Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7AE3D13C62A111ED80F96E47C4F9AE02.roa
File:                     7AE3D13C62A111ED80F96E47C4F9AE02.roa (raw, json)
Hash identifier:          88Mr0FHBhr3kpdHxo8pGdxgvAUdFbFEEoeRLc9z4/iE=
Subject key identifier:   B9:6A:72:2A:72:2A:67:52:E2:6C:05:A1:89:D2:27:FF:68:14:24:69
Certificate issuer:       /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial:       073F
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7AE3D13C62A111ED80F96E47C4F9AE02.roa
Signing time:             Wed 31 May 2023 23:45:29 +0000
ROA not before:           Wed 31 May 2023 23:45:29 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     18041
IP address blocks:        2404:c140:2596::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 21:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
        Validity
            Not Before: May 31 23:45:29 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6477dc19-bacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:d4:b1:38:d3:b1:2c:6b:da:11:c0:3d:67:
                    48:4d:96:19:a2:a1:1e:e5:c2:76:64:b6:d5:f2:3b:
                    34:ad:07:fa:d8:07:95:0c:30:84:24:0c:2c:7a:be:
                    56:e0:ad:f2:0f:e3:fa:2b:80:3b:50:ad:a1:99:10:
                    af:a0:09:ea:7b:f8:d0:5c:1e:49:98:af:e3:b4:28:
                    89:b7:65:95:91:f3:57:2d:d3:57:e0:83:af:1e:29:
                    cd:9c:2d:19:e2:b1:31:fc:bb:99:a8:98:5b:44:81:
                    dc:e2:78:e0:20:c1:25:d7:9e:9b:c0:e3:cc:ad:ef:
                    b2:47:10:ea:f4:58:65:84:38:c9:88:a9:16:8d:37:
                    87:bb:9d:b3:11:01:57:96:34:b0:4f:5b:66:c7:6c:
                    23:4c:d4:6a:8d:f2:21:e2:e1:74:b4:31:3f:48:e3:
                    b1:d6:fd:2d:f2:41:99:73:78:13:51:f6:b8:85:e6:
                    85:59:03:43:3e:12:3c:c0:9b:19:fd:ad:5a:22:88:
                    30:fe:52:6d:44:48:3c:83:6d:ab:e5:6c:22:cf:a5:
                    13:41:a4:f4:34:40:54:0c:a1:d0:2d:a6:46:3a:cc:
                    7b:bf:d7:3d:1a:1d:b9:bf:91:78:07:92:8f:84:e1:
                    37:d3:3c:ab:41:fb:8e:b2:50:f1:b6:67:9a:a3:8a:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6A:72:2A:72:2A:67:52:E2:6C:05:A1:89:D2:27:FF:68:14:24:69
            X509v3 Authority Key Identifier:
                keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7AE3D13C62A111ED80F96E47C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:c140:2596::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:37:3d:32:0c:ea:44:bd:96:48:dc:52:f8:f9:86:e7:2b:f0:
         26:b6:8c:4a:52:95:c5:41:72:4f:8d:8e:c7:5f:58:08:bf:50:
         a2:24:c8:6a:fc:e8:53:f3:6f:68:6d:09:ce:a9:9a:09:4b:ac:
         b3:81:4a:26:70:ca:30:70:b8:b8:e3:7b:38:ec:e6:e6:fb:a4:
         93:48:d1:fa:8a:d2:c2:e0:fc:b2:c5:da:40:aa:c0:31:60:c1:
         49:dc:3e:e2:af:2a:16:a6:2d:0c:1e:36:54:73:bf:bb:4b:d6:
         3a:fc:22:5e:5b:c1:c3:4c:34:6b:82:0e:8a:c5:4c:22:d8:0f:
         5f:0d:5a:54:ae:93:a5:4d:ac:f4:ac:91:21:93:82:e9:2a:48:
         21:7c:be:81:a0:bd:6e:bc:d2:19:70:68:42:16:93:e6:8e:94:
         dd:de:4f:22:62:f3:6b:89:fe:c4:bc:9f:26:d3:eb:3e:13:45:
         02:4c:5a:3e:e3:03:e3:fe:bc:61:33:c4:b6:69:64:56:36:79:
         a6:11:02:f5:67:1a:da:e2:b8:37:30:fc:50:f9:22:2c:ad:71:
         b1:d0:cd:a8:81:b0:7d:dd:45:78:15:c7:96:f7:fc:56:40:ef:
         13:e3:82:e1:9f:84:9b:d4:b0:42:85:be:07:64:bf:13:29:15:
         3f:2f:7d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:38:26 2024 by rpki-client on console-fra.rpki-client.org