Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/8F6A0892437611EC9E067020C4F9AE02.roa
File:                     8F6A0892437611EC9E067020C4F9AE02.roa (raw, json)
Hash identifier:          mdZyEfS4W5rF1PYWp2VRbpalc8PduLv6/BzSpR8EJUI=
Subject key identifier:   19:D5:D3:4F:AD:2A:0B:4E:0C:F2:B1:CC:0F:34:2C:EA:54:AC:98:EC
Certificate issuer:       /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial:       0742
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/8F6A0892437611EC9E067020C4F9AE02.roa
Signing time:             Wed 31 May 2023 23:45:32 +0000
ROA not before:           Wed 31 May 2023 23:45:32 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     57401
IP address blocks:        2404:c140:956e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 21:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
        Validity
            Not Before: May 31 23:45:32 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6477dc1c-e6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:f2:08:f9:b9:3d:62:a5:5d:af:c2:9e:77:
                    60:fd:c5:7f:65:cc:74:ac:83:16:53:de:41:11:d9:
                    c9:54:95:bb:43:5d:86:50:e9:eb:8b:64:3c:3e:e8:
                    55:11:ef:5d:44:ab:f6:49:5f:80:52:55:a1:7e:28:
                    b7:30:be:4e:9e:94:7c:33:3d:8a:47:73:0f:0c:39:
                    dd:9b:9f:34:3b:db:4e:d1:71:d6:b0:38:ec:da:c3:
                    cb:33:ec:cb:6b:0c:d1:79:3a:a2:ab:01:d6:65:23:
                    ed:c8:78:1e:b1:0d:dd:c1:05:74:19:5c:e3:af:1c:
                    fa:89:7f:55:58:6e:79:eb:46:5f:f4:de:54:99:ac:
                    4a:1a:2b:47:65:63:5c:43:56:81:e4:20:d4:40:42:
                    d9:60:7a:0d:9d:c0:e8:3c:e0:cc:a3:8d:fa:d8:61:
                    78:fe:52:1d:bd:0c:2b:f3:c2:8a:c7:79:fd:8a:42:
                    98:cb:7b:e1:d6:12:b1:10:46:58:09:93:28:6e:ea:
                    16:84:90:63:54:fd:88:d7:7d:51:c6:c0:2b:3c:89:
                    84:c2:d3:39:a4:7a:a6:2a:9b:db:62:c9:24:ff:c7:
                    68:23:c1:e6:a5:ea:21:3b:ef:6e:5b:11:c9:34:7b:
                    31:f3:75:ac:fa:0c:2f:ab:d0:35:61:e6:2b:0e:3f:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D5:D3:4F:AD:2A:0B:4E:0C:F2:B1:CC:0F:34:2C:EA:54:AC:98:EC
            X509v3 Authority Key Identifier:
                keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/8F6A0892437611EC9E067020C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:c140:956e::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:24:30:e5:8c:e7:95:3a:61:e5:bd:9a:13:9b:ec:14:00:55:
         b5:fc:e5:f6:5a:43:ce:a2:3c:5b:4d:3e:92:31:72:28:ed:11:
         ee:fe:8f:9d:f5:66:a0:26:b4:e2:22:71:ec:2a:01:ca:f4:ba:
         6c:18:f4:ed:b7:e3:b0:e5:20:0c:a7:16:f0:d2:e6:b4:92:f9:
         8d:2f:95:65:6d:a0:f9:f8:77:21:c7:31:2b:4f:3e:52:88:13:
         4c:9d:00:4d:4d:02:10:4d:f1:28:3c:15:3d:45:85:2f:c3:fb:
         1d:c2:b7:3f:74:ce:1b:04:93:54:c5:fa:0f:85:6b:92:b9:3e:
         47:43:ae:e8:c9:ae:f6:45:24:a6:cd:bf:f9:d2:9f:89:cd:c3:
         46:0f:5f:fc:7f:2c:20:50:6e:5b:2b:72:82:6d:44:94:f2:4c:
         eb:f0:6a:41:25:21:21:67:33:80:29:c2:c1:99:37:54:20:cb:
         3a:e4:ea:a3:31:d8:3e:df:cb:57:2b:be:c2:f0:40:aa:29:89:
         88:e3:49:bc:e3:26:fb:be:4b:00:e4:b8:c5:48:86:1d:06:73:
         6f:27:db:ba:ca:78:15:87:4c:2c:ef:ba:99:3d:65:56:b6:28:
         38:f0:61:aa:55:11:3a:25:7c:69:cb:33:70:34:2c:7c:52:7f:
         ad:8d:b0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:57:19 2024 by rpki-client on console-ams.rpki-client.org