Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa
File:                     5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa (raw, json)
Hash identifier:          rwCF53o/2VLZF/xLvGMTlFyQCHhpOILr4tGZzUzVyo8=
Subject key identifier:   E7:74:64:10:70:39:18:16:41:D8:74:C5:5A:09:62:BE:1B:EB:03:55
Certificate issuer:       /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial:       2841
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa
Signing time:             Tue 30 Apr 2024 16:22:37 +0000
ROA not before:           Tue 30 Apr 2024 16:22:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58587
IP address blocks:        2403:9300::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10305 (0x2841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
        Validity
            Not Before: Apr 30 16:22:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66311acd-5157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:85:ad:8f:c2:bf:ef:cc:2e:eb:6e:2b:31:
                    2c:86:92:09:59:3b:f5:f2:08:27:eb:e7:53:5a:98:
                    ea:a6:1e:fc:bb:85:b9:0f:a6:6b:64:43:73:e3:95:
                    8e:17:06:79:31:78:88:8e:0c:7e:74:7f:0d:88:49:
                    21:5f:48:88:6b:9f:96:75:6d:21:66:f8:bc:8f:61:
                    f7:eb:8e:87:46:33:19:ba:57:40:57:40:e9:6c:91:
                    89:0b:a2:7e:f6:92:87:a7:b2:fb:33:8c:e3:e6:3e:
                    24:24:0c:74:a3:38:28:12:49:d6:7e:5f:e4:81:36:
                    c7:da:c0:d5:08:51:71:43:4f:6b:b8:2e:73:fd:93:
                    5b:d0:c2:96:43:62:1a:4a:d6:c5:59:7c:7f:79:7b:
                    54:75:e9:46:2f:34:39:f4:05:8a:a2:c6:fa:c2:86:
                    2a:e8:46:53:a3:4d:13:79:d5:4a:58:ae:78:a8:d2:
                    a8:9e:9a:02:f8:7e:9d:80:de:f6:73:27:3e:82:7b:
                    c8:f1:d8:4a:d4:ba:7f:91:0d:f8:cb:fb:6a:df:70:
                    9b:e9:78:86:f8:03:2b:f4:f8:de:fe:b3:66:5a:45:
                    36:d3:27:41:20:71:32:54:48:59:7c:3d:85:73:e3:
                    dd:35:c0:82:6a:c6:7e:09:55:ca:05:c3:26:81:71:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:74:64:10:70:39:18:16:41:D8:74:C5:5A:09:62:BE:1B:EB:03:55
            X509v3 Authority Key Identifier:
                keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:9300::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:8f:cd:84:da:d4:29:c8:de:50:d9:e4:ad:6c:e5:6d:f4:ee:
         80:de:cf:2f:c0:cb:c5:7c:db:13:d7:a5:08:43:62:13:68:ab:
         f5:84:27:c2:c6:27:22:0c:f6:fe:16:00:f7:c3:9f:87:f1:94:
         dd:b7:73:cb:08:40:49:d8:b5:f5:56:c4:07:7d:15:54:50:d1:
         57:d3:d6:56:67:84:66:8b:0f:93:87:b0:3b:6c:8d:f9:a9:14:
         90:5c:7a:4b:9f:90:86:17:9d:9a:a2:ac:c6:15:1e:f6:9a:6b:
         24:54:4d:ae:16:ca:66:12:87:4f:69:db:de:18:64:c0:6c:9d:
         47:91:42:5c:9d:b4:49:5c:ca:fe:f1:93:87:c5:25:64:c1:29:
         49:e0:37:59:65:25:73:24:70:75:df:af:f4:ba:59:0e:b9:30:
         7a:ea:49:9c:28:0c:fc:64:1c:55:71:dc:37:0d:87:ca:8c:4c:
         4c:5d:1a:9d:51:cf:89:bd:e1:cc:1e:52:80:19:79:29:68:e3:
         76:ed:0b:23:fd:ef:95:49:03:b8:2c:2d:cb:9d:6b:b1:61:74:
         5b:fa:b5:77:02:bb:a1:f2:9d:e4:1f:be:5c:56:ac:a2:63:56:
         f7:64:37:48:30:9a:0b:07:3e:12:03:b2:66:f7:e8:ba:cd:9d:
         9f:32:6f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org