Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/56C91968C5C011EFA167B30AC4F9AE02.roa
File:                     56C91968C5C011EFA167B30AC4F9AE02.roa (raw, json)
Hash identifier:          Qpsj8zeT4wk7y+WSIb+TFw/XxcY82tQw87PIGXkqgxY=
Subject key identifier:   CC:05:41:F6:F2:54:97:A9:F7:63:4C:ED:82:10:B0:56:FF:92:D7:44
Certificate issuer:       /CN=A918CC02/serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
Certificate serial:       0C
Authority key identifier: 57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/56C91968C5C011EFA167B30AC4F9AE02.roa
Signing time:             Sun 29 Dec 2024 08:38:56 +0000
ROA not before:           Sun 29 Dec 2024 08:38:56 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     153385
IP address blocks:        2401:d260::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl
                          rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 06:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CC02
        Validity
            Not Before: Dec 29 08:38:56 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67710a9f-b3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:01:e6:09:3b:ad:92:a6:91:bc:63:65:96:
                    32:24:b1:ae:39:af:ea:3c:aa:b4:30:eb:df:9c:e8:
                    e1:9b:85:52:b1:b1:c2:5b:01:e5:12:a2:a5:d3:77:
                    62:57:f9:a0:ad:2c:b7:b5:c2:a1:63:20:34:3e:e1:
                    4a:73:df:83:eb:8e:7d:04:73:b3:32:db:44:f9:33:
                    73:b7:38:6f:4f:cd:2b:a1:b0:d3:4d:aa:dc:76:09:
                    bf:78:96:33:06:81:e9:4e:79:fc:72:92:cb:9e:9d:
                    d6:8e:a2:bb:ee:0e:9e:00:b5:00:d1:4b:fb:c3:e9:
                    9a:4f:32:73:10:54:4b:b7:ef:ce:00:bb:49:43:e7:
                    c7:66:f0:62:7d:4f:31:87:16:71:cf:40:c5:78:bf:
                    70:a5:d6:9c:4c:19:d8:d3:83:f2:10:3e:f8:e4:09:
                    1d:f6:16:c9:da:e4:d5:63:51:c9:6e:c6:c5:22:f7:
                    9d:a9:6c:c3:76:0d:3f:4d:d4:ac:5a:26:b4:7f:fc:
                    79:88:92:33:81:9c:72:1f:ae:f6:de:01:70:be:a8:
                    35:28:ff:de:d1:12:a3:c9:1b:28:ca:ff:eb:61:ed:
                    a9:5b:b2:61:7e:51:bc:92:78:1e:ae:47:bf:4a:b8:
                    ea:d7:d7:16:73:c1:73:99:1d:35:c4:f6:13:05:13:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:05:41:F6:F2:54:97:A9:F7:63:4C:ED:82:10:B0:56:FF:92:D7:44
            X509v3 Authority Key Identifier:
                keyid:57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/56C91968C5C011EFA167B30AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d260::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:0c:04:7f:a7:91:f0:bd:45:a0:02:ef:e4:13:70:4e:c4:6b:
         06:82:78:ea:52:0c:d1:65:24:de:87:70:7e:26:83:bd:17:62:
         25:b3:b2:31:c9:4a:ce:00:58:52:7d:2e:b7:35:d8:b0:cf:b7:
         e2:84:5a:10:21:8f:87:f9:5d:36:70:fa:15:aa:d3:55:86:29:
         3c:3c:64:20:f0:f0:a3:a7:c9:20:62:b9:82:44:96:7a:54:ad:
         7f:2d:01:e2:f7:fc:d9:e8:95:36:eb:52:10:10:69:ee:56:59:
         d3:b3:16:ed:7f:7f:18:40:e9:a2:b3:1f:a2:4f:97:03:f0:79:
         bd:33:49:bc:cf:a3:35:08:bd:de:63:30:9d:34:4c:dc:e6:e1:
         62:68:6f:74:ae:8d:b6:84:67:a3:ee:54:b1:3e:5d:d1:ec:0d:
         e5:54:ef:4e:37:bc:6d:f0:30:c9:84:7a:ba:af:5d:73:9a:95:
         8d:ac:a1:b5:b1:6a:74:8c:47:7e:66:1b:c9:19:07:da:f9:30:
         99:6d:9b:68:4a:fc:f4:c2:7e:58:f2:03:f2:f5:91:51:15:23:
         81:8d:86:fa:76:31:38:52:d8:24:31:54:e8:51:3c:e6:e1:95:
         21:48:21:ea:c7:12:f8:ee:bb:72:a9:ba:3f:44:13:ba:ff:82:
         16:12:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 04:47:07 2025 by rpki-client