Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/826245A8913111EBB0F6C809C4F9AE02.roa
File:                     826245A8913111EBB0F6C809C4F9AE02.roa (raw, json)
Hash identifier:          JGsLDzt38XOSViIPX95cgMnIlla+BQcCXz/NpiJyirg=
Subject key identifier:   C2:4C:82:1A:E4:E7:49:96:D7:88:DE:26:5D:44:26:6B:34:44:F7:64
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0CA6
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/826245A8913111EBB0F6C809C4F9AE02.roa
Signing time:             Sun 26 May 2024 21:32:48 +0000
ROA not before:           Sun 26 May 2024 21:32:48 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     211571
IP address blocks:        2406:840:e500::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3238 (0xca6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 26 21:32:48 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6653aa7f-19f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:ab:f1:15:6e:d8:f5:be:cc:ac:d2:4c:8d:
                    bc:73:99:16:f3:2b:9e:87:06:ce:96:03:c5:8e:16:
                    e6:ac:68:e1:01:28:8b:62:08:cb:e4:a7:ae:28:20:
                    fd:ff:9f:8c:0f:a2:87:e0:56:11:f8:03:e2:7c:08:
                    d6:d9:73:fa:e5:4b:0d:a0:7d:b9:6f:a5:85:24:b9:
                    d2:27:66:91:d6:82:85:ae:de:59:d3:26:3c:5b:70:
                    0e:74:d2:38:8e:f6:71:b6:e0:0d:fc:29:05:4f:2b:
                    b4:83:92:b6:c5:56:e5:f2:14:aa:f3:bc:6c:e5:63:
                    fd:0e:f9:88:6a:c7:0c:f9:b8:f3:c8:ad:f5:50:4f:
                    d8:23:37:02:53:b0:1b:78:9c:3e:8a:6e:21:ff:1d:
                    be:ab:4a:74:83:ff:77:b9:20:3e:d9:8c:ba:ba:42:
                    c4:80:f8:b7:42:0a:bc:ca:0b:6f:70:c4:3b:7c:38:
                    05:16:7e:4a:ad:37:e6:89:f7:a9:76:21:19:e4:80:
                    b1:26:3c:cf:20:bf:af:b0:e8:6e:81:b7:c0:55:00:
                    a3:d9:f5:af:3d:4b:45:e7:dc:60:1a:e5:6f:0a:c8:
                    c8:5e:ff:a1:40:16:cf:b4:db:48:9b:03:c7:40:c0:
                    08:a6:78:ec:12:9e:a0:17:2a:55:34:dd:e3:98:b7:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:82:1A:E4:E7:49:96:D7:88:DE:26:5D:44:26:6B:34:44:F7:64
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/826245A8913111EBB0F6C809C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e500::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:34:0a:ff:74:a2:c2:df:6e:85:a2:8f:d8:6e:ce:0b:31:c4:
         85:ea:c4:d0:18:b1:dc:4a:d6:df:59:ba:f5:a8:3a:28:ac:86:
         0a:a7:53:e8:a7:29:09:c8:51:a5:fc:8a:b9:2e:7b:e1:e8:2d:
         09:04:ab:80:1f:b5:b2:6a:e5:69:71:f8:57:e4:70:ed:ad:84:
         55:34:c5:a3:d3:fd:ec:08:b7:99:3b:72:ea:bf:79:18:21:d0:
         25:49:f7:79:b6:a5:dc:a0:2b:22:69:fa:1a:79:bb:e2:82:b1:
         dd:bc:6a:a6:a6:3d:9c:7c:24:f4:25:4c:8f:48:b0:0e:9c:c2:
         d2:f2:83:77:04:86:e0:bc:d3:94:96:e1:fd:00:74:e1:f9:8c:
         a5:a1:5f:57:6b:e3:8a:e3:40:29:d1:1f:ef:5d:b7:03:a9:fa:
         ca:6e:48:3f:f8:7f:09:9a:33:49:ce:14:de:fa:0b:e4:55:7e:
         40:e1:6e:45:8d:f1:e1:04:cf:7a:20:63:b8:48:af:0c:2a:69:
         ab:09:ff:9f:f7:e1:1e:fb:ea:a0:4d:a3:cc:2c:61:04:6b:e7:
         34:42:9b:00:dc:8a:bf:90:5b:3b:9f:65:21:69:8b:33:41:92:
         4b:8c:b9:9d:a3:9c:13:83:8e:8d:a0:c4:ad:4a:26:a4:c9:61:
         23:ae:5a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:00 2024 by rpki-client on console-ams.rpki-client.org