Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/6F8A81CCF30C11ED94750772C4F9AE02.roa
File:                     6F8A81CCF30C11ED94750772C4F9AE02.roa (raw, json)
Hash identifier:          KeTueCm3z2LBug4KnXXzF4iTTZQ8It6Q070daguo0jI=
Subject key identifier:   67:F4:D9:EA:26:3C:52:E3:40:31:29:98:3A:A3:C6:ED:AF:49:F5:DD
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       0334
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/6F8A81CCF30C11ED94750772C4F9AE02.roa
Signing time:             Fri 01 Mar 2024 03:05:10 +0000
ROA not before:           Fri 01 Mar 2024 03:05:10 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     208690
IP address blocks:        2400:54a0:2a00::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 03:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Mar  1 03:05:10 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e145e6-3d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:52:cb:8e:9c:9a:f5:b3:64:95:f0:96:ca:b1:
                    ae:b1:84:92:b6:bf:3d:45:84:ba:fd:f9:35:89:5d:
                    ae:ff:60:75:93:35:24:3f:d7:1b:80:30:cb:ec:0a:
                    ff:53:61:8c:e0:90:4f:9b:4f:f6:33:b8:9c:bd:4e:
                    b9:dc:0b:2d:0c:91:b9:cf:98:00:5e:00:da:e9:80:
                    1d:ae:16:13:39:70:4f:5d:91:16:2c:bd:83:f5:81:
                    09:98:b0:22:72:fa:3d:42:27:e2:7a:ba:4d:d7:d9:
                    1e:eb:84:e6:40:a2:71:fc:8a:02:84:0a:a1:95:22:
                    5f:7f:4a:e2:99:55:46:fb:53:2a:43:68:c1:af:9c:
                    f4:73:c9:8a:82:b5:3f:41:41:20:64:69:80:51:24:
                    5c:87:7d:8a:3b:7a:66:cb:6a:11:51:8f:fc:08:06:
                    32:75:b5:cd:4f:73:9e:53:18:43:63:3e:6a:30:4d:
                    40:00:47:b9:76:a6:69:28:44:b5:93:a5:e6:83:0d:
                    c5:f0:6a:9d:8b:e8:3f:53:96:c2:99:ec:f5:9c:d6:
                    4d:87:a9:7d:17:69:75:5f:a9:74:bd:79:a6:08:a4:
                    3a:e3:60:c6:6f:a0:3b:57:a5:d9:61:e1:b2:f6:f2:
                    8b:3f:b3:56:a5:1b:3b:d4:67:a4:50:d4:4a:b3:f9:
                    6e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F4:D9:EA:26:3C:52:E3:40:31:29:98:3A:A3:C6:ED:AF:49:F5:DD
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/6F8A81CCF30C11ED94750772C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:54a0:2a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:01:2d:0b:cf:54:f8:b8:c4:cc:7a:06:fb:11:b8:a6:61:6a:
         47:30:06:75:01:c3:41:05:ab:a5:56:8b:b5:42:c3:f5:28:f9:
         e6:c3:91:3e:bf:8b:f6:1a:b4:4b:4d:bb:04:55:cb:d9:f3:a6:
         6f:2e:ee:11:32:69:3e:ed:c1:2c:ad:00:85:2d:cc:df:92:b3:
         c4:e2:4f:19:ec:8b:9c:b3:1e:40:b4:b0:62:6f:07:f7:f5:90:
         10:ca:8e:f2:12:40:91:30:03:63:ac:5f:fa:e6:10:5a:4d:af:
         4c:fd:5b:4f:d0:f9:c4:de:e7:ea:da:a9:2c:66:ba:b3:e8:3b:
         95:4b:ea:c6:27:fb:44:46:69:95:50:e7:24:18:be:41:95:38:
         a2:d2:d5:75:8f:46:c6:7d:e6:61:ec:a3:a5:c6:a3:37:84:c8:
         59:56:4c:9d:42:b9:cd:1c:0a:1e:8a:a4:30:4d:b5:44:1c:7a:
         2b:7f:6c:e3:b2:c8:e1:09:8a:d3:b5:ff:f8:ac:85:aa:ee:e0:
         e2:aa:df:23:02:7c:ea:ba:77:b3:ed:d7:f9:c5:c7:fd:29:47:
         fe:98:de:61:c5:98:f8:06:ba:f2:62:80:47:1a:37:17:1f:ab:
         a3:46:96:cf:86:19:af:02:b6:aa:66:e8:71:4e:fe:6c:fc:1c:
         02:02:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 03:53:11 2024 by rpki-client on console-fra.rpki-client.org