Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/744B793A39C311ED8D40D246C4F9AE02.roa
File:                     744B793A39C311ED8D40D246C4F9AE02.roa (raw, json)
Hash identifier:          89zXWla8b/+B7aVnUwcR4UVftDnn0g8WzBXLoCRzR9A=
Subject key identifier:   54:9F:AD:BF:01:01:8D:34:9C:29:4A:DB:0A:48:87:1B:9F:E8:AA:1A
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0A61
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/744B793A39C311ED8D40D246C4F9AE02.roa
Signing time:             Sun 14 May 2023 22:14:56 +0000
ROA not before:           Sun 14 May 2023 22:14:56 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     150323
IP address blocks:        2406:840:9960::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2657 (0xa61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 14 22:14:56 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64615d5f-4874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:94:94:db:2b:89:b3:30:ac:05:39:9f:1d:
                    b4:ca:95:a3:b7:ed:bb:56:10:65:b2:2d:56:d3:1b:
                    06:14:40:0e:29:09:60:ac:11:92:71:95:c6:06:9b:
                    de:71:e4:c1:c8:75:da:79:50:5c:3a:d4:99:c2:de:
                    69:a7:46:df:aa:59:72:fc:65:09:ce:71:4f:b4:d7:
                    ff:8d:47:1b:11:24:54:fc:b5:33:84:04:5a:d3:44:
                    46:91:be:c5:ee:19:e2:d4:30:cc:26:4f:9d:07:1d:
                    e9:96:fc:9d:cd:24:9b:e4:9d:39:18:0d:44:79:3d:
                    39:f8:1c:37:f2:0b:a8:9c:63:39:5d:36:d6:c1:bb:
                    c2:69:54:31:d5:97:21:70:8b:8e:b6:d2:a8:47:e0:
                    ea:0f:42:f9:55:a3:4c:49:fd:b2:a5:35:ca:7d:12:
                    26:9d:96:12:95:19:55:05:73:e6:37:1e:70:81:1e:
                    88:3e:3f:8c:f4:d0:93:5e:08:e6:7b:4e:26:a0:97:
                    de:41:d3:00:d7:3a:dc:0d:c7:a5:5f:ab:53:5f:75:
                    7d:07:cf:04:ee:2a:39:32:1e:6f:f7:4c:b3:87:79:
                    f4:ce:fc:86:fe:c4:6a:ef:58:e3:12:55:b4:82:9e:
                    63:65:b4:b8:15:11:0e:1f:6d:71:13:f5:8b:46:1b:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9F:AD:BF:01:01:8D:34:9C:29:4A:DB:0A:48:87:1B:9F:E8:AA:1A
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/744B793A39C311ED8D40D246C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9960::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:ea:48:2e:de:21:4c:1a:06:47:83:40:ac:e4:e1:5f:94:69:
         fc:0d:6d:07:ee:6c:b4:92:61:9f:e2:fd:97:0e:4f:7b:fe:57:
         89:f6:74:de:1f:9f:e1:a4:0c:16:37:37:2e:21:ee:5a:42:38:
         4c:2d:8e:2c:9e:bd:e0:dd:a7:42:09:05:59:80:1b:d1:7f:20:
         a0:8d:0d:ce:b6:de:52:61:17:ba:af:dd:18:1d:e9:d0:e8:19:
         01:06:8e:f9:dc:d4:a9:13:6a:c8:c6:64:d5:d7:53:dc:65:a6:
         4b:82:e9:fd:05:53:a6:30:56:82:eb:b1:61:37:3d:80:5a:ce:
         b8:7d:e7:f7:5b:e1:58:e0:d5:3f:5e:e0:82:28:c8:2a:2b:62:
         e3:12:93:ec:8d:1c:29:24:df:43:22:1a:a4:46:e9:34:a7:aa:
         79:b4:54:18:60:2f:af:a6:52:29:c2:6a:51:2a:21:18:a6:40:
         3a:33:64:0f:1c:e8:3a:2b:aa:28:67:b9:2d:cd:c7:d7:59:bb:
         49:a6:ac:92:e3:67:6e:0a:1b:f1:84:af:11:5d:ab:4c:39:e6:
         26:3d:09:0f:be:2e:f3:3e:85:dc:db:0e:ff:1f:36:fc:41:aa:
         3d:87:79:83:9b:f5:42:6f:81:93:2c:6a:53:c3:78:bc:3c:76:
         b0:36:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org