Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9BACC40A717C11EF9BE6B668C4F9AE02.roa
File:                     9BACC40A717C11EF9BE6B668C4F9AE02.roa (raw, json)
Hash identifier:          CoTaRtB40ffDCvczE0RL8VwrEWh28HCxVL7khCx9hi0=
Subject key identifier:   1B:92:04:17:6F:BD:76:C0:3C:BE:BF:E3:E1:B9:F0:43:C9:DA:DB:B5
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       46C0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9BACC40A717C11EF9BE6B668C4F9AE02.roa
Signing time:             Fri 13 Sep 2024 03:02:27 +0000
ROA not before:           Fri 13 Sep 2024 03:02:27 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     152974
IP address blocks:        2001:df4:2bc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 01:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18112 (0x46c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 13 03:02:27 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e3ab43-0957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9a:e5:b1:1f:34:3c:04:b2:39:f9:d5:24:74:
                    58:60:b1:7b:7f:ab:0c:7a:1b:e6:18:3d:47:b9:b5:
                    ad:85:b8:a6:bc:f8:88:e4:f8:b1:62:b8:c8:06:2b:
                    72:fb:df:b7:76:32:20:d0:1e:7a:bc:3f:68:01:ce:
                    8e:1f:14:01:37:16:63:8a:85:5d:01:30:c4:15:af:
                    58:e1:28:cb:6a:fb:10:dc:39:94:49:29:89:bf:63:
                    b6:d2:4d:e9:f8:37:fe:c9:d9:a5:03:63:b9:72:76:
                    29:43:f4:2d:8d:1b:2f:cc:39:7a:a2:4c:ff:0c:5b:
                    de:c5:d2:57:8c:40:83:d3:6d:ae:37:4f:b0:ea:d2:
                    4d:14:22:6a:42:2f:93:39:6d:61:26:9a:7f:30:48:
                    8a:94:b6:2f:c8:5a:13:d5:49:43:9c:e5:be:39:c2:
                    7a:87:41:4d:bf:ce:a8:19:24:32:5e:0b:ec:40:99:
                    af:27:d9:48:b1:05:33:90:96:f7:87:a5:8c:df:df:
                    34:f1:4b:74:f4:35:2b:90:e7:a7:74:d8:1f:99:df:
                    8a:98:be:f2:7e:6b:03:d9:2a:83:37:f8:2c:5a:83:
                    89:49:a8:50:3b:40:41:6f:4b:b6:94:41:76:48:63:
                    ae:c4:18:46:80:53:66:9c:25:cd:ba:15:50:4e:6b:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:92:04:17:6F:BD:76:C0:3C:BE:BF:E3:E1:B9:F0:43:C9:DA:DB:B5
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9BACC40A717C11EF9BE6B668C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:2bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:99:83:f0:b7:05:57:f3:ca:d3:bb:18:39:af:43:41:0b:21:
         15:1e:6b:e9:26:f7:d8:97:6b:71:2d:99:5f:21:4c:8e:94:97:
         58:44:a4:c1:d0:48:ff:26:9c:87:a8:ba:ec:b8:e6:a3:27:c8:
         2e:72:4d:75:bd:75:a6:54:31:2f:5e:bf:28:f0:00:70:34:c1:
         b1:e0:b0:ec:57:1a:dd:87:66:57:22:cc:20:92:25:5f:f1:a0:
         ea:81:79:84:b2:57:49:77:1d:c7:18:e3:a0:aa:e9:f6:fe:32:
         2d:73:b1:47:43:46:17:53:ae:2d:4a:47:07:49:c6:d2:3f:93:
         85:98:ac:b6:78:20:77:a4:c3:9c:0d:13:bc:e6:e0:96:c8:a5:
         14:b5:42:38:6b:8e:9b:0f:35:d7:db:d9:d5:55:bf:99:08:01:
         61:16:bd:28:bd:f7:34:e8:ac:08:d3:3f:7b:0d:b9:35:2e:b1:
         f8:b7:bf:f1:7d:b0:b7:ac:1b:95:d8:d0:1f:30:37:87:1c:d6:
         38:57:82:3a:04:cd:3a:d0:66:c5:4a:c9:3f:d4:9b:84:91:cf:
         bd:3a:4e:6a:ed:34:87:5e:8b:d2:39:9a:23:e4:6c:54:4b:d9:
         22:ea:db:77:c8:0b:10:bc:df:14:f4:c8:d3:eb:0f:94:b9:61:
         8a:d6:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:39:02 2024 by rpki-client on console-fra.rpki-client.org