Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/750910509E7411EE9B044572C4F9AE02.roa
File:                     750910509E7411EE9B044572C4F9AE02.roa (raw, json)
Hash identifier:          foFr+FbINRsGh5mFduOGtatWwNOSYe414ir3GgiGi7o=
Subject key identifier:   15:DB:0A:AE:06:EA:13:71:75:E3:B2:C8:64:89:76:64:0F:15:8F:6C
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0C8C
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/750910509E7411EE9B044572C4F9AE02.roa
Signing time:             Sun 26 May 2024 21:32:25 +0000
ROA not before:           Sun 26 May 2024 21:32:25 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     152186
IP address blocks:        2406:840:fec5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3212 (0xc8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 26 21:32:25 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6653aa69-11f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:8a:c8:e9:09:5a:e9:92:f3:ec:64:81:ba:
                    9a:e8:df:1a:d0:7c:16:87:ae:82:c0:5a:7c:5f:20:
                    8e:b2:fd:50:d6:39:3b:2e:f1:aa:28:0e:7c:42:00:
                    23:3d:3d:78:b7:62:83:e1:ce:8f:15:21:e1:dc:20:
                    74:76:e8:43:1a:79:4f:52:e7:04:9b:f5:6d:c8:30:
                    94:06:ad:36:09:46:aa:51:5f:2a:1b:ad:1a:ed:92:
                    22:79:4d:f5:63:62:7d:1c:15:c2:0e:09:f2:d8:96:
                    cd:32:9f:19:ba:80:eb:12:99:7c:51:67:f0:e9:89:
                    92:b8:f6:64:71:56:14:e4:75:5e:0e:3e:98:44:97:
                    25:93:da:cd:9a:8e:17:66:be:75:3f:3e:a1:12:40:
                    82:34:71:30:d8:45:98:90:8f:9e:d8:b5:c9:1e:12:
                    52:a9:0c:e5:7e:53:b3:79:06:02:a2:29:81:9e:81:
                    23:91:53:7e:9c:7f:43:c4:3b:54:97:55:e0:61:1e:
                    68:bb:ce:70:93:5e:84:48:5b:79:60:58:93:c4:14:
                    69:50:25:5f:15:24:48:13:8e:71:06:ad:4b:10:a3:
                    4a:2b:47:59:fe:01:4f:e6:d9:4d:d6:17:ac:01:0f:
                    e7:b5:a2:4b:a1:3f:61:1b:bd:1c:9f:c9:02:2a:87:
                    5e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DB:0A:AE:06:EA:13:71:75:E3:B2:C8:64:89:76:64:0F:15:8F:6C
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/750910509E7411EE9B044572C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fec5::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:83:f4:ad:44:37:03:f6:95:c5:f1:f8:72:35:ac:8f:c8:
         08:08:06:0f:c3:80:bb:3a:e9:77:c3:f9:a9:70:d4:e8:2f:77:
         a3:af:81:9c:be:c1:c8:db:7f:10:e1:0a:19:c2:65:dd:14:6a:
         5d:74:2e:76:55:df:5f:d7:25:12:a5:03:e2:f5:4a:80:49:a8:
         da:a3:a4:2e:70:b3:1e:1c:de:39:6c:58:fb:26:f8:55:7a:1b:
         67:bd:4e:62:c0:2c:6f:6b:a8:1f:72:ff:60:23:a2:97:7a:f6:
         ed:77:53:21:c2:36:f5:40:a5:9f:e2:cd:05:35:29:34:3c:80:
         10:7d:f2:1d:14:8d:93:cb:3c:50:4f:7f:0a:45:95:17:c5:c9:
         29:28:b9:7e:b7:8d:73:dc:ec:f2:61:33:c8:fb:c1:7a:45:64:
         c2:ab:02:68:0c:cb:9e:a4:d2:b3:f5:e8:56:1d:7e:c1:09:4c:
         36:7c:e4:03:82:c2:a3:f6:fb:d2:db:a9:1c:0f:de:2e:a3:eb:
         fa:2d:17:3c:29:5d:b2:82:17:fc:b7:eb:90:d8:8f:10:f4:62:
         a0:c3:8e:b0:95:3d:41:c4:86:cf:51:25:3d:22:ad:bd:3f:8d:
         14:1d:98:87:36:20:64:3f:46:52:ce:4e:67:c5:73:4b:f5:0f:
         ba:3b:dd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org