Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa
File:                     98ABB92C71DC11EFAC022E35C4F9AE02.roa (raw, json)
Hash identifier:          biNLUkEDDn1/BpBSr/oO5rSU5eJRCZiKRyOZQcfMQRI=
Subject key identifier:   01:69:30:81:91:89:A0:71:4C:00:6B:D0:BE:36:0A:CE:B8:1D:59:6E
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0D6D
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa
Signing time:             Fri 13 Sep 2024 14:29:34 +0000
ROA not before:           Fri 13 Sep 2024 14:29:34 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     153333
IP address blocks:        2406:840:fcb0::/44 maxlen: 48
                          2406:840:fea8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3437 (0xd6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Sep 13 14:29:34 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66e44c4e-6a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:d3:36:ce:6d:2c:2c:cc:81:1d:d0:cd:9b:
                    f3:57:76:36:c4:af:1d:22:b5:d0:b5:f8:77:30:8b:
                    d7:2f:48:c2:88:06:ec:be:16:6f:a2:5c:cf:c0:6a:
                    80:b7:16:e7:35:aa:4b:95:63:12:1a:75:f6:e8:fa:
                    f6:4b:72:68:02:53:14:5a:6f:80:74:ff:9e:1b:64:
                    75:fa:e0:4d:f0:0a:1e:19:f2:4b:0c:80:6c:1d:b9:
                    45:29:e3:76:91:a1:6c:d8:fe:08:51:e7:32:68:84:
                    56:a4:b5:d9:6d:40:87:f7:e3:7c:6a:2d:be:b7:7f:
                    15:6f:d8:59:ba:f7:27:ce:ed:23:47:5b:cd:4b:c9:
                    9c:34:47:4f:91:a2:1a:0c:fa:f0:4d:18:44:30:36:
                    75:6a:54:f4:ee:23:d9:62:3b:e7:07:09:3f:7f:4a:
                    f1:7d:97:68:5c:ab:98:05:3c:57:e9:b7:53:21:a1:
                    7b:20:2a:d6:96:48:a9:b6:f6:28:6f:86:72:b6:22:
                    ab:47:ce:77:06:6f:90:bc:56:e9:d3:c9:6a:cf:c9:
                    83:e2:1f:52:4f:24:0a:aa:73:4a:03:bb:23:32:c5:
                    46:fc:b6:c4:fa:21:0f:cc:5f:32:2f:a6:f5:4d:fe:
                    3b:2b:ce:87:87:86:f1:30:7c:45:fe:f7:d1:70:92:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:69:30:81:91:89:A0:71:4C:00:6B:D0:BE:36:0A:CE:B8:1D:59:6E
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fcb0::/44
                  2406:840:fea8::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:44:57:b1:21:5d:79:0d:d5:db:36:db:3d:69:e4:c5:1a:
         6e:f5:01:90:98:70:89:6c:71:4a:06:0b:36:7b:a7:9f:7b:fe:
         7a:ea:5f:ef:1e:58:84:15:f3:64:00:33:5c:e3:2f:5a:61:ec:
         ba:9d:19:ca:88:29:db:e0:73:99:ad:fa:44:83:c8:52:1b:81:
         85:01:f9:1c:2d:0f:71:f4:21:22:fb:69:c5:e8:42:ff:12:9a:
         26:ae:b5:d6:d8:19:b2:fe:ef:1d:76:13:a8:6b:bb:48:43:18:
         63:ba:c4:34:88:67:dc:d9:a9:cf:ae:f2:44:cf:46:d0:f2:f4:
         18:ce:ec:76:53:5f:68:58:27:c3:34:00:49:4c:59:18:09:93:
         37:be:d5:32:89:91:19:4f:70:28:e6:31:f6:10:44:5a:b3:9b:
         ab:c8:ee:1b:33:e8:bb:bf:83:d5:54:ab:b7:d0:27:d8:52:1e:
         fc:96:f6:f1:8c:ed:3e:51:90:45:ce:75:5f:47:2b:dc:69:f8:
         b1:84:5b:1e:4c:c0:db:5c:38:f6:4e:fe:ea:06:5b:d4:e7:01:
         f5:09:1c:fd:ef:07:99:6f:85:a4:62:fe:f1:bb:0e:03:89:b0:
         76:5f:1b:a8:e1:a3:4a:d6:fb:96:20:a0:c5:d7:7f:d6:48:06:
         aa:93:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:00 2024 by rpki-client on console-ams.rpki-client.org