Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/38D25300639D11EFB668775FC4F9AE02.roa
File:                     38D25300639D11EFB668775FC4F9AE02.roa (raw, json)
Hash identifier:          3rKNJDDfmaWD0FlSs2li9ybksdVlO8MQocN7u3VEcT8=
Subject key identifier:   92:C3:20:CD:E5:D0:DC:A1:7C:3B:02:88:59:F5:65:0F:49:F5:F9:61
Certificate issuer:       /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Certificate serial:       02
Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/38D25300639D11EFB668775FC4F9AE02.roa
Signing time:             Mon 26 Aug 2024 11:20:39 +0000
ROA not before:           Mon 26 Aug 2024 11:20:39 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     135102
IP address blocks:        2401:9ce0::/44 maxlen: 48
                          2401:9ce0:10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl
                          rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 05:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
        Validity
            Not Before: Aug 26 11:20:39 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66cc6506-eb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:c3:8d:e4:42:fc:75:f2:75:a8:c9:ea:90:
                    bc:30:2b:36:fd:cf:3b:70:50:21:ec:cb:e3:64:c5:
                    5e:6d:51:fd:ab:f8:ef:a4:83:5a:c5:dd:13:05:af:
                    98:65:aa:eb:06:bb:4a:30:72:4b:8c:d8:2e:3c:1c:
                    1f:8a:b4:0e:c6:f6:dd:d4:52:b3:ed:cc:8d:02:e4:
                    34:c5:da:7b:69:ad:66:bc:03:de:b9:28:76:27:3a:
                    23:dc:dc:dc:44:b8:c7:ec:7d:b9:7f:18:89:63:cc:
                    9c:40:1d:ff:ee:d1:4b:11:76:16:31:77:b7:cb:63:
                    04:dd:8b:42:e3:56:ba:33:ca:f8:f5:af:a3:6e:22:
                    f8:ae:c2:83:49:d3:5e:82:43:3c:3d:a6:4b:b6:54:
                    1b:43:10:0f:8e:87:41:39:14:ce:8d:c8:59:25:a9:
                    31:90:2d:51:05:2f:cd:fc:ab:db:c3:94:96:8a:0f:
                    99:30:31:e6:2b:97:0e:13:6d:63:ff:e4:6f:a0:66:
                    7c:fc:cf:82:0d:82:88:ed:62:55:8a:2e:25:06:0a:
                    cf:96:28:45:46:2e:c9:e2:48:a8:e4:c6:ab:f5:cb:
                    82:a0:ca:56:7c:90:0d:c0:6a:5e:a9:f2:3d:e1:f1:
                    ff:77:cd:a2:6c:08:24:d4:43:7b:76:81:d8:77:0f:
                    cb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C3:20:CD:E5:D0:DC:A1:7C:3B:02:88:59:F5:65:0F:49:F5:F9:61
            X509v3 Authority Key Identifier:
                keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/38D25300639D11EFB668775FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:9ce0::/43

    Signature Algorithm: sha256WithRSAEncryption
         0c:60:f3:9f:8a:db:32:43:0c:6d:2d:2c:99:65:04:fa:6a:23:
         ec:99:cc:b2:98:9c:35:26:72:92:c8:43:b8:a0:d9:ba:6d:a0:
         ad:bb:ee:f0:5d:9a:a0:f0:fb:7c:37:f0:80:78:f1:e6:81:17:
         23:b2:b9:50:66:48:12:9a:36:2e:06:5e:98:68:c9:0c:4a:15:
         a7:f0:78:02:86:d9:3c:6d:09:53:02:da:c4:41:c9:88:10:32:
         a0:cb:02:ce:38:20:3c:35:69:9a:84:d9:ed:09:ba:70:09:81:
         e4:fa:54:cc:00:2d:75:c3:76:38:c8:da:39:0e:a5:f7:80:1d:
         a3:e1:7b:4c:57:5e:63:57:b1:40:4f:3c:8e:86:5d:7e:d7:9c:
         d0:5b:d9:a5:3c:19:79:6c:af:8b:31:94:b5:e3:7b:21:6e:11:
         b6:19:0f:06:d0:75:00:f5:87:37:2e:95:03:38:f9:4e:da:53:
         e1:9d:46:40:26:ff:3f:4f:a8:e2:0a:46:17:7b:5c:83:9f:45:
         e9:e1:b5:a6:42:c0:e4:fe:6b:97:1c:ae:7a:77:85:1a:78:e2:
         9d:7a:dd:56:1d:81:a2:7b:d5:7a:dc:06:55:2f:aa:65:09:8f:
         6b:d5:93:45:6f:2f:a5:5f:95:71:58:7c:8a:f3:e3:d9:0e:09:
         66:cc:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:14:57 2024 by rpki-client on console-fra.rpki-client.org