Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/DB48AFAAA58A11EB846DBF30C4F9AE02.roa
File:                     DB48AFAAA58A11EB846DBF30C4F9AE02.roa (raw, json)
Hash identifier:          Co9bY981XZyyqJvbx99p+POlzi4sZmL1KGZfi77mZDQ=
Subject key identifier:   9F:26:7A:72:3F:10:8C:DB:F1:1E:44:85:84:3E:DA:D8:63:AD:3D:AB
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0A4E
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/DB48AFAAA58A11EB846DBF30C4F9AE02.roa
Signing time:             Sun 14 May 2023 22:14:33 +0000
ROA not before:           Sun 14 May 2023 22:14:33 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     142111
IP address blocks:        2406:840:f400::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2638 (0xa4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 14 22:14:33 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64615d49-045b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:59:dc:ab:b9:b0:2e:40:dc:33:73:06:f2:c7:
                    fc:b8:93:19:0d:04:20:a1:bc:88:a6:98:ca:42:89:
                    2e:40:eb:62:81:9a:ab:fd:f8:54:fb:d1:1e:6d:38:
                    20:23:0b:17:39:2e:3b:22:f9:87:9e:00:3f:e8:09:
                    83:3c:f3:2e:23:c3:8a:36:11:8f:e9:4e:d4:07:d0:
                    5a:e3:3f:78:9b:77:b5:b5:0b:fc:98:ce:ab:9a:13:
                    66:7f:56:56:3f:03:0d:e1:08:22:4c:26:ba:cc:56:
                    54:19:80:c0:55:7d:ce:5e:df:e0:63:ae:12:e8:95:
                    8d:b5:d1:83:30:5f:fb:c1:75:b8:c1:51:fd:74:85:
                    de:2b:a4:80:97:d1:f3:6c:a3:1b:9b:eb:6e:71:12:
                    5d:61:b9:89:1e:0e:46:3f:50:84:7c:88:30:39:a7:
                    84:10:ea:87:7e:d2:a1:88:58:70:ac:3c:16:fd:b3:
                    4b:0c:70:2a:7f:a3:e3:97:b1:1d:b1:25:c4:7c:4a:
                    91:44:83:b4:02:3a:f5:01:d6:67:3f:54:f9:6f:63:
                    30:5a:30:b6:77:b8:1e:da:91:70:89:bc:d6:c7:b2:
                    b7:bd:00:a9:9b:e3:ba:5e:52:1f:1c:5d:8b:4c:1c:
                    50:51:03:f6:b2:e5:59:e1:b3:3b:7d:ce:cc:05:b7:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:26:7A:72:3F:10:8C:DB:F1:1E:44:85:84:3E:DA:D8:63:AD:3D:AB
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/DB48AFAAA58A11EB846DBF30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:f400::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:73:8f:09:8c:2b:f0:f9:9f:ec:b1:23:9e:89:4e:27:93:46:
         a3:5f:19:2f:7c:a1:aa:14:16:37:76:3f:71:ac:95:d0:e2:03:
         31:39:cc:6e:e0:e2:e8:21:d9:2d:30:8d:f2:96:4f:64:83:00:
         5c:ef:0a:3b:0b:cd:2a:fc:b1:23:0b:c2:3c:8c:ae:68:dc:73:
         25:b2:4f:88:25:46:ad:7b:fd:5b:d0:37:97:13:08:06:86:16:
         1c:f4:bc:b5:2c:5b:af:00:38:09:3b:3e:97:dc:df:37:d9:9a:
         dc:20:6b:6a:9a:47:30:87:f5:54:5c:47:09:00:0b:75:50:99:
         02:7c:3c:df:de:5f:4c:46:6a:5e:8f:a1:ff:d9:14:f3:eb:f4:
         e2:76:6e:b1:34:26:cd:86:2c:a7:4d:0d:8b:79:2e:30:f1:09:
         a5:22:97:e9:8f:3b:3c:24:fa:19:da:9b:19:ee:e7:7a:9e:77:
         97:fb:4c:2e:6d:63:3c:4f:8c:d6:3c:b5:62:bd:40:39:ea:1a:
         fc:a5:c8:46:4a:83:9d:48:6e:38:1c:bb:ba:62:33:71:ab:34:
         c0:f3:40:75:5e:37:10:77:98:c9:c9:74:5a:33:52:34:63:3f:
         0b:58:43:f9:d6:0e:2c:4a:9f:29:a3:7e:43:ca:0a:57:a4:87:
         3e:a5:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org