Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ED77AD005CA211ECBB6AD31CC4F9AE02.roa
File:                     ED77AD005CA211ECBB6AD31CC4F9AE02.roa (raw, json)
Hash identifier:          tMVN95sgZsaghXUzj4gzIJ7qIUHW1JGT/aA4GvzMWE4=
Subject key identifier:   1E:2F:BE:FC:BB:94:5E:73:63:25:11:56:D8:10:8C:F3:83:21:E6:80
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0C74
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ED77AD005CA211ECBB6AD31CC4F9AE02.roa
Signing time:             Sun 26 May 2024 21:32:00 +0000
ROA not before:           Sun 26 May 2024 21:32:00 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     149292
IP address blocks:        2406:840:e360::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3188 (0xc74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 26 21:32:00 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6653aa50-16a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:37:f3:8b:77:47:37:3a:dc:02:83:82:36:
                    9c:90:f4:80:e7:2d:5b:f6:fd:8a:6c:64:1c:1e:e0:
                    12:3e:ee:ed:0e:56:77:d4:c6:81:2c:fc:0f:c7:5d:
                    d6:10:57:cd:0b:69:96:d2:2a:b7:47:0c:4c:2c:74:
                    02:cc:77:90:cd:6d:a5:be:0c:8f:75:61:f6:0e:6a:
                    02:73:dc:ef:19:56:81:a7:57:5d:92:62:1d:c3:39:
                    94:39:a8:b0:f5:ca:7d:1e:16:83:4e:5f:fe:00:7a:
                    46:da:be:9b:41:93:83:0f:1b:89:0b:0e:86:38:e1:
                    90:48:6c:8e:c6:6c:53:97:b7:5d:d7:05:0b:90:60:
                    8e:5b:2d:fd:ed:18:1a:4f:33:1e:50:d4:72:39:27:
                    e5:9b:af:6b:64:09:75:be:3a:22:e8:bf:ce:6f:18:
                    c0:ab:57:75:fc:45:0c:d5:b1:63:83:f9:d1:6b:89:
                    8f:d7:a6:f9:a4:1a:32:aa:ec:e5:dc:eb:62:aa:45:
                    ef:62:81:a2:05:29:4d:f8:b4:55:19:63:ef:21:b4:
                    c4:97:52:e5:6b:1d:40:97:7a:90:ed:69:97:04:a3:
                    7e:2c:8d:5e:43:1d:a5:a7:47:f2:25:e8:53:ba:af:
                    43:04:d5:f3:6a:dc:1a:e6:e7:f0:e1:1a:a0:89:d4:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2F:BE:FC:BB:94:5E:73:63:25:11:56:D8:10:8C:F3:83:21:E6:80
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ED77AD005CA211ECBB6AD31CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e360::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:db:03:7b:77:ba:12:9e:0d:09:5f:14:5f:f3:aa:d8:f9:42:
         47:ee:7f:88:6b:18:7a:90:d2:19:34:08:cc:cc:fb:a7:8e:42:
         30:c5:8f:93:0a:32:1e:ba:67:e3:c6:e2:9d:bb:b7:74:0e:5a:
         12:15:f6:50:08:50:07:21:b9:6d:fd:5d:ae:a9:bd:e1:25:a0:
         cc:c5:02:4f:84:cf:c4:72:85:19:1e:80:46:90:19:ab:47:4a:
         c8:ed:9a:2a:08:35:fe:b5:a7:cc:42:c1:22:66:d2:5b:19:d4:
         24:97:b6:29:d6:38:13:fb:92:c6:c3:79:2f:e3:c1:c4:71:9b:
         2a:0e:ca:96:19:be:13:ec:f3:2a:62:ed:23:c0:96:48:e2:d6:
         3e:d3:1b:59:32:fc:28:09:e2:92:ea:5f:e7:33:33:04:4c:6b:
         f2:4b:13:57:35:60:74:f1:45:94:e7:4b:2c:93:a4:8a:6d:16:
         2b:0e:44:2e:50:ad:c2:4a:31:1f:86:ea:b8:46:c6:39:be:c9:
         b4:23:a7:a2:90:83:93:4b:fc:27:71:da:28:2a:71:cb:f3:b0:
         c3:ac:37:c5:22:b5:78:fb:ce:79:80:e8:ac:9d:b8:68:c6:6e:
         a3:38:1e:64:97:d6:d4:1c:9f:bf:0e:70:ba:15:f3:4d:d8:5b:
         67:a4:3a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:02 2024 by rpki-client on console-ams.rpki-client.org