Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
File:                     0C5EDCDA716911EDA03D4A50C4F9AE02.roa (raw, json)
Hash identifier:          /udoJCuRJJiznFyAsVCyc0gM64uxhJqp5G9jTAQbZu4=
Subject key identifier:   6D:D7:60:E0:50:FA:77:EB:D6:B6:65:95:D1:8C:BF:16:81:C8:B8:5A
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       04ED
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
Signing time:             Sun 27 Oct 2024 00:36:17 +0000
ROA not before:           Sun 27 Oct 2024 00:36:17 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     16625
IP address blocks:        2400:5200:402::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Oct 27 00:36:17 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=671d8b01-a8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:63:37:0b:9a:d3:fe:b6:00:f5:62:2a:69:
                    13:fd:24:74:22:6f:35:c4:83:a6:aa:7c:c1:2d:21:
                    19:79:26:da:50:0e:64:7b:72:24:a1:08:89:90:7d:
                    26:78:fd:2b:6b:cd:56:47:80:e6:29:d5:26:db:28:
                    59:17:d0:bb:12:57:ce:0b:29:5c:5c:18:60:49:4b:
                    14:7e:d3:e2:98:b1:41:5f:78:30:66:1a:b9:83:4c:
                    9d:1c:21:e3:a8:36:cc:72:da:d9:6f:9e:a4:fd:7e:
                    32:28:4d:db:f0:b0:a0:a4:25:57:c7:98:bb:f2:4b:
                    e0:b1:30:60:30:f2:21:6a:ac:83:9d:cf:91:64:18:
                    18:6b:48:49:a4:62:1f:56:90:8c:8c:b6:8b:3c:1f:
                    ff:9c:f3:1e:33:1b:52:43:c0:bc:17:49:68:d6:30:
                    fd:74:70:18:40:c9:8f:da:d9:1e:d7:f2:3d:e1:b0:
                    56:46:5e:ea:15:73:05:c2:62:b2:c9:2a:24:4b:d1:
                    12:2a:85:26:82:45:72:c1:d7:ce:51:85:4c:cb:21:
                    56:3b:af:43:d8:8f:e5:1e:eb:af:e9:f4:90:05:49:
                    56:02:56:65:93:d3:ad:b5:12:ab:6a:c6:05:7c:9c:
                    6d:c3:7b:5c:74:58:0e:ed:a2:e0:3c:d8:52:7a:34:
                    88:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:60:E0:50:FA:77:EB:D6:B6:65:95:D1:8C:BF:16:81:C8:B8:5A
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5200:402::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:03:14:2b:02:c6:b1:00:8b:4f:dd:9c:45:39:81:b0:29:
         4e:19:9d:6d:0f:dd:43:7f:25:4d:0c:73:d3:fa:07:70:0e:b4:
         92:84:7c:cc:58:bc:17:2c:ce:1d:0a:54:f3:d0:69:7e:6b:ea:
         8d:57:e6:07:eb:0e:aa:2b:be:61:50:29:7b:5b:ca:ed:0a:10:
         7d:b3:9b:0f:e1:c5:d6:65:0b:1e:a5:50:48:92:5c:d9:36:d2:
         f7:11:b6:be:15:4e:ca:de:e3:5e:c3:b7:fb:58:fd:84:4c:6b:
         54:a4:03:c4:fe:b2:85:5c:9b:4b:55:bd:e0:91:5a:1e:32:d8:
         61:46:41:5e:80:80:8c:5b:0c:bd:06:f8:d7:6a:79:e8:1b:86:
         f0:1d:37:a0:92:4d:cb:4b:a2:cc:5d:3e:21:86:f8:87:50:be:
         33:31:c8:23:03:c7:54:58:22:93:f3:ac:be:ff:6d:a9:ba:b4:
         17:16:5c:51:d3:bb:71:5c:e2:eb:b9:ad:42:3c:7b:c2:68:b2:
         62:6c:09:69:41:47:76:83:58:36:00:c7:f9:6e:ed:64:b3:b5:
         27:2f:e5:85:6f:93:2d:ad:34:33:e3:07:82:1c:44:44:c8:64:
         a0:96:8c:19:e0:17:76:6f:01:ec:7e:94:49:80:5b:8d:73:43:
         a0:32:1a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:33 2024 by rpki-client on console-ams.rpki-client.org