Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/17465D8E80FB11ED9B35954DC4F9AE02.roa
File:                     17465D8E80FB11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier:          EP/S2M3sp27a3LbEwENxrfRgE2B1cuCKVNvfzYKBksE=
Subject key identifier:   BF:6A:53:04:25:6E:1E:66:A5:CD:DC:EE:E4:B0:50:0E:22:28:94:A9
Certificate issuer:       /CN=A919EA40/serialNumber=8A297E0356F0F7BF54DEF56B25A1FB1EAF84843D
Certificate serial:       BF
Authority key identifier: 8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/17465D8E80FB11ED9B35954DC4F9AE02.roa
Signing time:             Thu 21 Dec 2023 05:17:11 +0000
ROA not before:           Thu 21 Dec 2023 05:17:11 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     7575
IP address blocks:        2001:df1:6ac0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.crl
                          rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA40/serialNumber=8A297E0356F0F7BF54DEF56B25A1FB1EAF84843D
        Validity
            Not Before: Dec 21 05:17:11 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6583ca57-c381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:14:ec:e8:29:2c:a7:7b:50:79:e6:16:d5:
                    80:0b:a6:5f:68:33:3c:fa:32:d0:2e:06:e0:5a:c4:
                    6e:90:1e:9b:c0:cf:0a:30:dc:18:2d:48:bf:2f:0e:
                    5d:31:32:0e:07:30:0c:51:d0:52:14:3b:77:a0:8d:
                    da:b5:07:55:cc:c7:da:05:30:0c:bf:20:3c:2d:49:
                    92:9e:cc:58:6a:4a:c9:31:18:85:cf:d1:d1:e3:ee:
                    cf:3f:47:0f:8f:46:1e:1e:d6:06:21:eb:0e:c7:d5:
                    29:61:37:a6:13:d4:72:32:6a:0a:4a:c1:00:96:8b:
                    3e:13:04:fd:b0:78:11:51:64:27:49:43:9e:cb:bb:
                    ff:b0:db:f3:1a:3a:ab:bf:a4:65:16:a3:f9:f0:54:
                    5f:9d:92:04:38:3e:a9:85:a1:71:f8:5e:16:18:81:
                    a9:4f:ec:1c:67:28:c3:59:9c:2e:c2:c5:23:ad:ed:
                    31:7a:f9:dd:6b:1d:36:f9:f2:bc:ed:d6:6e:2f:b8:
                    bb:68:15:6f:bb:26:3e:b5:cd:b7:76:48:f9:ad:69:
                    a3:66:54:dd:e0:75:6e:5c:51:45:6d:81:3f:f2:55:
                    ce:94:44:b1:c4:a1:89:f0:56:73:c7:2f:18:7a:40:
                    1c:62:e3:cc:24:d9:21:52:64:4c:55:a6:71:a2:4f:
                    4c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6A:53:04:25:6E:1E:66:A5:CD:DC:EE:E4:B0:50:0E:22:28:94:A9
            X509v3 Authority Key Identifier:
                keyid:8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/17465D8E80FB11ED9B35954DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:6ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d6:55:8b:05:bc:f2:dc:8f:b3:bf:3c:54:b4:63:53:c2:fa:1a:
         b1:56:ee:fc:66:bf:e4:4f:45:da:1d:b3:e3:bb:73:e7:25:fb:
         5e:36:57:7c:c0:6b:72:21:de:22:11:01:c5:a1:cb:1a:79:a1:
         07:99:49:a0:10:3f:8f:05:d4:b3:9f:a5:22:57:9e:2b:d4:dd:
         c6:1c:b3:55:e3:ca:4b:fd:f9:82:1b:50:43:a8:08:75:3d:43:
         2a:71:1b:49:40:5a:02:2e:5c:7c:4c:4f:ee:44:03:72:e2:b0:
         b3:fa:29:d1:2d:d2:cd:ee:f2:ce:ca:7e:91:c8:6d:7a:a3:01:
         0e:c7:63:8b:1f:d9:93:bc:d3:aa:95:f1:d4:66:12:97:e2:ab:
         e2:0b:a7:e8:19:51:8d:9b:7a:21:00:fe:38:ec:16:aa:9d:d1:
         a3:af:c8:c0:a8:ff:c3:e7:5a:a6:ca:fb:6a:65:32:84:be:ec:
         eb:72:db:48:72:5b:e1:d3:f4:ea:f0:1c:b5:c4:8d:cd:2f:b0:
         af:e1:67:79:5b:31:ca:66:6f:04:36:06:27:0a:3b:52:69:92:
         e6:3f:46:83:f7:ab:2c:8e:f2:b4:3e:62:6d:b0:03:96:da:39:
         ca:4f:b2:dd:c9:e2:87:0c:62:c1:18:d6:5a:6f:cd:d9:ad:db:
         78:59:06:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org