Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
File:                     B91F8BF69EE211EF883C7D14C4F9AE02.roa (raw, json)
Hash identifier:          YHRgzTcRXYcY+vg2gna0SRLiEWL1Wmt2RotdYv8L8KM=
Subject key identifier:   9D:D2:04:31:C6:7B:EC:2D:FB:38:13:7A:51:46:AF:CD:DF:76:25:9C
Certificate issuer:       /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Certificate serial:       17
Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
Signing time:             Sat 09 Nov 2024 21:36:48 +0000
ROA not before:           Sat 09 Nov 2024 21:36:48 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     153371
IP address blocks:        2401:ce20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
        Validity
            Not Before: Nov  9 21:36:48 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=672fd5ef-fdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:ef:de:95:db:64:63:d3:eb:25:52:b2:54:
                    0c:0e:51:2d:89:9b:5d:6a:dd:51:d5:e1:57:e4:43:
                    70:45:fb:b9:5e:a6:97:b0:52:5f:b8:b8:3b:fe:26:
                    d2:d2:12:13:c2:3a:1b:a4:8a:b2:99:77:56:c5:a0:
                    ff:11:1f:59:64:df:8c:03:1e:4b:b6:57:47:0a:98:
                    09:78:6b:52:6e:1d:37:62:29:77:ec:e1:b2:6b:b7:
                    52:df:5b:e8:eb:8e:e0:b2:15:89:c4:37:e9:0d:c3:
                    2b:37:eb:88:05:91:2f:37:ff:9e:31:9d:cc:f8:88:
                    aa:13:bc:af:99:82:ad:45:55:a4:68:3f:d7:58:77:
                    bc:c8:10:8c:9b:a5:c6:5a:8c:9e:9e:25:77:37:3b:
                    89:3b:ac:52:88:f0:5b:12:e2:a9:f7:36:a7:ca:21:
                    12:28:b9:4b:76:e8:09:9d:18:31:11:66:bf:32:68:
                    1c:b8:31:c7:46:07:32:0a:e4:ab:da:6f:3a:4a:a8:
                    2d:79:75:b5:7d:44:7d:e8:88:a0:0d:0a:09:69:19:
                    b0:d4:53:ee:2b:09:e3:7e:a4:ae:15:ba:7b:31:83:
                    9a:43:69:19:8b:34:0c:51:f2:c2:e0:93:28:ea:32:
                    aa:e8:9e:db:99:1b:86:f9:98:f7:33:3f:93:c6:08:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D2:04:31:C6:7B:EC:2D:FB:38:13:7A:51:46:AF:CD:DF:76:25:9C
            X509v3 Authority Key Identifier:
                keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:ce20::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:b1:73:0b:dd:d9:b5:4d:c7:45:f5:26:a8:2a:d7:58:dd:21:
         09:3e:35:74:d5:f0:b6:26:78:92:72:25:32:d8:65:f4:9d:50:
         26:32:d1:38:64:a9:89:ba:c8:4d:78:f2:54:ed:b9:22:94:2d:
         9c:2e:93:93:30:ee:96:65:3f:e0:f2:68:a3:2a:9d:e7:79:77:
         e4:35:00:53:36:7e:30:61:09:b3:1a:aa:ea:8e:e2:ec:fa:6b:
         c0:48:0a:a1:14:52:b1:54:1b:0a:7a:8f:4c:4f:82:d1:2d:4a:
         2d:9a:ae:cd:7b:e1:79:07:e8:a4:a7:96:b3:1c:77:66:17:df:
         b4:b7:b2:18:ad:5a:fd:6b:53:8c:2d:bf:1e:5e:1b:e9:c0:d8:
         7b:87:99:0e:b2:1b:87:4f:85:92:4c:7e:43:47:62:b2:74:da:
         fa:2a:be:a7:d3:19:0a:56:a5:51:57:e7:e5:26:0c:60:1c:41:
         e2:df:f3:66:e3:08:d5:d5:81:f0:f2:ba:82:84:b3:f8:db:97:
         2b:0c:56:54:82:dd:ba:a1:22:e9:31:09:2a:68:03:1f:75:a4:
         5b:84:f1:9d:74:83:48:8b:76:ad:d4:b3:29:34:0b:09:bc:a0:
         f5:b5:8b:64:a0:0e:fd:95:4b:ae:d6:ab:d3:10:ea:35:0e:0a:
         4e:87:ec:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:46 2024 by rpki-client on console-fra.rpki-client.org