Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/73E82004BCA111ED914D176DC4F9AE02.roa
File:                     73E82004BCA111ED914D176DC4F9AE02.roa (raw, json)
Hash identifier:          uNy/av1c0rAoryuYfcF23ivFrE+QY34iEnpGJhnQKmU=
Subject key identifier:   3F:FE:12:73:5E:B4:85:5A:F7:7E:55:9B:B2:DA:0C:3A:24:69:21:93
Certificate issuer:       /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial:       022F
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/73E82004BCA111ED914D176DC4F9AE02.roa
Signing time:             Tue 05 Dec 2023 03:14:09 +0000
ROA not before:           Tue 05 Dec 2023 03:14:09 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     150137
IP address blocks:        2001:df1:c082::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
                          rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
        Validity
            Not Before: Dec  5 03:14:09 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656e9580-68b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:a0:44:69:33:49:7e:ed:23:fb:ff:97:01:
                    68:02:44:6b:d1:31:3b:c2:e4:bb:fc:2b:cd:53:8b:
                    ab:0a:44:e9:14:d3:43:fe:a2:8b:c8:73:91:33:16:
                    06:26:8d:63:4d:60:5d:72:1e:63:58:42:71:ab:27:
                    0c:d7:91:e0:36:88:6d:02:3d:f5:3c:8a:0a:49:dd:
                    0e:e6:53:1d:c4:db:5a:62:dd:9c:40:23:77:1d:d9:
                    d0:c0:71:76:d0:d2:a8:d2:19:3b:d0:6e:57:7f:b6:
                    a6:6a:a1:90:d8:9c:46:d3:0a:1a:e7:b9:e4:82:f3:
                    bf:ce:bf:1d:b0:d3:c5:76:cd:f1:98:c9:d2:dc:63:
                    c3:d7:96:cd:47:9c:2e:26:33:ec:e8:6d:c2:93:e4:
                    88:05:02:09:0c:65:02:84:6a:c0:b5:a0:46:ad:ca:
                    c6:8b:60:0e:4a:54:dc:d0:23:1b:b5:b1:f5:52:62:
                    23:ba:c5:93:c4:25:f3:38:50:10:f6:71:42:a4:44:
                    82:c7:5e:4e:38:33:7c:50:29:f4:1d:1a:81:d4:0d:
                    33:88:2a:45:f4:01:48:6a:c9:f7:fe:9f:01:96:de:
                    7e:d2:bf:0d:4b:f0:ff:9b:a3:d7:d8:30:b3:08:a6:
                    c5:25:38:be:22:c8:27:04:5a:a2:67:eb:b2:16:5e:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FE:12:73:5E:B4:85:5A:F7:7E:55:9B:B2:DA:0C:3A:24:69:21:93
            X509v3 Authority Key Identifier:
                keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/73E82004BCA111ED914D176DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:c082::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:36:d4:4a:c9:ee:4c:4f:ae:10:5b:b3:16:22:06:85:ca:
         e5:0e:33:6e:43:77:04:93:02:ab:38:85:14:12:81:a1:37:ce:
         bd:82:7a:e9:09:68:c9:a9:2b:c8:aa:3f:f2:2e:71:74:c6:0c:
         a1:3c:e0:2b:0f:7b:d9:74:d8:aa:bc:68:bb:68:3c:f2:0d:a2:
         f0:79:58:09:75:2c:61:b2:86:b9:19:57:33:70:44:80:6c:4b:
         66:f9:b7:9e:42:34:f7:bb:ef:32:c2:50:96:1d:69:58:ef:ca:
         98:2c:2b:19:10:82:95:c3:9a:58:7d:1a:5b:c8:e5:86:8c:49:
         14:8a:d8:63:2c:3d:65:68:12:e3:c8:37:17:dc:35:25:13:1b:
         14:4a:9b:4e:5b:e8:1e:ea:2d:58:c9:63:de:82:5d:e0:7c:9c:
         2b:d1:20:23:f6:30:b4:63:b2:76:a6:de:ff:57:e5:7b:27:7d:
         7b:5d:d1:22:dc:87:45:7c:d1:01:7a:b3:70:16:e3:a0:3e:d7:
         81:db:54:c6:01:db:04:8d:4a:d7:a0:c9:05:3a:12:a2:c1:5a:
         0f:92:85:85:d6:d4:fa:33:1e:bd:fd:8e:30:a6:77:8a:8e:ed:
         e8:f3:73:5e:72:14:08:4d:34:9e:4c:b2:b1:e1:b1:ab:4a:23:
         97:72:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:05 2024 by rpki-client on console-fra.rpki-client.org