Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01F6431CDD3711EC9EF48256C4F9AE02.roa
File:                     01F6431CDD3711EC9EF48256C4F9AE02.roa (raw, json)
Hash identifier:          wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=
Subject key identifier:   67:27:85:E0:1E:EF:AC:B6:CC:91:4A:83:C0:B2:70:F9:02:F2:88:A0
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       02E2
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01F6431CDD3711EC9EF48256C4F9AE02.roa
Signing time:             Thu 07 Nov 2024 01:14:40 +0000
ROA not before:           Thu 07 Nov 2024 01:14:40 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     213151
IP address blocks:        2407:30c0:100::/43 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Nov  7 01:14:40 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672c1480-1530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:d9:36:af:5e:a8:f5:0a:93:33:df:60:56:
                    3e:c7:34:21:ec:6b:d4:5a:c8:9f:90:ef:4f:75:9d:
                    a0:90:3a:03:16:17:ba:22:2a:2c:b4:17:dd:43:c1:
                    df:51:0c:02:f1:c5:3d:8e:e2:78:9c:aa:a8:27:dd:
                    1f:fb:f2:5a:dc:c6:8f:45:cc:0a:d6:51:8c:3b:b8:
                    4a:a7:83:dd:b8:fa:de:d5:27:4b:f5:e2:16:94:71:
                    76:4f:a7:e2:99:b4:f4:fc:ba:45:54:13:4b:4c:8c:
                    09:78:e6:08:dc:38:4f:d2:4d:7b:c6:3e:4c:de:05:
                    9a:99:cf:b3:00:bd:fc:22:02:60:d1:b9:96:18:f2:
                    1e:29:e6:ce:b7:71:d0:db:b9:3f:80:42:0b:f1:9c:
                    de:aa:0d:be:a7:c8:27:99:a5:fd:53:76:6a:ad:aa:
                    de:50:d4:b7:fa:89:0c:17:58:ce:70:c6:75:2e:4b:
                    8f:c6:60:cf:0e:29:b5:c6:54:1d:b1:e2:b5:c1:08:
                    87:c9:cd:9e:5c:bf:3e:1e:d5:b6:06:0c:fd:74:7b:
                    33:98:e7:fa:e7:cb:7f:80:41:e3:24:8b:fe:17:0a:
                    ab:a0:f4:73:33:a4:f1:d0:ab:0f:c4:a0:7e:ef:c4:
                    b5:3d:90:32:41:76:15:26:c1:c2:56:19:30:f9:df:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:27:85:E0:1E:EF:AC:B6:CC:91:4A:83:C0:B2:70:F9:02:F2:88:A0
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01F6431CDD3711EC9EF48256C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:30c0:100::/43

    Signature Algorithm: sha256WithRSAEncryption
         77:02:f0:a0:47:a2:7b:53:e9:80:32:8b:81:f8:de:cd:de:42:
         9f:25:09:50:19:de:12:bb:02:55:5c:bf:84:be:21:4d:b1:7b:
         3f:71:b7:3b:dc:84:d8:96:4e:58:c2:87:c8:9d:ff:0b:7f:4d:
         75:88:0b:30:57:73:d9:35:65:e4:a0:26:4b:1a:0a:59:10:24:
         5a:53:78:1a:14:ca:53:73:8c:fe:5c:ec:e2:be:fd:17:ca:9b:
         c5:ed:fc:eb:63:af:6c:a1:0b:86:a4:9b:17:2e:72:7c:22:a9:
         5e:a5:0a:f6:73:6b:15:c9:f4:c0:1b:ee:e9:b7:f3:de:59:d0:
         86:7d:06:12:2b:15:e9:36:7f:26:65:82:06:e4:a1:6c:23:db:
         7e:a0:b1:73:0a:1c:12:7f:21:e2:44:18:0f:aa:4b:35:ab:29:
         b6:b2:34:05:92:04:aa:76:86:ac:bf:e1:d3:38:14:e4:48:10:
         51:5c:f8:c2:1f:5f:f7:be:3f:1f:0b:46:b4:19:32:3d:3c:d8:
         97:e3:9a:ed:e4:33:dd:26:e5:b3:f5:4d:81:db:27:54:be:d5:
         ae:3e:97:3b:87:49:c8:83:48:15:de:c9:f2:c3:8e:1b:19:d0:
         83:fd:9b:fa:d7:d8:66:76:e2:a1:f9:6a:26:28:34:c4:3e:57:
         4a:a0:50:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:28 2024 by rpki-client on console-fra.rpki-client.org