Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ADED81322BF311EF839F2253C4F9AE02.roa
File:                     ADED81322BF311EF839F2253C4F9AE02.roa (raw, json)
Hash identifier:          Iu0zEh0rvz+eM07IUYJUVEkoDhOhfe9x44bgbYI2W8g=
Subject key identifier:   8E:05:C5:E2:95:9B:7A:37:A0:49:64:95:0B:46:BE:95:5F:F9:F1:A6
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0CD8
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ADED81322BF311EF839F2253C4F9AE02.roa
Signing time:             Sun 16 Jun 2024 15:18:27 +0000
ROA not before:           Sun 16 Jun 2024 15:18:27 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     139888
IP address blocks:        2406:840:fc80::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3288 (0xcd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Jun 16 15:18:27 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=666f0242-1411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:91:88:9c:48:c0:9c:22:08:77:f5:f8:7d:
                    d6:20:3b:8c:95:0e:3c:b5:0d:ca:25:00:be:67:26:
                    d1:0c:7e:2e:18:1c:09:85:79:c0:62:54:0c:70:f2:
                    f0:e0:cd:5b:7f:ce:ef:36:0a:16:e3:fd:11:65:e7:
                    b4:c7:43:ce:0a:df:29:8d:a6:f8:fc:a5:09:01:2b:
                    8a:5d:62:11:24:94:4f:75:52:61:a2:80:be:f3:26:
                    c7:5a:4e:2d:2c:f4:df:48:68:65:b0:95:ff:12:72:
                    58:d4:10:d6:e3:a6:8c:73:5c:22:c7:d5:4b:80:49:
                    ba:54:f1:d3:71:1f:e9:50:ee:94:17:d0:ee:bb:8c:
                    77:d6:24:6b:af:4a:d1:2b:c0:a4:25:22:21:49:9d:
                    83:48:ae:64:24:b5:cb:bd:52:06:6f:91:70:48:07:
                    4d:e9:26:50:9c:0b:8d:b4:ed:42:42:8f:4d:cb:a1:
                    74:4e:af:0a:9b:fc:f0:35:8e:34:5e:98:e5:fe:15:
                    92:fd:1c:56:fe:5f:22:07:0c:50:c2:96:ef:b8:be:
                    26:d1:8c:9e:d0:c8:a0:ce:32:34:ca:92:b9:5c:88:
                    ff:46:d5:0f:81:9c:af:a4:26:fe:91:a5:d6:c5:99:
                    40:e0:5e:34:1f:6d:49:1e:d5:97:b9:2a:e4:fd:9c:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:05:C5:E2:95:9B:7A:37:A0:49:64:95:0B:46:BE:95:5F:F9:F1:A6
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ADED81322BF311EF839F2253C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fc80::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:c2:af:f0:5a:3d:eb:e0:0d:6c:29:0b:15:ef:61:ab:8b:71:
         e2:f1:c6:8f:dc:f7:ce:0a:98:02:97:d6:52:b3:c4:56:dd:09:
         2c:de:b4:de:63:78:e2:82:aa:de:23:7b:88:2a:5e:ce:b5:aa:
         b2:37:16:99:2d:a9:4c:d8:68:86:a2:7f:10:02:d0:5e:81:04:
         aa:51:7f:b4:67:2b:4c:3d:32:6d:89:54:e9:67:91:51:b2:3b:
         13:f2:00:08:3e:f9:e7:2f:36:5a:bf:95:05:14:5c:2a:1f:f3:
         89:d9:df:4f:10:81:77:2f:27:d8:6d:e4:52:c6:d6:c1:d9:4e:
         c2:e9:e7:3a:27:59:94:8b:f5:ea:5c:ac:06:38:ae:94:ac:5e:
         d6:77:cf:2c:3f:97:de:7e:e7:cd:49:d2:d7:1b:fd:59:97:6d:
         98:70:3d:23:3e:32:0b:62:36:83:c3:2d:58:b2:43:cc:01:7d:
         10:fa:c0:c3:80:72:80:04:c6:99:20:45:4e:7e:93:b4:a9:20:
         81:67:d7:28:9d:6c:1a:5c:e2:83:1f:d2:0e:98:bd:32:ff:d7:
         88:9e:6a:d1:e1:c8:c8:40:3e:1c:e4:36:04:72:b0:fa:df:fe:
         5a:2a:37:88:ef:55:47:d6:cf:7e:29:d4:ec:b6:f4:ae:3b:1c:
         6f:1c:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org