Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/75EA140C0FFD11EE86648956C4F9AE02.roa
File:                     75EA140C0FFD11EE86648956C4F9AE02.roa (raw, json)
Hash identifier:          yLD2mMJ/JguUiBBrLZCRQ5zLZV2Y9u28K3LWUcowFXQ=
Subject key identifier:   25:56:0A:39:AD:3A:89:8A:55:14:E3:DD:ED:2E:56:DE:0F:6B:01:51
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0C81
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/75EA140C0FFD11EE86648956C4F9AE02.roa
Signing time:             Sun 26 May 2024 21:32:14 +0000
ROA not before:           Sun 26 May 2024 21:32:14 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     151418
IP address blocks:        2406:840:9100::/44 maxlen: 48
                          2406:840:fed0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3201 (0xc81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 26 21:32:14 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6653aa5e-e66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:d3:a3:43:dc:67:80:68:ac:ce:49:c3:c6:
                    5a:10:f4:89:f1:15:c3:1d:df:33:80:d6:dd:16:a1:
                    ca:b1:0d:39:5e:d3:7d:fc:55:fb:a3:e0:14:9c:ae:
                    8c:75:24:09:95:16:05:92:30:f8:3b:1e:5a:ce:9f:
                    35:cc:9e:38:9c:31:20:e1:42:1a:70:c1:8a:e7:7d:
                    4b:f7:9b:f0:f3:43:d8:85:f6:b8:cd:69:da:d6:0d:
                    e7:44:dd:d0:ec:a3:e2:28:d9:c1:58:4b:90:82:85:
                    82:85:26:31:db:42:cf:bb:af:37:2c:43:6e:57:83:
                    2e:16:8b:f3:c2:9c:7c:5d:d6:62:91:5c:25:fb:fd:
                    e8:9d:9b:fc:b2:75:72:9e:6b:c0:a8:b1:62:a5:d3:
                    96:72:23:40:fe:10:9f:10:4e:c3:a1:ad:f5:be:95:
                    72:fe:77:84:9c:99:b1:fa:fd:7f:63:ce:db:7f:bb:
                    fc:6b:ec:4d:43:93:0b:ed:4d:c8:62:61:b7:ff:50:
                    25:62:5f:2c:4e:57:2b:a6:2d:f9:d4:e1:50:b1:0a:
                    f4:42:55:b3:88:c0:fa:3f:5f:94:79:04:e0:38:30:
                    79:52:55:24:35:78:d3:77:d5:44:17:a4:50:59:c3:
                    44:5b:93:38:3f:b3:0c:39:32:0a:4b:e3:94:33:7a:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:56:0A:39:AD:3A:89:8A:55:14:E3:DD:ED:2E:56:DE:0F:6B:01:51
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/75EA140C0FFD11EE86648956C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9100::/44
                  2406:840:fed0::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:c0:89:59:70:0c:99:c6:11:d5:cb:fd:e5:a0:81:70:e8:b1:
         32:df:5b:92:1a:ea:63:33:3b:55:c2:e9:ff:2e:c8:2f:62:63:
         2d:3f:02:b5:aa:54:10:70:e0:9d:ab:b0:cc:ac:0a:63:8c:f5:
         c2:c0:cf:06:72:68:27:26:a5:2a:07:41:c5:e6:1d:6b:18:de:
         ab:46:97:9d:a6:b2:2d:20:53:d3:ed:4a:26:05:7f:4b:e7:2c:
         c2:06:76:89:87:9b:92:1a:2d:86:dd:e8:8e:c0:bf:60:ae:e9:
         d2:63:bf:8c:86:11:50:7f:f4:88:c7:36:5f:56:5f:a8:d8:d3:
         1a:07:fd:d3:19:29:6e:66:6b:24:ef:d5:3b:b9:9b:b1:ef:c8:
         3d:01:8d:de:ee:36:0f:11:fd:ee:2c:7e:89:2f:20:af:9f:0a:
         73:86:2e:09:a6:c7:1f:30:2c:83:6d:d3:6c:2b:f4:4d:87:cd:
         94:81:3a:77:9f:1c:ae:27:21:1e:b8:ca:d5:50:76:ed:09:4e:
         98:d0:1f:70:1a:0f:aa:77:31:58:0c:41:da:09:7e:41:c5:f1:
         c2:7e:bb:1a:0b:84:ab:fd:72:12:bb:a0:58:22:58:e3:7e:a6:
         45:cd:9a:6f:6b:5d:21:12:af:0d:2a:05:98:12:98:92:60:d5:
         e1:a6:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org