Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/00D63708DD3711EC9EF48256C4F9AE02.roa
File:                     00D63708DD3711EC9EF48256C4F9AE02.roa (raw, json)
Hash identifier:          O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=
Subject key identifier:   F6:CB:16:48:83:E5:C7:27:27:34:D6:EE:A8:1A:F4:E9:6E:1E:1D:16
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       02DF
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/00D63708DD3711EC9EF48256C4F9AE02.roa
Signing time:             Thu 07 Nov 2024 01:14:38 +0000
ROA not before:           Thu 07 Nov 2024 01:14:38 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        2407:30c0:100::/43 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Nov  7 01:14:38 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672c147e-59b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:8d:ce:c1:a9:fc:7c:4d:e2:30:fa:88:0a:
                    39:c5:ad:b3:89:0a:b8:11:f4:1e:5a:fb:ea:bb:d3:
                    23:4d:69:81:49:5a:b0:13:36:a2:51:4b:49:1a:e0:
                    d1:2f:8f:5b:b3:cb:30:cf:a7:73:ee:f7:e1:13:7d:
                    26:0f:b6:22:5f:fa:2e:d8:0b:b7:8a:39:3f:29:48:
                    ed:8f:23:70:43:9d:74:4c:0c:33:99:00:be:fd:ce:
                    b4:ca:b5:fe:3a:93:56:78:11:3d:a4:c4:59:2d:34:
                    10:aa:97:f7:1a:c8:94:e4:fa:bd:23:90:d4:bf:9d:
                    ab:8e:6b:bb:84:37:21:9d:a9:b6:b5:34:d4:cc:02:
                    85:2e:48:2a:95:c1:9c:b6:4e:77:e1:a2:d7:04:45:
                    e1:7e:be:2d:7e:6e:f6:9c:17:80:84:85:72:c2:76:
                    9d:1d:cc:98:d7:1b:3d:2e:df:6e:a8:fa:14:02:41:
                    17:85:9a:bb:72:42:44:f0:6c:20:79:7f:e6:32:87:
                    70:a2:e6:f7:76:9d:38:43:b5:d0:62:30:d0:35:da:
                    c4:94:1b:8e:7b:56:c1:57:77:99:3f:da:76:c9:78:
                    8a:e2:ec:3d:3d:86:7c:fd:db:64:e9:31:6f:e3:c0:
                    d4:d5:7b:7b:15:3a:ed:bf:50:2a:f0:b2:e3:89:03:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CB:16:48:83:E5:C7:27:27:34:D6:EE:A8:1A:F4:E9:6E:1E:1D:16
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/00D63708DD3711EC9EF48256C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:30c0:100::/43

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:7c:0f:37:85:4a:c2:21:59:3b:d7:ac:ad:1f:3d:a2:71:
         6c:64:07:75:d0:0a:b4:e9:30:b7:c4:74:2d:e0:86:35:f3:27:
         31:a1:da:25:f0:64:89:0a:db:51:32:b2:52:54:40:4c:8d:13:
         b3:be:22:25:51:17:22:9f:ba:22:d8:60:56:cc:5b:2f:38:19:
         d6:ee:2a:d5:9e:b8:0c:01:5c:f2:56:55:30:cb:5f:ee:27:c2:
         82:5e:1c:fc:14:80:0d:9d:8b:20:ab:4f:a1:98:37:03:cb:34:
         ee:ea:f5:e1:5e:23:fa:c3:07:51:79:af:8c:57:09:c9:43:58:
         e2:01:46:4f:15:b4:6a:a4:bc:9d:56:da:3c:7f:8f:73:60:e8:
         06:fb:29:3c:b5:d2:b2:fb:98:90:3b:f0:5a:83:6f:1b:11:db:
         cb:38:3b:c3:4c:3f:e5:9b:82:63:ff:b7:19:48:ca:c1:59:a5:
         5a:03:bc:7e:1b:bb:65:a6:2d:07:ac:ab:7a:9e:66:2e:bd:6b:
         ae:de:ed:b4:c5:ae:18:97:a8:e0:9e:10:a8:cc:a6:46:5a:b4:
         24:ad:5f:eb:11:92:98:25:c8:d4:ad:13:2f:d7:26:73:f4:c6:
         27:da:2d:3f:8c:61:97:69:39:e5:ef:08:09:22:dc:e8:97:a6:
         02:7d:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:53 2024 by rpki-client on console-ams.rpki-client.org