Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/750910509E7411EE9B044572C4F9AE02.roa
File:                     750910509E7411EE9B044572C4F9AE02.roa (raw, json)
Hash identifier:          w/cJMN0z1s8JtYkIt1PgqIPyC9p0upGhd0qLtVhPcgY=
Subject key identifier:   2E:77:86:4E:5C:66:0E:CD:3B:35:0F:86:AE:ED:FF:8E:CA:D2:28:1A
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0B8B
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/750910509E7411EE9B044572C4F9AE02.roa
Signing time:             Tue 19 Dec 2023 13:42:31 +0000
ROA not before:           Tue 19 Dec 2023 13:42:31 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     152186
IP address blocks:        2406:840:fec5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2955 (0xb8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Dec 19 13:42:31 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65819dc7-1120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:20:1d:9c:46:9a:36:9f:c1:db:92:87:83:
                    1c:b4:5e:e6:4f:6c:22:8d:7c:2a:49:38:e7:9f:05:
                    15:e8:8e:db:ee:9e:e9:cc:a3:98:bc:7e:7f:3d:67:
                    9c:d4:c4:b6:c7:37:35:9d:cd:57:f3:9c:49:7d:78:
                    0e:15:0d:11:cd:4d:92:02:b7:1c:ad:46:3f:55:5d:
                    fe:e5:a4:b3:0f:55:80:91:00:b3:70:32:c9:30:5d:
                    e1:ea:c9:c8:42:2c:c2:d9:6c:66:32:2f:00:84:9d:
                    33:ee:cb:5f:37:18:ce:70:b2:a9:9d:d6:2a:1a:1c:
                    fd:01:b7:a7:25:e3:a4:89:ed:a9:7a:3c:48:85:d3:
                    cf:13:18:4e:0e:07:0b:e2:f5:08:52:b3:78:b5:cf:
                    a0:b6:cd:2e:a3:d1:16:96:5c:06:18:ad:1c:57:7e:
                    85:73:4e:ad:a4:48:b8:86:d5:e2:fe:a9:f6:b8:89:
                    8d:08:40:f2:c2:47:21:d0:1f:be:65:f3:0a:39:f2:
                    c5:d3:1f:e5:7e:a0:37:39:c0:92:f8:33:5c:78:70:
                    2b:a5:26:51:38:b3:10:74:55:b7:5b:42:a5:60:26:
                    89:b0:c2:8e:fe:98:8d:af:f3:8a:24:2d:02:6f:9c:
                    0d:1b:44:4d:21:9a:fb:ae:56:4f:0e:7a:40:90:2a:
                    02:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:77:86:4E:5C:66:0E:CD:3B:35:0F:86:AE:ED:FF:8E:CA:D2:28:1A
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/750910509E7411EE9B044572C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fec5::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:a5:83:fa:3f:84:4f:7a:c8:87:a2:b6:fa:a4:f2:29:72:b3:
         38:96:5d:1b:a1:57:19:e8:f7:a2:c9:25:10:f9:36:5a:0d:b8:
         6a:24:99:c1:c3:19:0e:c9:e6:85:8a:5c:99:54:23:31:36:af:
         03:32:a5:ea:fd:35:23:25:67:d8:9c:ce:76:ff:25:1a:05:6d:
         83:bb:81:78:b7:1c:a5:8a:43:64:1f:0f:57:06:ed:e0:b2:3f:
         be:5f:9a:6a:9b:60:37:99:c2:8d:9b:a0:05:d4:88:58:e5:39:
         52:ae:a7:7f:11:bb:c0:0a:1f:eb:06:0f:d2:c5:57:b3:ce:56:
         ac:5d:4a:9f:a2:2a:60:56:64:ce:be:f5:90:a0:84:a8:48:5a:
         eb:7e:fe:4e:4c:94:34:43:3a:7e:78:ca:f1:1e:06:7e:71:30:
         e4:b1:77:7b:69:e1:cf:55:de:ad:2e:2b:3e:b6:0d:6d:bf:a1:
         74:49:ae:42:5d:23:37:7c:82:3f:11:65:78:15:a2:47:13:5b:
         f9:7f:eb:61:bb:db:18:2b:74:08:75:0c:fc:f2:6a:b6:e6:d1:
         ab:25:d8:86:a3:a9:5f:09:e6:e6:4c:7e:93:e8:d5:b1:ea:0a:
         b6:92:c8:e5:72:23:3b:ba:7a:e3:40:3c:00:ff:4f:98:4f:67:
         69:f6:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org