Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
File:                     FE6E6B48749E11E8B07CAE80C4F9AE02.roa (raw, json)
Hash identifier:          X4d+GA+oxaD3pHMglLO+cJUzGrxCwF23SC21gJFgjWk=
Subject key identifier:   07:AD:0A:9D:29:2F:2C:8A:92:64:19:D4:18:7C:44:E6:0B:63:E1:A0
Certificate issuer:       /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial:       1B9F
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
Signing time:             Thu 16 Nov 2023 16:33:47 +0000
ROA not before:           Thu 16 Nov 2023 16:33:47 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     58431
IP address blocks:        2404:6980:31::/48 maxlen: 48
                          2404:6980:32::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 16:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7071 (0x1b9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
        Validity
            Not Before: Nov 16 16:33:47 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6556446b-20be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:79:f4:0c:a7:51:7a:59:bc:3b:e8:b3:4b:
                    41:64:63:e3:c3:89:49:c0:ec:b7:6e:fa:08:d0:14:
                    0b:13:9e:0b:48:ef:71:65:4a:8d:6f:09:36:a5:34:
                    c6:07:70:af:47:a4:7f:e2:ca:aa:4b:1e:1d:5d:b9:
                    20:f8:b4:41:95:76:00:48:db:7f:95:55:00:4f:5c:
                    41:cb:0b:41:ae:cb:92:3b:0e:37:46:da:c9:bc:3c:
                    d1:b7:06:76:81:2b:da:2a:ca:d5:98:a8:7b:4e:dd:
                    c6:a3:e9:68:1e:3a:61:ff:b4:97:47:7b:fa:40:b9:
                    08:72:7b:3e:22:11:21:64:91:97:b9:08:85:f8:9f:
                    e4:d6:01:5e:fc:64:fe:25:50:36:2a:bc:88:f5:61:
                    13:d9:d7:bb:67:cc:66:7b:eb:05:d5:0c:7a:b3:5f:
                    30:a1:94:dd:09:e2:55:96:35:20:36:ad:b4:82:62:
                    b7:4e:26:68:79:0b:4b:71:d7:63:a3:4a:3b:1c:53:
                    9f:10:28:95:62:43:2d:60:74:72:65:21:32:ff:77:
                    f3:58:91:54:4c:43:db:cb:4d:2b:b7:aa:d2:1f:c6:
                    7c:16:d5:a0:77:61:67:f3:a8:74:64:b5:13:67:9f:
                    a4:16:b7:2e:8f:2e:e9:c0:d4:5c:3b:cb:ce:4a:11:
                    87:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AD:0A:9D:29:2F:2C:8A:92:64:19:D4:18:7C:44:E6:0B:63:E1:A0
            X509v3 Authority Key Identifier:
                keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6980:31::-2404:6980:32:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         94:aa:f7:e0:c2:92:89:49:68:2b:72:ee:a7:37:27:35:ae:a2:
         91:b9:36:83:9c:6c:fa:38:7a:92:37:ea:48:5f:04:0c:c6:92:
         65:67:74:60:55:5a:6b:93:90:ee:62:6d:66:98:04:30:45:8f:
         db:6e:82:d1:d3:8e:0e:1e:af:23:0e:25:16:b0:eb:6a:70:a1:
         f9:2a:23:3b:ee:f0:b6:56:1a:9d:7b:a3:d1:85:35:07:35:97:
         36:a3:59:2b:3a:13:75:65:ff:3f:97:4a:16:4c:15:6f:ec:11:
         cb:27:f9:fc:23:05:c5:da:19:00:52:32:3a:b6:ad:2a:f5:fa:
         10:8e:59:8f:f9:58:06:8d:1d:dd:62:84:a4:0c:45:27:d0:37:
         fd:d3:f7:a3:a1:d5:e4:0c:83:d8:61:a4:b2:65:89:d4:4b:0a:
         3e:3b:c6:70:fb:2c:31:b9:a1:f1:7d:28:86:8a:3f:9a:bc:dc:
         f4:4c:06:e9:dd:7a:ea:11:fa:07:b5:78:4c:62:22:4a:35:3c:
         5e:d5:2a:04:86:c6:96:c8:a3:88:9c:7e:c7:84:cc:88:a9:5b:
         86:cc:1a:cb:78:54:77:2b:85:a7:19:1f:f8:72:ce:d2:79:50:
         87:e0:42:64:a7:af:65:19:cf:9e:63:47:19:9a:8d:62:e8:27:
         2b:dd:9c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:33:31 2024 by rpki-client on console-ams.rpki-client.org