Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa
File:                     E69ABF78033911EFBE28FC1FC4F9AE02.roa (raw, json)
Hash identifier:          K3rDHWPEAJEer2ozScBARYUC6OZeQAKfAz9YzKjyZUE=
Subject key identifier:   B7:F8:A2:63:B1:CE:A5:FF:3E:9A:75:B5:B0:4B:96:A6:23:79:A1:27
Certificate issuer:       /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial:       031A
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa
Signing time:             Sat 04 May 2024 13:18:09 +0000
ROA not before:           Sat 04 May 2024 13:18:09 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     151951
IP address blocks:        2400:5a60:2::/48 maxlen: 48
                          2400:5a60:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Validity
            Not Before: May  4 13:18:09 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66363591-ff65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:4c:6c:78:84:5e:c5:bb:c5:d0:08:28:a7:
                    a7:ad:b2:3e:37:02:f8:94:b7:85:08:c2:b7:d7:0f:
                    bd:90:6b:00:19:fd:2f:86:48:2f:ee:65:8a:a5:29:
                    af:ed:38:04:dc:2e:9f:9c:28:7e:01:90:9b:c1:66:
                    ac:c7:b7:7b:82:02:f3:0d:83:aa:8b:54:b7:a5:f2:
                    92:72:c1:13:ae:e6:a1:32:a1:67:d2:6a:c8:f6:b6:
                    d0:93:6c:55:b7:61:94:f4:85:bc:9d:af:e5:45:ad:
                    3f:31:32:18:b9:4e:04:2e:9a:b1:95:d6:bd:f3:5d:
                    24:3b:ac:bd:c9:39:d6:4c:8a:06:34:09:73:dd:dd:
                    4b:95:26:5a:6f:26:7a:06:c5:e5:cd:ee:46:89:fb:
                    7f:a9:09:ba:df:16:ed:e3:ad:71:65:d5:cb:37:a4:
                    84:15:e9:fb:2e:af:41:19:46:79:61:1a:cc:5d:bf:
                    50:f6:b1:7d:50:17:3d:cb:1c:68:a9:64:9a:8f:66:
                    22:09:7e:81:9f:29:bd:a6:93:0d:37:f8:36:8e:5c:
                    c8:e1:bf:2e:33:c4:7f:fc:28:40:4f:dc:9e:73:af:
                    88:91:62:d4:6a:75:f3:d7:79:3a:4f:be:f5:d0:bf:
                    23:c8:4b:4a:a4:4d:1c:d6:70:7a:25:3d:a2:ab:6b:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F8:A2:63:B1:CE:A5:FF:3E:9A:75:B5:B0:4B:96:A6:23:79:A1:27
            X509v3 Authority Key Identifier:
                keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5a60:2::/48
                  2400:5a60:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:6b:1f:2e:ea:8a:9b:c3:be:29:29:50:92:d1:be:28:06:
         2a:a8:79:0c:95:b7:ea:fc:20:c0:bc:23:48:23:b5:59:00:df:
         2c:26:85:4d:65:10:fd:63:85:e6:24:09:01:31:bf:23:b6:83:
         31:da:82:23:b0:c5:7e:35:7b:fb:ff:d0:8f:9e:c2:b8:d3:38:
         85:18:65:51:ff:6d:a3:09:3b:4d:ff:ef:17:14:6e:df:68:f1:
         12:51:cc:74:98:f7:04:1e:ff:8b:fa:64:0e:af:45:74:48:36:
         1b:9d:0c:32:e5:32:05:9c:27:12:2a:90:fc:d8:15:49:2d:b6:
         98:a6:cd:5b:4f:e1:b6:71:27:1d:a3:7a:b7:8e:6a:2e:fd:33:
         36:e0:1e:0b:42:41:80:d6:fb:6a:23:86:4a:ae:28:0f:1f:e2:
         82:97:db:41:a9:8c:19:10:84:2b:8e:f7:67:12:6a:e1:7b:5b:
         8d:85:1a:30:b2:72:05:1b:57:88:7e:85:a2:ec:45:1e:96:8b:
         f4:13:30:c5:2a:44:64:5a:1f:4e:fb:a0:aa:0b:34:8a:d3:3d:
         2c:61:6f:94:10:33:d7:44:42:3d:1e:7e:22:44:50:de:0b:ea:
         3d:58:24:44:5b:a9:67:7a:82:59:de:9f:fe:8c:6b:82:d5:d9:
         b5:b0:e0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:50:07 2024 by rpki-client on console-fra.rpki-client.org