Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/95737270643711EFBCD1344AC4F9AE02.roa
File:                     95737270643711EFBCD1344AC4F9AE02.roa (raw, json)
Hash identifier:          0MmgAOsynAk/z75v6F6/3mM/hRV1GTY1/gUKJqE0crQ=
Subject key identifier:   4F:B4:BD:88:E6:BD:A4:D6:92:DB:76:1A:88:D9:41:C2:EF:00:EE:83
Certificate issuer:       /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial:       02
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/95737270643711EFBCD1344AC4F9AE02.roa
Signing time:             Tue 27 Aug 2024 05:45:36 +0000
ROA not before:           Tue 27 Aug 2024 05:45:36 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     139058
IP address blocks:        2001:df4:34c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
        Validity
            Not Before: Aug 27 05:45:36 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66cd6800-a0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:0c:5f:bc:f4:03:a8:10:ae:27:86:f8:8d:
                    eb:f0:9f:78:21:16:3e:9b:60:97:8e:a0:4f:7e:33:
                    f1:3f:8b:04:a1:e7:ae:be:2f:a7:3f:1c:a2:4a:ec:
                    ea:3b:0d:ea:5f:78:ac:5d:46:d5:73:5c:0b:1f:6a:
                    69:35:97:c5:59:cd:29:d7:eb:a1:16:eb:4a:42:1b:
                    98:3f:6f:55:8f:6a:7c:c1:0d:1a:b2:30:05:90:ae:
                    7f:1d:83:48:ce:70:9b:0c:2c:d8:13:c6:e9:83:08:
                    16:69:78:ca:86:6d:82:de:17:af:a5:44:dd:99:b5:
                    ce:bd:2c:53:bb:1c:d3:72:c1:36:51:de:d5:da:63:
                    71:fa:76:9e:68:e9:de:53:31:e5:8d:49:32:3a:37:
                    c2:ab:d8:33:77:33:b0:a2:d4:36:60:99:2b:ca:f8:
                    81:15:a9:ac:b8:b4:e1:f7:4e:79:52:97:a7:80:17:
                    54:93:69:94:32:cb:45:ba:7d:eb:8f:4d:cf:5a:2e:
                    c8:9d:46:96:fd:2d:f0:45:58:8a:27:98:e6:c7:5f:
                    76:e1:ab:9a:fa:a0:bf:a2:b9:19:e7:62:41:8f:b8:
                    e5:ac:02:e0:af:3d:5d:ce:27:ea:4d:3d:46:fb:c8:
                    a5:ea:03:fc:c2:cc:1d:72:37:2b:0f:d6:ed:d9:7c:
                    16:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B4:BD:88:E6:BD:A4:D6:92:DB:76:1A:88:D9:41:C2:EF:00:EE:83
            X509v3 Authority Key Identifier:
                keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/95737270643711EFBCD1344AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:34c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:75:ed:11:18:b9:c0:31:ce:c3:48:1d:3e:40:7e:67:db:
         d8:01:84:52:cc:d4:53:2d:a0:60:2a:80:09:dc:dd:0d:61:09:
         e4:e5:4c:84:3b:0a:a0:b1:26:5f:ee:bb:6d:e9:a3:09:70:74:
         74:23:31:51:17:47:62:1f:d4:08:6c:aa:70:0f:51:88:46:31:
         6f:5d:03:c4:96:46:a3:99:86:06:5a:ec:22:27:25:86:7f:de:
         c8:66:64:d5:15:6e:84:68:0c:90:3e:65:f3:df:93:13:23:05:
         69:a1:36:bd:12:46:d3:f4:c8:93:6f:45:6a:57:f3:2b:7f:16:
         cf:a5:9e:2c:b7:d5:74:7c:68:e5:1a:ce:90:75:a5:ae:67:4d:
         19:bc:3f:53:84:3f:8d:3c:f9:a7:1b:72:41:6e:f3:df:9b:80:
         8c:9b:47:f6:fd:b4:ec:1a:26:a3:22:64:a0:a4:c3:47:ce:53:
         3a:d0:51:d2:bd:78:7c:e2:a0:c9:2b:cb:da:45:ad:dc:d5:80:
         b0:02:e7:49:ce:99:1b:b0:f8:4c:3e:14:95:4a:a2:ec:bb:56:
         7d:73:85:87:94:04:ae:2e:71:ef:09:94:24:0c:4a:eb:be:46:
         7d:81:ca:ee:a6:b0:12:4b:39:f2:d9:f6:6b:cb:29:2f:68:cd:
         c9:8d:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:07 2024 by rpki-client on console-ams.rpki-client.org