Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5C6D7744FB4B11EBB711424DC4F9AE02.roa
File:                     5C6D7744FB4B11EBB711424DC4F9AE02.roa (raw, json)
Hash identifier:          08J3J7qxT/mULMXQEbLwuWzsuNw/Y1/qPny/J9orouE=
Subject key identifier:   04:99:85:4F:38:96:1A:29:FA:1B:6E:72:CA:43:C4:75:1C:44:B5:7B
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0BA9
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5C6D7744FB4B11EBB711424DC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 01:48:30 +0000
ROA not before:           Thu 28 Dec 2023 01:48:30 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     142642
IP address blocks:        2406:840:eab0::/44 maxlen: 48
                          2406:840:fed8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2985 (0xba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Dec 28 01:48:30 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=658cd3ee-47ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:23:ea:80:69:18:6f:60:93:5c:79:54:cf:
                    3e:24:20:8e:a3:e5:7c:14:db:3e:17:a7:5a:7a:2d:
                    aa:a5:ee:f1:07:3b:7d:16:65:3a:e4:36:90:e6:5d:
                    7d:d0:5c:1f:e8:20:95:af:8b:fe:5a:c5:d9:2e:d5:
                    85:77:0f:04:e3:d3:7c:d6:a6:12:03:19:2e:cf:47:
                    e4:8b:2d:32:37:14:d8:a9:23:d0:67:73:56:18:f9:
                    95:ee:79:ac:00:fc:2c:76:a4:72:53:08:8c:72:9b:
                    e6:e1:83:14:1b:cd:1a:8e:0d:e4:b6:00:b0:e6:d9:
                    e5:8f:69:4f:e1:92:30:c8:7d:c1:d0:4e:65:b4:bb:
                    4d:82:da:a2:a7:aa:fb:30:e5:75:1c:d1:4c:a8:10:
                    2c:97:0a:f1:bf:77:8c:13:81:c2:ad:cf:2b:d0:fe:
                    9b:47:9a:a8:90:5c:36:9d:2a:e7:af:f0:9c:d3:0c:
                    d7:64:39:51:63:8e:17:2b:c4:76:23:6c:4b:b5:00:
                    64:68:0f:45:71:25:2f:01:59:9f:c6:9f:38:87:05:
                    9f:c4:24:0c:89:15:f2:67:27:28:ce:32:51:14:5c:
                    2f:8e:24:e1:09:06:61:4c:13:b3:40:d5:c8:34:16:
                    6d:88:c3:25:bf:42:06:59:59:8f:a7:f3:57:11:4b:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:99:85:4F:38:96:1A:29:FA:1B:6E:72:CA:43:C4:75:1C:44:B5:7B
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5C6D7744FB4B11EBB711424DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:eab0::/44
                  2406:840:fed8::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:95:d9:e8:ad:5f:45:ab:9f:be:e2:7f:9d:d6:29:b5:d9:76:
         24:1a:40:df:b5:77:69:7b:2a:f3:11:0b:20:23:67:14:ca:d5:
         27:81:b1:03:2d:70:50:54:5f:d6:1a:35:a0:dd:72:03:02:8e:
         88:3b:8e:a5:c3:13:24:4e:ee:ff:9b:f9:47:ba:99:98:7e:b0:
         5d:10:86:95:61:b1:d6:2b:15:76:0a:16:aa:6a:9e:f2:8c:9d:
         38:fb:05:86:09:d4:87:a1:ee:8c:fe:b0:88:cc:f1:27:c4:5c:
         f5:72:89:76:96:c4:8b:22:9a:7a:9b:5b:97:d6:6a:43:3b:69:
         c1:d3:55:0e:da:db:d1:3c:1c:b8:91:cf:78:83:85:c5:30:5a:
         25:06:a8:a0:7d:39:b2:60:46:97:0e:aa:5d:de:e0:c6:81:57:
         21:1e:95:4f:40:c1:ed:55:db:e5:53:39:0a:a8:80:12:7c:c3:
         6f:6e:49:22:6d:13:2f:a6:01:3a:49:3a:38:0f:73:19:aa:1f:
         96:b2:b8:83:11:01:39:7f:6d:5d:3a:12:6a:6d:71:44:e0:5c:
         51:04:13:50:d9:ba:c0:1b:c8:4b:26:68:8f:1e:5d:71:f6:8a:
         33:18:7c:3a:d6:1e:5f:ac:dd:9a:53:c1:cf:36:23:87:82:af:
         a1:db:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org