Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C3261EF826DF11ED94E18118C4F9AE02.roa
File:                     C3261EF826DF11ED94E18118C4F9AE02.roa (raw, json)
Hash identifier:          7CVfnyqnIiLW71WuBjnEZ7aaTtwRTAZvuVVY0lHLWVc=
Subject key identifier:   A2:77:5B:94:D7:BF:0C:87:50:B6:4B:84:19:03:82:7A:8E:6E:4D:38
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       0335
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C3261EF826DF11ED94E18118C4F9AE02.roa
Signing time:             Fri 01 Mar 2024 03:05:11 +0000
ROA not before:           Fri 01 Mar 2024 03:05:11 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     209642
IP address blocks:        2400:54a0:2100::/44 maxlen: 48
                          2400:54a0:2130::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821 (0x335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Mar  1 03:05:11 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e145e7-c382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:e8:7d:44:87:81:e7:d4:92:96:c0:20:73:
                    8b:eb:7e:0b:24:5d:b7:31:3c:9f:6a:15:da:5e:0c:
                    cf:31:df:5c:ad:04:c4:db:b4:b0:ea:5e:d7:89:ab:
                    f3:d3:fb:58:da:2e:b6:da:c1:2c:40:03:8e:68:79:
                    85:e5:71:96:73:61:a4:46:2e:fc:29:36:2d:52:97:
                    25:40:00:0f:8d:b4:4d:a7:f9:23:78:6e:6d:24:99:
                    ce:1a:67:49:49:b3:fd:e0:4b:7a:fb:24:58:4e:0f:
                    93:5d:ea:a0:06:af:65:57:4a:5e:68:f9:52:62:c7:
                    e5:74:11:08:d1:e3:c2:f8:62:90:3e:09:8e:da:86:
                    1f:67:6e:8b:86:fc:5c:0d:7b:88:80:4f:55:09:62:
                    33:90:23:34:da:b0:9d:e9:a7:2c:d6:42:f3:26:95:
                    b6:c9:e7:7c:ad:37:23:70:2d:b1:19:53:90:3f:5b:
                    1e:a4:22:68:e0:6c:e5:17:58:af:5f:94:28:23:1a:
                    6c:78:e5:52:0d:a9:e7:74:4f:56:a5:f9:e8:56:da:
                    8c:47:22:ca:f6:58:54:38:06:c0:56:b4:9c:69:10:
                    bf:b3:19:c7:a8:4d:dd:7a:5e:f5:8f:e8:3b:fd:72:
                    4c:1c:6d:16:43:5a:0d:6d:73:24:bd:77:14:59:c6:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:77:5B:94:D7:BF:0C:87:50:B6:4B:84:19:03:82:7A:8E:6E:4D:38
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C3261EF826DF11ED94E18118C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:54a0:2100::/44
                  2400:54a0:2130::/44

    Signature Algorithm: sha256WithRSAEncryption
         36:0c:79:41:28:b8:b3:35:c8:e7:06:f8:ac:a9:88:5e:78:e2:
         54:56:32:50:f4:27:5e:3b:36:5e:16:04:4c:cb:d5:8e:4c:7f:
         2d:3c:ac:84:7f:c6:e5:7a:bf:62:ac:ba:eb:50:dc:4a:3f:dd:
         89:42:93:42:fa:f1:e8:16:e9:2d:dc:c4:86:1f:8d:22:8e:30:
         da:e8:38:95:9b:26:ca:6b:eb:a2:2e:e9:c2:8f:1b:a8:cd:8a:
         c8:7c:7a:15:09:b6:59:93:7a:1b:eb:76:55:9f:c8:78:b6:69:
         6e:ae:17:fd:eb:3d:46:55:74:c2:b6:cc:03:b7:74:01:42:15:
         8f:b2:3f:de:ff:a5:ef:51:1b:4a:08:28:97:32:00:9a:ae:9c:
         1d:10:59:7d:3f:bf:ac:a2:08:cc:20:1a:c7:67:c3:86:32:39:
         c9:63:54:cf:ec:5e:32:23:5c:d2:cd:ce:3f:d6:df:bb:89:a7:
         3c:9d:43:49:13:d7:19:ac:6d:04:ab:7c:df:cf:4a:05:85:45:
         97:31:60:65:5e:55:94:8d:f4:65:c5:11:d8:37:3e:be:be:00:
         96:66:de:bd:d4:0c:7d:48:44:32:95:b0:21:14:7f:eb:48:39:
         d5:3b:d7:3c:25:91:22:b8:df:ac:6c:74:f3:3e:df:a2:3d:86:
         01:fe:dc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:58 2024 by rpki-client on console-fra.rpki-client.org