Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/0E0DBEA4327411ED80554E32C4F9AE02.roa
File:                     0E0DBEA4327411ED80554E32C4F9AE02.roa (raw, json)
Hash identifier:          WXJDLjhJd3w6bj++/nA2IppIGCY5Tdg8yehmeKyxNgI=
Subject key identifier:   19:17:BD:C9:F8:57:41:C5:91:06:5B:5A:41:B3:1F:77:E7:4E:3F:D4
Certificate issuer:       /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial:       0565
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/0E0DBEA4327411ED80554E32C4F9AE02.roa
Signing time:             Mon 16 Sep 2024 23:22:11 +0000
ROA not before:           Mon 16 Sep 2024 23:22:11 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     19807
IP address blocks:        2401:4700:3000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
                          rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
        Validity
            Not Before: Sep 16 23:22:11 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e8bda3-d6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:59:bf:74:0c:e2:ba:c7:29:08:f0:85:43:
                    72:d4:8f:8c:c8:c1:86:df:d9:4f:f8:d1:e9:a8:93:
                    be:01:89:d1:55:e0:21:e7:b1:73:0d:98:e5:5e:45:
                    c4:26:cb:9d:26:2d:78:57:d4:16:16:2a:bf:9b:5b:
                    f7:d8:06:28:73:16:0a:a8:b5:0b:ab:74:85:53:b0:
                    11:08:f9:1e:bb:be:22:2b:83:bd:77:57:6d:ea:2d:
                    bc:31:6e:55:5a:1f:bf:2e:bb:14:8d:d3:6d:51:a3:
                    93:61:a0:84:a8:83:ab:08:37:c5:03:0e:cf:75:78:
                    d3:59:26:a7:a4:b3:52:b6:4e:bf:a5:1a:be:f4:f2:
                    c8:fe:01:ff:17:ca:0a:fd:ed:d5:84:f7:cc:32:d6:
                    4d:ea:d0:b0:02:c4:ef:a8:0b:65:b0:15:dc:82:c4:
                    41:ab:de:0c:72:c4:2f:3a:fb:9e:58:18:02:a7:1a:
                    8f:8a:3b:1c:30:7e:4c:77:7a:2d:7a:7c:b6:5d:02:
                    38:b9:00:2c:9d:b8:6f:97:11:39:ac:1a:72:f9:a3:
                    0a:cc:28:92:26:4f:0e:b9:e0:48:cb:07:c4:f4:e9:
                    8f:cc:f8:7a:f4:21:16:50:83:7a:ec:fc:c2:f1:84:
                    4f:4c:c4:f6:a6:21:79:fd:74:6f:b8:bc:58:29:00:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:17:BD:C9:F8:57:41:C5:91:06:5B:5A:41:B3:1F:77:E7:4E:3F:D4
            X509v3 Authority Key Identifier:
                keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/0E0DBEA4327411ED80554E32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4700:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:40:0b:65:70:99:3c:60:60:70:49:ca:c9:d8:96:a3:41:25:
         f2:d3:b6:74:95:1a:f6:59:f6:b3:55:4b:16:1f:ac:4c:4b:22:
         83:30:10:b6:47:8b:be:a4:3e:de:fe:4e:15:06:45:3d:36:b0:
         95:8a:71:5c:dc:b9:ad:81:a8:74:86:6c:af:75:7f:01:cb:c6:
         a0:3d:6d:e6:bb:17:f7:27:ce:16:e3:09:64:50:a6:c9:89:ed:
         3f:da:2b:08:70:f6:bc:8b:94:4f:e2:b4:fb:40:e0:fd:d3:66:
         4c:2c:3f:74:8e:71:73:de:f4:72:8a:f5:4a:8a:50:3c:1b:9e:
         9c:72:da:6c:6f:9e:81:a8:70:d9:ad:93:48:fb:7b:3a:97:a0:
         0d:24:eb:ef:d8:54:89:ae:78:ad:46:44:59:40:d3:c6:bf:75:
         5b:63:71:9b:80:8f:05:e2:22:41:aa:5b:e6:d2:12:81:e1:3e:
         af:32:c4:ed:9d:80:48:9b:38:73:87:6b:93:7c:2e:1d:be:7d:
         0f:dc:e7:1c:7c:d3:c7:85:ea:fa:a6:38:0d:8e:a8:49:2c:c2:
         0c:a9:ef:0d:95:ab:ef:f0:cc:28:47:8b:fb:23:f2:bb:1e:c4:
         d3:71:80:ef:03:3c:4d:73:d6:3f:49:c6:86:3d:c9:57:0d:fb:
         dc:d6:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:24 2024 by rpki-client on console-fra.rpki-client.org