Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/5725C1363AB711EDBB6FC759C4F9AE02.roa
File:                     5725C1363AB711EDBB6FC759C4F9AE02.roa (raw, json)
Hash identifier:          rYkj+cqdavEEEVOzm5zAB0UsViAMrUymh+0XUvHgo5s=
Subject key identifier:   26:58:2A:AB:99:DB:64:84:20:65:AE:2B:7B:05:AA:05:95:81:E8:80
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       0244
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/5725C1363AB711EDBB6FC759C4F9AE02.roa
Signing time:             Thu 22 Feb 2024 21:29:44 +0000
ROA not before:           Thu 22 Feb 2024 21:29:44 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     209242
IP address blocks:        2407:30c0:182::/48 maxlen: 48
                          2407:30c0:183::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 04:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Feb 22 21:29:44 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65d7bcc8-e8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:41:1c:74:fd:88:94:9d:37:75:f0:a8:97:
                    cb:7b:0c:b5:7d:c8:d0:c1:f6:97:73:69:51:2b:ec:
                    aa:74:ce:96:3b:c6:ab:cb:b2:c5:95:40:ef:32:e9:
                    0a:3f:da:94:d1:66:6f:f1:1c:a7:b7:bd:99:42:55:
                    43:80:bf:b1:ff:ae:4e:20:75:6a:cd:4b:3f:ee:1c:
                    07:41:da:2d:36:dd:18:05:63:ac:c9:2d:82:16:90:
                    83:2f:3c:af:1b:c9:1d:86:c3:eb:d0:d8:79:88:29:
                    27:40:bc:03:20:9b:2b:2b:6a:1d:73:4b:14:a9:59:
                    cd:2f:aa:31:c1:8a:20:dc:51:41:c6:2b:01:dc:df:
                    b9:5d:81:52:c6:61:dd:8b:35:2b:35:1b:f4:7f:8b:
                    bb:47:bb:44:13:52:20:48:95:1d:04:cf:af:ec:30:
                    41:16:42:dd:38:d4:d2:e6:04:5e:b7:c1:ca:65:aa:
                    d7:7b:a8:e3:11:05:61:1e:92:c4:cf:58:f6:4f:2e:
                    64:4f:71:4b:5b:b6:e6:f3:72:b8:d1:a1:21:5f:f4:
                    f0:44:67:ed:cf:42:ff:40:05:e0:c1:b1:53:8a:20:
                    62:70:e3:7d:ed:a9:17:71:ac:ef:54:78:49:08:a6:
                    26:7c:50:24:93:84:43:74:60:c2:1b:35:f6:5a:ec:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:58:2A:AB:99:DB:64:84:20:65:AE:2B:7B:05:AA:05:95:81:E8:80
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/5725C1363AB711EDBB6FC759C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:30c0:182::/47

    Signature Algorithm: sha256WithRSAEncryption
         aa:4b:1b:91:c7:a3:57:44:a2:d7:86:b1:4e:dc:ae:c9:f4:59:
         5c:c1:61:98:14:bd:9a:6e:76:78:33:35:dc:0c:43:7a:e2:18:
         21:33:28:59:6e:74:e1:0d:59:6c:41:17:1e:6b:5e:12:61:d3:
         d2:1c:8f:21:1b:cc:69:72:4f:f1:ec:60:aa:f1:37:84:a3:a3:
         2e:13:86:ce:1a:a1:8e:8d:93:69:32:90:34:45:1f:ff:8c:15:
         37:ec:01:ed:50:db:4b:09:79:6a:98:98:98:bb:49:97:8d:8e:
         d0:d4:b7:6e:9c:b8:41:b8:da:8f:8e:00:d6:ef:c1:70:80:f1:
         ae:91:ec:1b:a4:9b:79:f5:2f:6e:fa:c7:96:d9:2b:08:ff:c1:
         e2:b2:df:0c:8e:0a:b7:55:bd:15:3e:85:56:f9:c0:3e:98:b7:
         79:44:1b:e4:93:d5:3a:b6:7f:f8:6c:f6:4f:cd:b3:fc:98:d3:
         bb:dc:a0:45:e9:a7:5d:ea:1f:b3:89:55:7a:e2:cd:1b:e4:45:
         c7:da:12:b7:7a:64:85:e1:2b:e1:87:cf:cc:73:79:85:b3:7b:
         99:34:6e:af:0f:6d:f3:35:63:11:64:ae:df:38:91:51:4a:8f:
         e0:cc:2c:46:43:84:5f:3a:6d:af:bf:31:a7:38:5f:38:4b:26:
         35:ec:e7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:34:53 2024 by rpki-client on console-fra.rpki-client.org