Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/03774914696211EC8A05D115C4F9AE02.roa
File:                     03774914696211EC8A05D115C4F9AE02.roa (raw, json)
Hash identifier:          wWG7gDffusgmkA3HPzZb1H2IlXZqQeENVHriN8ZYVz8=
Subject key identifier:   BE:30:C5:FA:43:23:76:93:AA:8E:5B:C9:1F:16:36:C2:5E:86:11:36
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0CE2
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/03774914696211EC8A05D115C4F9AE02.roa
Signing time:             Sun 24 Sep 2023 18:36:29 +0000
ROA not before:           Sun 24 Sep 2023 18:36:29 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     147028
IP address blocks:        2405:84c0:fdfa::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3298 (0xce2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Sep 24 18:36:29 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651081ad-9aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:d5:5b:b8:7a:a9:cd:f2:cb:9b:9e:9c:24:
                    0c:04:4b:1d:af:fd:28:bb:92:1d:06:86:54:70:23:
                    51:1d:eb:ac:69:94:49:21:47:87:21:b0:70:32:1e:
                    d8:dc:e8:7c:c1:09:50:50:23:62:bb:ea:80:55:b5:
                    91:cf:80:13:aa:0e:06:b9:d8:87:b0:ac:47:1e:c1:
                    27:66:c2:62:3f:ce:dc:2f:b3:42:7b:1f:54:f4:8d:
                    89:a2:08:29:56:76:19:80:16:c3:85:bd:b2:9d:b5:
                    d5:34:06:bd:06:da:dd:c1:0a:b2:d8:eb:6f:df:41:
                    82:bd:03:c3:9c:ac:d8:e8:b5:19:a4:73:05:f2:ea:
                    06:de:b6:4e:07:47:99:d5:a0:75:78:00:7f:13:c4:
                    e0:c5:ce:98:e6:55:cc:a7:e8:31:96:a3:9e:ee:55:
                    bd:23:b4:5b:aa:d6:54:0e:28:ff:13:31:42:25:56:
                    fd:eb:7d:ac:93:c4:f1:4d:fe:81:c6:14:08:c8:02:
                    01:3e:03:42:9e:dc:b9:5e:f4:53:4f:70:2b:3f:cb:
                    6c:67:fd:f3:60:13:8b:f9:96:32:13:20:1f:ea:ba:
                    e7:b8:a6:88:ad:e5:12:c0:67:2a:29:90:bc:79:9b:
                    dc:e4:4c:c3:bc:4d:26:35:6a:78:eb:ef:ed:55:36:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:30:C5:FA:43:23:76:93:AA:8E:5B:C9:1F:16:36:C2:5E:86:11:36
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/03774914696211EC8A05D115C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:84c0:fdfa::/47

    Signature Algorithm: sha256WithRSAEncryption
         29:75:60:4f:1a:e0:81:00:1d:17:3b:71:73:59:0b:d3:0b:f5:
         e7:b6:ec:34:59:5e:03:31:33:4f:a0:b4:94:0f:eb:02:be:d4:
         b9:0b:ab:18:08:0e:62:0f:4c:09:95:6d:76:c8:fa:5e:e0:30:
         51:49:e2:53:37:1a:90:65:d2:1f:a8:4a:d5:02:31:3e:c6:f8:
         9d:1a:c6:2c:f1:15:97:77:ae:ae:26:7e:35:16:6c:4c:b0:47:
         93:6f:6a:b1:ba:81:07:79:a3:5f:a1:5d:ba:ad:df:7c:13:59:
         bd:dd:be:16:c0:40:f0:ab:7b:86:27:b7:8e:76:51:76:0b:3e:
         b4:6f:2e:4c:11:b4:cf:db:41:01:f0:42:5a:7b:a1:64:93:90:
         df:49:52:60:aa:d3:8d:50:03:90:62:1c:5e:be:1d:94:b1:0d:
         1e:0c:1f:f6:0e:a6:37:99:e7:ca:d4:d9:a7:11:95:b0:06:9c:
         29:90:d1:51:68:3e:19:3c:9d:35:73:6e:68:bb:43:fd:e4:c1:
         02:c6:34:f3:83:09:70:12:04:1b:8a:9e:75:19:10:05:d1:d8:
         c1:77:0f:40:ff:04:98:dd:3a:6b:63:e8:b9:11:e9:3d:63:fc:
         16:e2:c1:9a:b9:0b:c4:ac:04:bf:91:cd:6c:b1:b3:cb:ec:88:
         b5:f8:92:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:49 2024 by rpki-client on console-ams.rpki-client.org