Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/8F6A0892437611EC9E067020C4F9AE02.roa
File:                     8F6A0892437611EC9E067020C4F9AE02.roa (raw, json)
Hash identifier:          44jc2HCK3ANOLLqkUGNn4VzJW+fDcOLIoQKKCEkW6FQ=
Subject key identifier:   0A:9A:61:1F:48:32:12:73:D9:5B:2C:94:DC:4A:23:23:F0:3F:3B:A0
Certificate issuer:       /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial:       0809
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/8F6A0892437611EC9E067020C4F9AE02.roa
Signing time:             Sun 02 Jun 2024 22:29:45 +0000
ROA not before:           Sun 02 Jun 2024 22:29:45 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     57401
IP address blocks:        2404:c140:956e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
        Validity
            Not Before: Jun  2 22:29:45 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665cf259-d403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0e:8b:41:10:04:7b:05:cd:43:af:99:59:48:
                    8c:56:da:ee:89:8a:73:a0:1d:73:b2:a5:50:20:0f:
                    2a:90:d0:c0:65:7e:e7:88:0b:b5:f2:e0:95:90:6b:
                    17:e7:1e:e5:1d:00:c2:cd:41:d5:c7:ba:23:f0:41:
                    c1:f6:82:14:fd:f8:64:81:a0:55:94:2f:ad:2e:ef:
                    73:8c:ab:ef:33:dd:aa:29:a5:69:37:fb:83:26:07:
                    6e:ae:88:61:a4:1e:c3:2f:53:4f:b4:a8:55:73:c6:
                    2a:ef:25:3d:19:8f:f3:68:50:a3:15:78:c0:61:75:
                    1e:ba:bf:6f:09:c9:de:4d:ec:ad:fa:58:76:1e:75:
                    a3:8b:9f:bd:8d:2a:65:fa:bf:47:bc:93:d8:c3:f9:
                    df:d7:3e:d8:e6:f2:3f:01:fd:39:60:02:97:d9:32:
                    38:c7:1d:ba:d2:e5:0c:13:6e:81:cb:a0:16:43:7a:
                    c0:ba:0f:f1:0f:fb:7d:c8:5e:8a:3d:75:c5:f7:f5:
                    fd:04:40:aa:69:20:4e:3a:61:ca:2a:68:56:ee:c5:
                    cc:42:f4:39:77:24:ed:7a:11:22:ae:f9:5a:1a:06:
                    28:27:ae:61:fa:08:b7:85:8a:3c:6a:6d:9a:fe:aa:
                    d1:e5:45:2f:28:10:31:3e:94:44:f6:7e:47:4d:b0:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9A:61:1F:48:32:12:73:D9:5B:2C:94:DC:4A:23:23:F0:3F:3B:A0
            X509v3 Authority Key Identifier:
                keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/8F6A0892437611EC9E067020C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:c140:956e::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:ad:c8:eb:ca:2f:65:a4:b0:34:d4:91:cd:03:e2:bc:eb:
         74:0b:2c:04:8a:d7:a1:c1:d5:b7:af:45:12:55:9c:d5:16:9b:
         f2:7d:0e:dd:73:1a:45:59:d8:77:9e:33:a0:69:25:8e:7f:1c:
         9b:9e:ab:72:39:79:bb:59:e2:ae:4c:3d:72:0c:a9:ec:b7:ec:
         e9:66:76:c7:a4:81:b3:01:f6:b8:53:af:c2:09:9f:74:5e:ce:
         ba:b3:2c:f3:1d:7d:48:f5:8b:51:37:aa:2b:7f:38:bb:51:1b:
         f7:61:42:c0:5b:4b:99:28:4f:bd:7b:f4:92:d9:36:31:46:7b:
         0b:71:c5:ff:e4:de:be:9f:b1:10:92:54:02:d0:65:8b:e7:b8:
         c5:9d:bf:c2:8d:49:5b:c4:12:71:e1:39:89:16:6a:fc:3f:0c:
         0f:8d:9b:05:71:34:a9:38:92:fc:e0:f7:bb:b6:90:ff:7c:2b:
         53:2b:93:e3:59:1d:06:30:a9:10:77:1f:e5:00:5f:59:11:95:
         c9:ec:7c:7e:c8:09:6a:7a:5d:f5:65:20:f3:5f:34:f7:1f:e2:
         e1:30:ff:90:a6:2f:af:70:76:29:2e:5b:a0:12:1a:56:44:cd:
         b5:41:24:a2:eb:50:a4:5b:f1:0f:ba:78:04:e6:00:7c:3c:c5:
         7f:1b:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:35:03 2024 by rpki-client on console-ams.rpki-client.org