Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
File:                     01607012DD3711EC9EF48256C4F9AE02.roa (raw, json)
Hash identifier:          cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=
Subject key identifier:   56:18:0B:C3:B5:B8:EA:DC:F7:5A:41:8C:2C:13:CA:D9:F5:E9:D7:41
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       02E0
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
Signing time:             Thu 07 Nov 2024 01:14:39 +0000
ROA not before:           Thu 07 Nov 2024 01:14:38 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        2407:30c0:100::/43 maxlen: 48
                          2407:30c0:120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Nov  7 01:14:38 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672c147e-1ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:3e:cb:35:6f:ae:6b:37:79:9c:86:67:fd:
                    5f:4d:0c:6a:4a:08:d2:3a:8d:b5:6b:23:d5:61:e9:
                    90:3c:df:94:5c:47:fb:3a:d9:fe:ae:28:58:0f:e7:
                    4f:ce:17:a7:b8:c6:f1:2a:c6:43:05:50:a9:5c:cf:
                    fc:f6:0b:ba:db:08:a8:cd:3a:f3:15:9e:a7:15:15:
                    c8:1e:f5:2b:94:53:a4:c1:b2:15:e4:da:61:87:d1:
                    25:79:fc:a4:6d:33:14:ec:e6:1a:5a:97:68:e3:be:
                    c6:1b:5a:cb:60:68:b1:d7:61:7e:25:75:28:16:4d:
                    96:57:e2:da:bc:35:d9:9b:aa:f4:93:9c:8c:3e:0c:
                    34:44:09:8c:e1:3b:84:0d:c2:9e:65:9e:2e:3f:e5:
                    26:3e:62:24:67:b3:3f:4b:73:12:13:73:c9:fa:81:
                    db:61:29:c5:87:38:c5:d5:7b:17:e7:8b:25:61:a2:
                    f5:45:f1:81:61:e6:00:22:d9:eb:5f:98:3f:33:81:
                    47:e6:5b:d8:ef:7a:1e:0d:48:32:38:9e:c2:13:e9:
                    1a:b5:8a:08:66:2c:72:64:83:c4:0c:d0:02:8a:80:
                    12:cf:3a:54:67:5d:79:6a:da:84:92:1a:b5:00:12:
                    0b:b2:2c:7f:d2:e3:ff:a4:50:77:b8:c9:5e:94:be:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:18:0B:C3:B5:B8:EA:DC:F7:5A:41:8C:2C:13:CA:D9:F5:E9:D7:41
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:30c0:100::-2407:30c0:120:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3b:f7:17:41:b9:fb:fc:b4:76:f7:cc:9a:ec:8b:4f:3b:05:f1:
         d2:de:1b:c1:7e:76:3d:c4:ec:95:bd:a7:51:bb:b2:32:5f:bf:
         c4:19:52:df:65:9f:85:b7:c3:6a:1d:c7:a5:6c:90:cd:31:68:
         94:76:9a:51:16:b8:88:f0:5b:9e:01:48:62:df:6b:bd:50:48:
         f3:bf:ad:5f:7b:29:97:b4:48:65:2a:a7:88:52:88:2d:e7:20:
         52:17:a1:79:2a:f3:0f:e7:d5:19:5d:66:65:91:d0:58:d0:35:
         65:91:c5:a9:14:27:38:34:08:b2:5b:a9:d1:2c:cb:ba:e9:df:
         d3:17:3b:1a:3e:6b:3a:d0:b0:6e:25:64:9e:09:4c:6a:61:46:
         bf:b1:90:77:b2:6d:ec:b6:ea:a0:87:17:6e:95:62:30:69:1c:
         41:a7:4f:ac:77:23:42:15:be:ce:73:c2:b1:63:55:cf:01:04:
         9c:bd:14:32:4b:cb:68:e2:32:9d:03:bd:4c:ab:54:54:2d:1a:
         5f:20:6d:ff:8a:8d:6c:cf:9c:01:80:da:f3:3b:2a:30:b9:c4:
         64:cb:80:10:16:c4:d2:ab:07:59:39:41:b2:98:c7:a6:54:07:
         12:22:67:01:64:2e:a0:f8:18:85:0b:02:36:92:6e:61:80:1b:
         2d:6d:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:56 2024 by rpki-client on console-ams.rpki-client.org