Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
File:                     A1A37268814211EDA138A00AC4F9AE02.roa (raw, json)
Hash identifier:          md+a0yjWgmb08e6MuXGug8+kGuIsgrD7luH2zqcNk/4=
Subject key identifier:   B2:F1:0A:B2:31:95:6B:A2:2B:D6:35:1D:6E:69:09:3A:95:A5:A7:D8
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0C9A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
Signing time:             Sun 26 May 2024 21:32:37 +0000
ROA not before:           Sun 26 May 2024 21:32:37 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     203472
IP address blocks:        2406:840:9840::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3226 (0xc9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 26 21:32:37 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6653aa75-547e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b0:62:58:6e:a9:8a:96:e3:f5:8c:44:ff:3f:
                    77:59:e3:4b:9a:8c:80:ae:c2:14:ef:1e:fe:7b:3e:
                    3c:97:dc:94:bb:64:2e:00:51:7b:b8:81:20:da:8a:
                    04:58:55:e4:e6:ca:12:af:2a:84:bc:58:d6:c2:b7:
                    f7:bd:20:a8:42:84:79:24:cc:b0:3d:a7:ed:55:43:
                    f8:59:e6:c8:17:c0:ed:b7:36:9a:22:3a:34:65:11:
                    a2:20:d6:57:6c:2a:01:62:36:2e:a8:2a:42:6a:ab:
                    0b:82:9a:bd:a3:b3:e5:aa:f7:12:9b:ff:45:ee:dd:
                    7c:0f:9f:3b:db:a7:0b:b7:27:1d:30:26:6e:30:df:
                    87:36:cc:93:c1:4c:ee:90:f3:f0:e4:5c:f4:74:6b:
                    dd:4b:87:2c:f6:85:b9:03:a7:54:3e:03:a3:97:e1:
                    72:c5:de:04:2d:6a:cb:f0:57:0e:13:bf:56:38:04:
                    9e:d9:3c:03:4a:d9:87:d0:7a:0b:06:49:62:82:22:
                    91:22:cd:98:b9:10:9e:bd:cc:ea:e0:b3:4d:b2:c0:
                    ca:29:8d:18:12:a7:0d:0b:52:1f:50:9e:7b:d8:98:
                    4d:c6:e1:f3:7d:06:5b:42:ed:86:96:18:8a:9b:15:
                    96:1c:6f:bf:46:8b:f8:fe:b0:d9:f5:a7:91:ff:7c:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F1:0A:B2:31:95:6B:A2:2B:D6:35:1D:6E:69:09:3A:95:A5:A7:D8
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9840::/44

    Signature Algorithm: sha256WithRSAEncryption
         a3:6a:73:a0:07:bf:a8:c9:82:01:73:6a:c0:89:6d:91:a6:bd:
         02:a4:26:67:f0:e1:5f:af:80:2e:45:55:5b:a5:84:c0:85:06:
         67:5e:cb:b1:cc:78:89:ff:c4:37:b7:4d:a9:e4:b9:2d:f3:73:
         bc:54:f9:e1:a5:b0:64:cc:0f:62:c7:b9:43:6e:22:15:35:8c:
         72:9e:59:27:40:df:c1:1b:72:81:6c:ec:0e:15:82:55:89:d5:
         56:2f:30:27:ba:c9:40:a1:0d:f0:6c:74:e6:99:27:bd:8d:ea:
         3c:3a:b8:00:17:30:89:9a:72:53:03:bb:63:10:7f:fc:eb:de:
         de:a2:05:a6:da:35:2a:74:99:9f:91:af:16:de:d9:8e:57:c4:
         08:a0:31:de:c7:ea:90:7c:2d:07:f8:ea:2e:f3:73:37:fd:08:
         6a:4f:1a:23:53:85:47:89:03:80:5c:f8:d0:88:75:25:60:72:
         4b:8c:79:57:51:77:b1:43:f1:ca:b4:19:f0:9c:0f:70:73:b7:
         92:75:be:6a:4b:5d:35:37:40:58:aa:28:6f:36:2f:90:9c:9e:
         22:8b:87:e2:c5:c5:26:19:7f:63:10:4b:8d:bc:4b:b2:76:07:
         dc:41:b1:95:f5:f3:c7:4d:92:b7:8e:3a:37:25:3e:a8:bb:ec:
         bb:1a:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:00 2024 by rpki-client on console-ams.rpki-client.org