Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC2F7380B1C411EAAB5E9562C4F9AE02.roa
File:                     AC2F7380B1C411EAAB5E9562C4F9AE02.roa (raw, json)
Hash identifier:          Up4MckjhNU0mtNjO8Nh2S4RSSL7UnbuGNZj561UL/PY=
Subject key identifier:   DA:C1:A8:F7:43:76:6D:C0:F7:AF:16:E4:DD:A5:28:D2:83:99:99:88
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0A7A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC2F7380B1C411EAAB5E9562C4F9AE02.roa
Signing time:             Sun 14 May 2023 22:15:26 +0000
ROA not before:           Sun 14 May 2023 22:15:26 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     213069
IP address blocks:        2406:840:e010::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2682 (0xa7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 14 22:15:26 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64615d7e-6a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:38:19:28:86:c2:b3:d6:bd:e2:34:de:90:
                    44:d1:0a:07:d4:c2:11:cb:8c:97:3a:f7:5a:46:77:
                    90:01:27:01:59:13:8a:74:87:3b:9a:f0:1b:04:e0:
                    b7:5d:ef:c1:cc:ce:70:71:c5:0d:42:83:59:67:fc:
                    e7:e0:de:c0:48:3f:2c:85:39:f5:ca:be:81:fd:4d:
                    5f:8a:fa:ce:2b:e0:c8:80:10:25:53:28:59:15:c3:
                    af:d6:35:8b:d7:59:c4:d8:4d:3f:86:6c:b0:c9:96:
                    2b:5a:35:98:2a:02:dd:d9:96:50:53:d6:e7:59:b4:
                    f5:dd:f8:6e:b3:17:72:59:6a:eb:7d:c1:72:2c:af:
                    e6:da:8a:ec:0c:57:15:16:ba:3a:a3:aa:96:67:21:
                    5c:2e:86:aa:9b:17:8b:0a:b5:bd:53:74:77:89:00:
                    42:b8:10:5c:0a:43:13:09:6b:de:26:c2:8f:d8:30:
                    d4:91:a4:26:38:93:3d:62:72:79:53:79:6b:e1:5d:
                    7a:db:e3:8b:ec:f5:a8:53:f4:e3:35:f1:09:8b:5a:
                    fd:f4:33:a8:ee:4a:b6:25:e3:6a:e0:5d:44:13:dd:
                    c4:69:66:d2:ff:14:6f:6c:18:f8:60:b0:e6:04:2b:
                    88:69:c3:07:ed:ce:d6:50:5e:db:8d:59:60:ae:0a:
                    21:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C1:A8:F7:43:76:6D:C0:F7:AF:16:E4:DD:A5:28:D2:83:99:99:88
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC2F7380B1C411EAAB5E9562C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e010::/44

    Signature Algorithm: sha256WithRSAEncryption
         a9:b8:69:10:dc:2a:c2:c2:c9:c8:db:bd:f7:11:17:6f:05:ba:
         96:b5:d2:23:d9:c0:96:3e:63:6a:17:f4:f7:39:81:65:e7:25:
         55:0a:bd:29:31:69:cc:80:56:e9:50:27:c0:e1:80:29:fe:76:
         dd:1d:22:57:9d:b7:51:ea:35:22:12:a6:83:4a:43:c0:88:1d:
         dd:dc:e7:e2:fe:aa:bd:c2:ee:a1:71:c3:c8:b7:3d:47:a0:35:
         1c:11:fa:81:42:bf:50:d4:8f:e0:10:3d:22:15:f5:4d:07:0f:
         78:02:a1:80:6e:f2:68:a0:8d:ac:b6:2f:3f:82:bc:64:da:ec:
         6c:66:d2:38:7e:c1:12:fe:17:b4:c7:92:3e:69:aa:5c:a7:28:
         f7:a4:3d:f2:a0:a9:3e:b3:40:84:e9:43:34:ee:b2:f7:45:8f:
         ae:79:f4:5a:70:50:a0:91:11:9d:22:dc:87:c3:a9:fe:17:b4:
         74:4a:f7:3b:05:1e:48:a2:af:11:e8:5e:73:79:ff:aa:a6:df:
         aa:fe:d6:f4:00:4d:dc:c5:bf:1b:9b:dd:eb:f4:30:7c:1a:34:
         86:ca:ef:f0:f8:94:ab:05:24:fd:f1:e9:4b:66:b2:99:38:c5:
         a4:29:40:0e:a7:32:f9:6c:64:65:d9:06:f8:67:7e:39:ac:ec:
         0c:cd:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org