOwIeaXfwhkkdYgSNkD1HStnNOISZ7iSevYCtc=
Subject key identifier:   65:82:69:A7:68:30:8E:D4:AC:4D:F3:89:7F:1A:A7:97:76:D9:13:E6
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0A6A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/59125552AAE411ED85DB9C62C4F9AE02.roa
Signing time:             Sun 14 May 2023 22:15:07 +0000
ROA not before:           Sun 14 May 2023 22:15:07 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     200078
IP address blocks:        2406:840:9980::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 14 22:15:07 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64615d6a-e0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:25:9d:98:be:45:72:97:e4:4a:06:74:b6:
                    bb:72:ad:40:e1:64:9b:6a:1a:bb:62:b7:64:f6:bc:
                    2c:ff:88:08:08:6b:55:09:f0:53:06:ae:1e:fa:6c:
                    e2:64:f5:74:a0:18:0c:79:4f:3b:dc:f4:7e:69:db:
                    b7:70:f2:37:0a:fe:6d:5f:3d:a3:b5:8b:cf:98:f6:
                    b4:ea:32:d6:27:05:f1:9a:45:d8:88:83:d7:86:22:
                    13:aa:cf:17:8a:e5:be:20:9b:ac:6c:1a:50:01:e9:
                    17:2c:4c:96:f5:0c:2f:e5:b0:81:82:48:14:8c:aa:
                    ba:09:70:e1:d0:7b:ad:93:d6:ca:4b:30:55:3a:72:
                    2f:6c:6a:02:76:d5:72:7f:e9:9c:d0:23:4f:fa:e9:
                    db:d2:5e:58:5f:23:c5:e1:cb:71:7f:f1:f6:7d:d8:
                    19:97:fc:44:98:b0:ad:75:45:19:b5:d2:e5:28:e8:
                    ca:42:17:17:ce:36:28:7d:35:b7:01:5f:2f:09:7d:
                    70:60:7a:dc:15:76:96:4c:d0:a2:c5:42:b3:07:33:
                    c0:e5:1f:e1:8b:37:8b:2d:7a:41:37:b6:0e:86:67:
                    41:f5:19:b3:2b:7f:1b:f8:d7:c4:c9:f3:cf:87:5b:
                    ed:56:16:1e:f5:fd:34:5a:16:02:d6:0a:42:37:39:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:69:A7:68:30:8E:D4:AC:4D:F3:89:7F:1A:A7:97:76:D9:13:E6
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/59125552AAE411ED85DB9C62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9980::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:d8:37:72:1a:a5:d6:2a:5d:fe:01:7c:21:d9:e9:5e:fa:a1:
         5c:96:34:23:5a:d7:f3:2c:93:1b:55:13:e4:0a:55:71:db:c9:
         25:df:10:bb:a3:92:9f:1a:29:12:ed:9a:dc:e5:cb:15:6f:c1:
         a2:c5:1e:89:79:ae:b7:9f:9a:69:58:13:e5:39:d1:a4:9f:1d:
         30:83:33:44:71:ea:ef:58:63:0a:95:6b:4e:d8:e2:a1:6f:f7:
         44:35:b1:5d:ec:fc:08:d9:3d:1b:f5:97:99:e0:ae:8f:9b:fb:
         9b:b4:84:6f:79:2c:57:93:a6:f2:9b:bd:20:70:63:b1:e3:5c:
         d9:7d:02:c0:65:c5:e4:78:1a:a5:89:c3:15:97:b6:73:af:57:
         37:5d:d4:94:29:83:a0:4d:c8:34:20:0e:5f:61:09:e7:29:14:
         5d:fc:28:f8:5c:91:0e:92:59:67:74:3e:83:78:cb:62:3a:7b:
         11:33:2a:24:9c:ae:d8:85:0f:53:a9:6d:f3:26:9d:12:f6:65:
         9c:c2:86:14:7c:15:e6:43:0a:b8:1d:db:a1:88:06:1c:6d:2d:
         a5:85:5b:e1:b8:cb:e5:2f:98:87:f7:2b:82:76:56:7e:d4:ff:
         8e:a8:df:d2:3d:99:67:84:42:3a:4a:bd:78:d4:47:3e:c0:28:
         40:45:b5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org