Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa
File:                     501941C093F211EEA029A113C4F9AE02.roa (raw, json)
Hash identifier:          cNuSuuV714IVwMFeckoTksnZWBrOOwGcqob9V4WivZw=
Subject key identifier:   CF:20:ED:5B:32:7E:E1:8F:BF:34:C2:9C:BA:22:60:CF:5E:A4:42:78
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       0831
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa
Signing time:             Wed 06 Dec 2023 04:45:43 +0000
ROA not before:           Wed 06 Dec 2023 04:45:43 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     150325
IP address blocks:        2406:7ec0:1000::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097 (0x831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Dec  6 04:45:43 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=656ffc77-dcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:9e:00:cc:58:b8:88:f6:7d:9e:93:df:07:
                    35:fb:36:ea:bf:3f:65:ad:7e:e4:3d:1f:2f:b5:e8:
                    12:0f:ac:2a:36:d0:04:5e:5a:5a:55:0b:08:45:a8:
                    cf:c7:7b:5a:82:c2:2e:18:ae:7e:43:0f:61:b9:47:
                    3e:43:ad:38:03:77:e7:ec:96:6c:bf:1f:2c:b3:e0:
                    2c:1b:9c:47:8d:c0:c7:97:07:08:ad:73:4f:7d:30:
                    e0:7b:02:7c:3d:1f:38:b3:ab:bc:64:9a:71:de:55:
                    23:75:6e:68:27:65:ea:c7:83:d3:c5:41:9b:9f:68:
                    32:7c:d5:b4:ac:0b:8a:72:d0:8c:b8:40:45:b7:00:
                    d7:45:53:17:fb:ff:a6:ee:7c:64:1c:e9:b6:0a:16:
                    60:6a:98:2f:e5:bf:1b:d0:62:7c:b4:e9:5a:76:9a:
                    c5:3d:db:9c:9d:76:db:0d:26:6e:22:45:1a:b1:30:
                    26:d8:92:db:ad:c7:ba:13:64:ea:27:e9:d7:34:ed:
                    71:e0:d5:64:d2:44:41:b8:bf:65:89:9f:28:ff:23:
                    25:61:56:df:28:76:6a:96:fb:65:ea:f3:f3:a4:4e:
                    d3:36:20:ea:67:a5:5d:d9:5c:0d:e5:ca:ef:35:9d:
                    2a:cc:a1:f4:1c:65:fa:96:74:be:e7:ee:0d:88:53:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:20:ED:5B:32:7E:E1:8F:BF:34:C2:9C:BA:22:60:CF:5E:A4:42:78
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7ec0:1000::/46

    Signature Algorithm: sha256WithRSAEncryption
         9c:52:d1:b2:1d:c8:29:48:c1:a6:5f:f7:93:41:68:4c:76:d8:
         f6:22:21:81:7f:ec:7e:ef:9f:60:b2:ec:3f:60:d6:a8:06:3e:
         ea:c7:51:4f:d1:0f:34:10:01:39:c5:2d:f4:86:da:ff:f1:c6:
         82:40:4e:2f:e1:bc:48:81:cf:07:29:85:ff:e4:4d:df:e8:ca:
         41:c6:bc:d4:5f:a3:00:98:73:4f:56:55:2b:d4:d7:69:e3:19:
         15:f3:95:97:05:bf:2e:39:3a:ac:9d:69:1c:87:63:a7:9f:f9:
         9d:15:43:60:af:73:bf:6a:58:89:84:ff:14:c0:6f:a5:ce:5c:
         bc:ed:34:45:1d:4f:fa:1d:41:fe:d0:3e:36:45:9a:f9:d1:69:
         40:73:fe:25:00:93:c7:44:6b:00:f3:89:df:c0:b2:5e:2c:e0:
         04:08:91:cd:9c:81:fa:87:60:8a:3b:94:5f:46:fc:d4:00:69:
         ff:66:52:4c:f2:bf:bb:fd:57:79:f2:8d:eb:c2:70:80:b9:c8:
         6e:c1:dc:9c:e5:f5:9f:99:ed:03:08:a4:f6:d1:f9:38:bf:1c:
         c8:db:73:5a:05:ae:1a:44:a8:27:0e:0c:67:46:55:19:16:e7:
         c0:49:df:46:46:5f:c4:b6:c8:cb:b9:ec:13:76:60:d3:3b:a1:
         e8:15:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:39:16 2024 by rpki-client on console-ams.rpki-client.org