Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6254C72366311EEB376DC3AC4F9AE02.roa
File:                     A6254C72366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          FspDUL3Ky3FvNE89lWIxIXVmJ+YE4nijuv6igWnHbBo=
Subject key identifier:   9D:5F:E8:69:96:81:14:11:94:4A:31:55:79:72:19:2C:4B:48:C6:CC
Certificate issuer:       /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial:       C6
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6254C72366311EEB376DC3AC4F9AE02.roa
Signing time:             Tue 25 Jun 2024 06:22:14 +0000
ROA not before:           Tue 25 Jun 2024 06:22:13 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     135381
IP address blocks:        2400:6280:11b::/48 maxlen: 48
                          2400:6280:145::/48 maxlen: 48
                          2400:6280:146::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
        Validity
            Not Before: Jun 25 06:22:13 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667a6215-8540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:b6:9a:ba:75:98:55:3b:63:d0:d2:09:d0:
                    ad:c1:25:a5:94:92:27:6f:32:3f:85:ff:a5:7d:6e:
                    16:6f:56:e8:51:a7:78:42:bc:6a:e2:3d:b9:43:66:
                    bc:08:c5:72:0a:10:29:b9:cf:86:00:25:c1:e0:ee:
                    3a:a6:4e:21:d5:83:36:5d:75:e6:48:5f:fc:59:dc:
                    ea:ca:93:7f:cb:8b:0e:3f:01:41:5c:49:2a:30:64:
                    6b:18:0a:be:05:44:0b:27:48:55:a6:5d:51:c6:32:
                    79:9a:6f:3d:e6:19:17:be:2c:5e:3b:8b:0a:56:c1:
                    f6:04:81:41:13:97:58:16:2e:96:c2:c2:af:2c:ff:
                    41:60:53:8e:52:f4:34:87:11:56:ef:1d:4c:93:7c:
                    50:66:27:71:6b:e9:02:ad:75:c2:5a:ed:3c:86:71:
                    c2:98:7a:ee:17:8b:6e:d4:c5:67:5f:cd:fe:20:8e:
                    76:47:56:72:9a:40:c3:5e:26:7e:15:fc:1c:8b:19:
                    3d:86:63:e6:b8:4f:a8:7d:ce:7e:74:d8:0e:bc:d9:
                    1f:fc:05:1c:3c:5c:de:82:f0:d4:68:92:8f:0d:91:
                    65:06:5c:57:1c:4a:b5:3c:17:ea:30:c3:39:9c:1c:
                    f6:cf:a7:0e:96:34:fe:8d:ac:c6:b4:d6:bc:b0:94:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5F:E8:69:96:81:14:11:94:4A:31:55:79:72:19:2C:4B:48:C6:CC
            X509v3 Authority Key Identifier:
                keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6254C72366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6280:11b::/48
                  2400:6280:145::-2400:6280:146:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         55:f6:74:5b:9b:c7:fa:ac:fd:d6:83:35:9d:aa:82:b5:d8:7c:
         bf:bb:9b:96:28:47:c8:f6:0d:82:d7:62:85:5d:4b:6f:83:c4:
         a1:33:d0:c2:81:23:08:8c:df:a3:8b:6d:31:8e:1f:86:91:da:
         bb:80:7b:86:94:70:eb:f4:c6:12:b9:92:19:49:f0:ac:91:46:
         72:db:69:6a:48:00:bf:ca:c6:6b:48:d6:25:19:d2:f6:30:3b:
         66:cb:4c:3d:c6:2a:13:96:f5:18:28:bc:a7:05:a7:0a:b8:8c:
         84:e1:e3:c9:85:00:91:46:61:2c:03:8c:06:c8:b4:8d:ee:0d:
         72:ca:fe:9f:11:ea:8e:df:47:e4:86:af:88:67:f9:e1:4f:52:
         b1:1f:14:2a:a5:3a:51:4b:98:e1:85:7d:22:7e:9d:c6:dd:ad:
         c2:24:47:cd:c7:0b:2b:3b:d0:18:ec:8f:45:94:c5:ba:5a:0d:
         49:0e:48:1e:f8:b1:82:ed:62:b7:e7:34:db:2d:2e:fc:f2:a3:
         75:95:81:8c:1f:e4:5c:9f:72:b8:71:3d:5f:ce:a5:52:f1:91:
         b8:85:03:db:b8:be:d8:97:19:2b:b6:3c:e1:04:0d:4f:9d:bb:
         0d:05:6f:02:a8:db:3c:62:f2:4e:d7:8e:05:ae:4c:f8:7b:05:
         ab:d6:18:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org