Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/70AB4F0A638B11EFA99DB91FC4F9AE02.roa
File:                     70AB4F0A638B11EFA99DB91FC4F9AE02.roa (raw, json)
Hash identifier:          qllvLWe7EQwmCpJH/oR414l95EH0Xa6wu4InJZSdhu0=
Subject key identifier:   9A:EE:36:B7:E4:8E:1F:3B:C5:E7:DF:EB:54:4C:0A:E9:E5:3A:C5:C3
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4635
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/70AB4F0A638B11EFA99DB91FC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:35:31 +0000
ROA not before:           Thu 05 Sep 2024 03:35:31 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     152975
IP address blocks:        2001:df4:2c40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17973 (0x4635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:35:31 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92702-7c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:d6:f4:c9:fc:81:ef:1d:e8:23:af:44:41:
                    bc:3e:20:63:7e:45:44:3a:0f:c9:9d:d9:ae:a0:92:
                    6a:82:cb:d5:b2:8c:0d:e1:13:53:90:96:7b:48:03:
                    4c:48:83:2f:04:3f:9f:af:fa:f0:ea:85:94:43:e6:
                    66:34:6f:72:15:77:09:90:74:42:df:77:a5:1d:7a:
                    41:95:90:76:59:7c:0b:7d:94:e3:eb:17:7e:e2:c4:
                    7b:0b:5b:79:bb:a4:81:c6:df:40:7a:7c:c4:7a:be:
                    93:0d:94:0d:b6:f5:f8:64:4e:b1:61:a5:5d:5b:ee:
                    ff:67:b8:83:f1:06:9d:6e:f7:c2:70:1d:fd:6f:d5:
                    4f:ba:1b:92:65:b7:24:a1:3b:e1:1d:b5:f4:c1:00:
                    58:b3:6b:c7:61:30:08:84:c3:48:b9:13:d3:5e:67:
                    5f:f1:aa:d8:5d:4b:c5:79:97:8c:d7:fd:7d:71:8c:
                    8a:db:63:09:5a:db:e1:65:a4:f7:15:22:98:81:44:
                    d0:3b:03:a2:98:1f:2e:e8:81:69:14:51:b6:0a:e5:
                    0b:94:d6:07:a3:1c:d3:b4:82:84:47:33:c4:47:e4:
                    45:4f:22:7c:8a:79:6a:ac:d0:9c:d2:87:0d:87:a3:
                    f6:9e:32:22:6b:bb:53:2c:5e:8c:44:1c:11:8e:6c:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EE:36:B7:E4:8E:1F:3B:C5:E7:DF:EB:54:4C:0A:E9:E5:3A:C5:C3
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/70AB4F0A638B11EFA99DB91FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:2c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:e4:aa:81:b2:42:fb:32:a5:a8:6f:78:16:f9:80:0d:ec:ae:
         16:f4:a8:30:79:7f:e2:da:81:9b:76:7f:49:53:00:72:1c:ca:
         bd:64:be:c3:0b:37:94:fc:10:bd:db:b7:b8:0d:e4:da:9f:07:
         60:35:d1:15:c0:04:83:7f:69:e3:fd:86:d1:5d:7b:92:17:b6:
         c7:3b:9e:a9:28:7f:ab:06:f0:01:86:ab:1b:0b:0a:73:20:34:
         18:e4:58:3e:6a:6d:24:2c:e3:58:18:3b:e6:95:e7:31:81:f4:
         88:ba:47:82:88:51:c6:d4:f9:cf:fe:28:c3:41:2a:8b:a7:55:
         08:cb:a4:60:a3:8e:7a:22:35:dd:84:27:9e:08:21:5f:73:81:
         28:f1:c1:e8:80:5d:a9:cb:12:60:c9:04:3c:c4:19:00:b9:55:
         e9:0f:f4:fb:cd:05:10:2d:db:5a:73:ac:9e:4f:23:c9:32:a4:
         a0:9b:44:5c:74:2d:dc:87:c4:77:db:34:05:82:46:ce:55:5c:
         b1:09:a9:7e:45:97:a0:60:6b:32:fb:25:3b:37:2f:c9:95:b9:
         78:cc:ca:1f:f8:53:4d:02:d6:6f:46:c2:67:51:9d:d2:82:ed:
         dc:df:d8:90:0d:17:4b:30:b0:14:f5:43:e2:0d:e6:8e:b4:db:
         74:47:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org