Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
File:                     A50523F43F5211EBB1B1701FC4F9AE02.roa (raw, json)
Hash identifier:          MXwTZ0HTMZgGNdBLgLlhrgI3zl9svxesevJasfZECFs=
Subject key identifier:   B1:3F:16:00:41:FB:23:EF:B9:E2:02:0E:1E:93:9D:E6:F2:CD:E7:4C
Certificate issuer:       /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial:       06CB
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
Signing time:             Sat 26 Oct 2024 22:03:13 +0000
ROA not before:           Sat 26 Oct 2024 22:03:13 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     7474
IP address blocks:        2402:13c0::/48 maxlen: 48
                          2402:13c0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
        Validity
            Not Before: Oct 26 22:03:13 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=671d6721-8d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:84:fc:92:ef:c6:26:3e:3a:5c:b3:6a:08:
                    b9:50:f9:b2:12:5a:b0:1d:fe:5f:c9:fe:f4:8c:f0:
                    21:e2:89:1d:01:6e:47:57:21:f9:b5:56:a3:81:d5:
                    08:f0:e8:d3:68:3f:57:33:ca:d2:59:da:39:4a:bf:
                    27:dc:ef:d9:83:bc:fd:21:e3:b4:6c:63:89:1b:18:
                    d5:8b:45:ac:b1:b5:e4:2b:6c:9a:cc:1c:f6:f3:30:
                    0a:54:a4:d6:dd:4a:0d:03:3c:73:f7:d6:e0:c1:41:
                    1d:f7:99:b1:9e:3e:0b:8f:b3:cb:5c:90:de:45:19:
                    5c:61:8b:ad:ce:0a:c0:57:00:52:e5:3d:eb:6e:bd:
                    2c:8e:78:02:01:f6:ec:7b:cd:fa:a5:51:34:ea:96:
                    bf:1d:8e:37:81:d5:43:c6:1f:71:cb:39:bd:53:c5:
                    98:86:3a:3d:92:29:2c:36:05:0c:e2:62:38:fe:09:
                    35:b0:d2:7b:3c:01:cc:b6:a5:f2:66:c8:1a:bc:cf:
                    00:bc:fb:27:57:c6:8b:be:fe:74:d1:39:2d:b9:c8:
                    8b:f0:e1:64:6f:89:05:6e:32:9f:90:95:29:42:9f:
                    3d:0d:b7:a8:98:33:c5:97:26:0c:a3:12:22:a6:f8:
                    61:2e:45:91:95:75:90:0c:2f:bb:02:9a:ea:d6:28:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3F:16:00:41:FB:23:EF:B9:E2:02:0E:1E:93:9D:E6:F2:CD:E7:4C
            X509v3 Authority Key Identifier:
                keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:13c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         85:92:d4:13:11:64:f9:48:91:8a:94:7c:bf:f1:7a:72:06:d1:
         17:c7:7c:1a:14:6e:31:9f:d8:46:d2:be:ef:9a:75:30:a3:7e:
         e1:4e:29:a9:0f:f9:61:72:24:9b:9d:4a:cf:a2:aa:ba:5c:af:
         f7:8e:07:cf:19:55:d2:29:a1:39:d8:5b:19:71:f7:52:d8:4c:
         0f:3a:43:13:f5:a2:41:1c:95:a7:81:f7:d7:8e:2e:3d:f0:71:
         f4:87:9c:07:74:52:44:a7:de:7d:47:21:c0:b6:70:c1:31:c1:
         0a:9c:5a:9a:ec:60:44:cf:2e:71:a5:ad:89:da:16:f4:82:dc:
         b1:1b:25:2b:9e:ed:94:0e:62:fa:b4:18:94:0d:2f:fc:e8:f3:
         34:a8:a7:02:4a:f3:1c:46:8f:4e:39:1b:de:6d:29:8d:57:05:
         6f:4b:68:c6:63:25:36:22:83:4b:de:88:e8:aa:90:25:ce:a5:
         7e:3e:cf:ca:90:d6:be:1d:37:13:f4:dd:04:5d:d6:0b:9d:07:
         2e:53:18:ce:1f:e6:f8:b1:87:ab:e6:8f:2b:35:d0:f4:55:e8:
         6c:04:93:91:3a:01:67:54:e4:02:91:37:46:a9:d5:e4:52:76:
         a1:59:13:83:7d:fe:62:f2:0e:f6:6c:ce:37:92:58:c7:ca:64:
         aa:4c:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:48 2024 by rpki-client on console-fra.rpki-client.org