Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa
File:                     6E59D5EE1A3C11EE8A846877C4F9AE02.roa (raw, json)
Hash identifier:          TjD26dcMaAajHP1723qLxq1is2goqM2YcIvNxnlN3ko=
Subject key identifier:   C1:29:CD:B9:6F:BA:B5:51:69:B1:91:E9:61:D2:A2:DC:45:54:16:62
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0CBA
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa
Signing time:             Mon 27 May 2024 15:52:23 +0000
ROA not before:           Mon 27 May 2024 15:52:23 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     151490
IP address blocks:        2406:840:fa40::/48 maxlen: 48
                          2406:840:fedb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3258 (0xcba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 27 15:52:23 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6654ac37-055e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:84:96:1d:ff:99:91:76:72:ae:30:99:eb:
                    b3:28:44:de:c0:19:71:0d:93:4c:7b:12:6a:f2:8c:
                    65:6d:a5:63:d3:41:92:77:93:f2:53:f5:21:aa:5e:
                    d1:8a:85:ec:0a:5f:41:b5:74:b0:aa:d5:02:0a:98:
                    0b:b1:7e:3d:0a:b8:f0:0b:74:3f:fe:93:90:e0:96:
                    e2:fc:5a:bf:db:44:a0:ae:5a:f6:6c:9f:9d:37:01:
                    ff:e5:4b:28:d1:c6:ae:c5:37:00:d7:49:8a:52:de:
                    71:6c:ef:e5:36:85:1c:11:b8:07:c5:aa:5b:39:77:
                    f1:da:a1:d4:c4:c1:44:93:d5:bf:79:94:7b:e2:98:
                    89:c9:2a:31:f0:e8:0d:ed:b0:23:8c:45:c8:f3:53:
                    f6:d3:cd:da:97:67:ba:03:05:60:f4:7c:e2:ff:f3:
                    80:5e:2d:e5:3f:23:f9:ea:1b:9e:8d:55:9a:a6:f5:
                    e8:89:81:28:7b:17:15:29:93:14:df:05:bb:ec:9c:
                    08:07:c8:ac:52:52:d0:f0:1e:d8:70:09:c2:3f:56:
                    ce:4e:ef:9d:c6:c1:a5:94:19:4b:17:9c:f8:3f:b8:
                    f2:26:1e:a6:59:b9:fe:43:d1:24:6a:2a:47:9a:db:
                    88:8c:ca:53:78:0c:49:06:e3:c5:cd:99:94:2f:0a:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:29:CD:B9:6F:BA:B5:51:69:B1:91:E9:61:D2:A2:DC:45:54:16:62
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fa40::/48
                  2406:840:fedb::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:fa:ea:50:27:65:ce:c6:bb:d6:65:1a:e0:57:45:be:9c:31:
         ba:4d:a6:13:ca:d3:45:4d:e6:a9:43:f6:2f:0e:48:1f:29:59:
         21:c8:ce:93:61:ea:46:2b:d0:8e:82:e3:d8:c9:e9:89:00:df:
         fd:dc:e4:6b:7c:00:ee:9d:4c:53:71:e4:a2:f7:56:da:03:7f:
         ce:37:a3:e0:1a:df:a3:82:45:d8:2b:59:8d:64:aa:ea:03:04:
         05:bf:6c:6d:28:e9:36:1f:2c:94:d3:d1:67:d8:f9:91:80:af:
         56:09:9d:1f:72:5b:88:30:5c:10:65:a9:a0:55:73:22:d0:35:
         f9:21:e8:a2:5e:4c:15:71:ca:b5:ed:97:62:56:39:aa:17:e6:
         2c:b4:22:32:a8:2a:f3:9a:50:12:a4:1e:ba:8c:67:85:97:92:
         98:d3:94:3c:61:61:dd:e1:da:d2:94:03:de:7a:f9:10:19:d3:
         85:1e:bf:19:da:26:29:2e:f5:f8:cb:fb:3b:98:97:37:b7:36:
         16:42:68:5f:0f:53:93:cd:65:b4:f1:3c:14:a0:97:8d:91:59:
         2b:9a:3b:50:44:fa:c6:b1:19:57:ff:a4:93:2f:0a:a4:f7:b3:
         4c:74:fe:03:89:82:dd:c9:1f:54:14:22:f2:56:0a:71:5b:23:
         0d:80:02:1d
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjQwNTI3MTU1MjIzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU0YWMzNy0wNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz++Elh3/mZF2cq4wmeuzKETewBlxDZNMexJq8oxlbaVj00GSd5PyU/Uhql7R
ioXsCl9BtXSwqtUCCpgLsX49CrjwC3Q//pOQ4Jbi/Fq/20Sgrlr2bJ+dNwH/5Uso
0cauxTcA10mKUt5xbO/lNoUcEbgHxapbOXfx2qHUxMFEk9W/eZR74piJySox8OgN
7bAjjEXI81P2083al2e6AwVg9Hzi//OAXi3lPyP56huejVWapvXoiYEoexcVKZMU
3wW77JwIB8isUlLQ8B7YcAnCP1bOTu+dxsGllBlLF5z4P7jyJh6mWbn+Q9EkaipH
mtuIjMpTeAxJBuPFzZmULwrlBwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMEpzblv
urVRabGR6WHSotxFVBZiMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNkU1OUQ1RUUx
QTNDMTFFRThBODQ2ODc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwAkBghA+kADBwAkBghA/tswDQYJKoZIhvcNAQELBQADggEB
AAH66lAnZc7Gu9ZlGuBXRb6cMbpNphPK00VN5qlD9i8OSB8pWSHIzpNh6kYr0I6C
49jJ6YkA3/3c5Gt8AO6dTFNx5KL3VtoDf843o+Aa36OCRdgrWY1kquoDBAW/bG0o
6TYfLJTT0WfY+ZGAr1YJnR9yW4gwXBBlqaBVcyLQNfkh6KJeTBVxyrXtl2JWOaoX
5iy0IjKoKvOaUBKkHrqMZ4WXkpjTlDxhYd3h2tKUA956+RAZ04UevxnaJiku9fjL
+zuYlze3NhZCaF8PU5PNZbTxPBSgl42RWSuaO1BE+saxGVf/pJMvCqT3s0x0/gOJ
gt3JH1QUIvJWCnFbIw2AAh0=
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:13 2024 by rpki-client on console-fra.rpki-client.org