Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/274DDFBA4B3711EF9BAECA83C4F9AE02.roa
File:                     274DDFBA4B3711EF9BAECA83C4F9AE02.roa (raw, json)
Hash identifier:          yU59GJu/6qzD7yymAxZ3JBr6UeYMiwgbG6XgNcPzs1Y=
Subject key identifier:   8E:E1:D6:AB:2C:CE:3B:23:8C:C1:4D:65:08:45:1A:F5:3F:3B:01:FD
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       462B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/274DDFBA4B3711EF9BAECA83C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:35:23 +0000
ROA not before:           Thu 05 Sep 2024 03:35:23 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     151908
IP address blocks:        2401:80e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17963 (0x462b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:35:23 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d926fb-b86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:14:0a:c8:67:a6:55:14:77:31:8f:46:ea:
                    d1:8c:1d:d1:ea:54:ac:a9:b1:88:96:93:db:8c:5a:
                    79:fc:98:2a:39:90:93:e1:02:2e:15:89:bb:3a:fa:
                    9b:04:5b:63:20:3e:47:dd:06:9b:ca:60:b1:62:f2:
                    9a:9f:69:ac:6b:3d:71:a8:4a:56:03:f7:fe:8c:ad:
                    bd:23:eb:c0:22:67:63:04:a8:d1:52:1b:d5:b0:3a:
                    05:45:f0:f4:97:6a:63:8f:d0:6e:20:c7:47:da:4a:
                    38:4a:08:40:d0:6b:ea:d9:e6:3e:34:f8:4b:03:c5:
                    09:96:3a:dd:00:8a:d5:a2:18:9f:34:30:2e:e6:a6:
                    ec:6a:fb:b3:83:b1:be:1f:7f:de:f3:a2:5d:39:45:
                    78:68:6e:78:b8:f6:40:1b:19:d4:89:29:32:fd:37:
                    69:50:90:86:ed:5b:5b:3a:2e:41:e8:06:9f:8d:59:
                    4f:0e:d3:ee:09:79:a9:6b:2e:ad:c2:5b:71:81:82:
                    f9:88:01:5e:2d:e9:56:41:82:d8:26:1d:cc:fe:9d:
                    44:f5:50:9a:a8:4e:38:a5:20:cf:8d:69:6d:5e:98:
                    1f:f7:7e:a7:9c:19:7c:12:bf:61:bc:44:03:de:87:
                    9d:3c:97:94:e0:96:82:47:40:8f:1a:5f:c9:cc:12:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E1:D6:AB:2C:CE:3B:23:8C:C1:4D:65:08:45:1A:F5:3F:3B:01:FD
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/274DDFBA4B3711EF9BAECA83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:80e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:f4:1e:d4:67:63:74:b7:95:5c:7b:8b:6d:1d:69:75:bd:a4:
         2c:12:3d:c0:9f:9a:3b:de:23:89:7c:96:54:5a:04:fa:2d:ba:
         23:66:16:1c:26:38:8d:56:67:b5:0b:66:96:23:07:1a:06:0e:
         4a:c6:93:d3:68:f6:b3:07:27:db:5c:9f:34:33:51:1d:fa:f2:
         e6:e5:29:98:48:ca:63:a6:72:21:11:74:31:35:8f:10:bc:3d:
         5f:ba:62:0d:dc:e5:c4:72:97:af:d0:9f:85:3d:34:79:d2:5f:
         f3:7c:ed:c2:39:1f:92:70:c0:f3:17:25:ed:82:05:bd:98:25:
         25:a6:04:c1:77:20:36:40:5a:0b:dc:59:1e:30:42:b1:36:38:
         12:2e:bd:d4:02:9b:77:53:fb:a5:88:a9:ab:1e:95:aa:28:cf:
         13:8c:04:b5:a0:89:19:0b:08:8a:b9:b0:c6:4d:88:a6:f4:df:
         39:80:6f:dc:27:0a:0a:12:b9:cc:f7:e2:2e:8c:83:76:89:8d:
         2e:17:7a:84:c3:ca:4e:d4:c8:70:2d:62:af:72:5e:5d:3d:17:
         c5:c4:c8:57:77:99:47:d7:f8:bc:8b:ea:d9:aa:b0:4c:da:5a:
         1f:fa:c9:57:12:1e:44:71:c6:fd:12:38:b0:26:d8:d4:3d:06:
         c9:66:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org