Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/82CA92C4703A11EBB9A2D47AC4F9AE02.roa
File:                     82CA92C4703A11EBB9A2D47AC4F9AE02.roa (raw, json)
Hash identifier:          oTDftbGKIdkc7TbDX1evZR/fDG6RQDBKvMBylDuZzKY=
Subject key identifier:   56:7A:C0:FA:3C:9E:ED:54:29:B8:4D:F1:62:05:CD:77:EE:34:E1:C4
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       06C8
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/82CA92C4703A11EBB9A2D47AC4F9AE02.roa
Signing time:             Mon 20 Nov 2023 22:50:21 +0000
ROA not before:           Mon 20 Nov 2023 22:50:21 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     140936
IP address blocks:        2406:9dc0:6660::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Nov 20 22:50:21 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=655be2ad-b801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:bd:c1:8b:ee:6e:ad:cc:5e:81:f1:ce:1b:
                    32:2e:c5:a6:82:10:14:ea:6d:df:db:e7:5f:72:22:
                    f2:b2:ad:ae:2a:89:1a:af:90:b6:73:6d:00:0a:50:
                    44:e7:17:1d:46:53:df:2a:bc:94:27:c5:dd:b9:ca:
                    40:b6:ae:3d:02:2a:9a:10:97:cc:fb:a7:77:9c:34:
                    fd:b0:97:76:2b:3a:38:9c:3c:17:c1:c3:74:1b:f9:
                    72:90:4d:ce:68:53:27:8c:01:7a:25:f2:ef:80:c6:
                    62:c3:db:51:89:b5:fa:d5:6c:a5:5d:1d:ef:e6:8f:
                    75:48:f2:2f:28:22:f9:12:8c:05:65:5c:44:49:0a:
                    e7:3d:5b:0a:29:0c:43:50:09:b7:95:5e:e1:80:5a:
                    78:3a:a1:2a:c3:b5:04:2a:7e:85:2e:d4:f3:38:96:
                    88:de:b9:e3:da:81:e3:6a:b5:d9:82:9c:35:9d:9f:
                    31:34:d4:5a:e1:d4:fc:bb:dd:c1:86:de:a7:e0:87:
                    37:44:cd:70:ee:90:a1:99:2f:fc:88:3b:82:e6:81:
                    65:61:0d:1e:15:a8:38:1e:82:e3:c1:af:f8:4e:bc:
                    00:12:43:f5:24:a1:15:48:8c:49:ce:26:05:88:f4:
                    5d:9f:44:ae:4c:87:43:a3:0a:50:a4:b0:96:aa:1b:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7A:C0:FA:3C:9E:ED:54:29:B8:4D:F1:62:05:CD:77:EE:34:E1:C4
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/82CA92C4703A11EBB9A2D47AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9dc0:6660::/44

    Signature Algorithm: sha256WithRSAEncryption
         45:94:1f:4b:dc:fc:5b:f3:6b:d3:66:cd:6b:02:02:65:ba:78:
         2b:7c:75:a0:3b:5b:fb:f7:a4:cc:70:37:ed:73:80:ef:4b:0b:
         c3:8a:3d:da:cc:a2:66:b8:fb:18:49:c9:41:af:77:9f:bb:c0:
         3f:43:2e:5e:22:ed:15:75:c9:8a:c1:f9:e7:48:c6:23:a9:98:
         04:09:c3:39:5c:30:00:be:60:66:59:a8:ee:be:ca:fd:c1:5b:
         f3:b9:19:2a:25:ee:16:62:8b:bb:fb:8c:14:24:38:11:20:51:
         32:67:e7:de:55:1d:0b:e0:3c:04:b8:e8:f9:46:26:90:bd:06:
         e7:f6:ab:82:46:46:26:57:46:c4:18:c8:55:73:77:3f:3a:9e:
         d7:61:f0:44:c8:04:5f:1a:fc:8f:a5:84:35:a5:0d:51:3d:0a:
         d3:e1:01:f7:1e:59:ac:02:f1:2f:a6:f6:ab:ed:2e:83:7d:7b:
         b2:20:fd:87:0c:0a:31:73:1c:9b:a8:68:21:75:22:4b:96:be:
         30:6e:9b:2c:f0:2c:28:ac:32:c7:f2:1d:8c:8a:02:fb:ee:4d:
         ab:e0:63:6f:27:c5:32:66:08:f6:a7:65:86:2c:00:76:27:c8:
         34:20:6b:39:3b:77:da:f3:0f:ec:0a:94:0e:cc:9c:a9:15:4f:
         1f:01:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:48 2024 by rpki-client on console-fra.rpki-client.org