Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/D347187A7E9511ECA9132A0BC4F9AE02.roa
File:                     D347187A7E9511ECA9132A0BC4F9AE02.roa (raw, json)
Hash identifier:          4i/7LdEU/T1ZHgOr95PKDKNxvTm/ZtFlmP55xUeSbB0=
Subject key identifier:   6D:01:62:E6:BE:11:8B:46:7C:FC:5B:68:AA:8C:DA:D9:8F:0A:E9:26
Certificate issuer:       /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Certificate serial:       342A
Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/D347187A7E9511ECA9132A0BC4F9AE02.roa
Signing time:             Fri 02 Aug 2024 15:30:59 +0000
ROA not before:           Fri 02 Aug 2024 15:30:59 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     15133
IP address blocks:        2404:b300:33:1::/64 maxlen: 64
                          2404:b300:34::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13354 (0x342a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
        Validity
            Not Before: Aug  2 15:30:59 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66acfbb3-8057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:62:bb:ec:12:bb:61:cc:26:76:87:2b:4d:
                    1f:3d:42:ae:e5:13:9f:a3:5f:fa:fc:de:b7:ca:a6:
                    05:2e:ab:a2:c4:7e:6d:a0:1b:c7:b7:67:07:4e:9d:
                    b1:f8:c5:86:71:a2:a3:ec:da:74:a0:2d:b5:6e:2b:
                    95:f2:45:11:90:06:a9:8c:2a:1d:2b:99:18:1d:02:
                    03:2d:ae:77:a4:0e:3b:dd:8d:71:e7:d5:3f:75:f2:
                    b8:88:9a:57:d6:09:19:62:fb:bf:d6:76:d3:6d:84:
                    d4:99:76:67:ff:42:f9:66:7c:13:01:66:cc:18:46:
                    36:9a:7c:7f:e0:78:82:7e:c5:3f:9f:57:48:56:25:
                    68:e8:77:15:16:a8:bf:3d:6c:6b:62:af:c5:9c:ca:
                    fc:de:de:7c:e3:38:97:84:47:47:07:34:58:c2:d6:
                    81:5e:87:b6:31:95:54:3d:ee:1d:0a:82:27:7e:3d:
                    f7:e0:cb:55:f4:fd:f9:16:6d:82:81:12:08:4a:b3:
                    d1:ff:60:00:eb:b5:e8:19:09:95:f7:f4:77:2c:18:
                    6a:7a:7e:9e:1d:cf:f6:74:dd:f6:55:2a:4d:1d:a7:
                    33:f8:38:80:fa:41:43:9d:71:f1:48:4c:c2:76:63:
                    9c:d9:5e:bb:0d:66:27:41:f0:c1:f1:e2:98:67:ec:
                    4c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:01:62:E6:BE:11:8B:46:7C:FC:5B:68:AA:8C:DA:D9:8F:0A:E9:26
            X509v3 Authority Key Identifier:
                keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/D347187A7E9511ECA9132A0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:b300:33:1::/64
                  2404:b300:34::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:3f:00:d2:21:69:71:de:47:9a:da:24:f4:31:25:35:3d:
         34:27:4f:f9:f1:92:34:f8:cd:6f:d1:1a:06:7f:30:fb:c5:41:
         c9:d3:19:b7:fc:60:a5:3c:11:a9:6a:8b:d0:8c:9a:58:ce:d1:
         3b:22:ca:51:e0:5b:ad:96:4d:55:a9:4f:8c:de:2b:6c:60:17:
         d6:46:96:51:da:08:fe:03:6d:56:2f:b9:79:c5:33:c5:10:90:
         62:5e:7b:2a:f9:44:df:6e:ce:bc:9f:13:0e:10:fc:42:ae:2c:
         25:4f:07:4b:ad:8d:43:42:14:5c:a4:6e:a8:21:8d:45:85:8b:
         b4:55:90:c2:ad:c4:98:4f:58:96:78:29:bd:92:3b:2a:d8:d2:
         5e:1a:e6:44:05:0b:f8:ee:d8:1a:ef:75:67:5d:59:70:b9:1e:
         79:62:0d:1d:90:a3:6f:e4:c9:d7:74:82:29:21:74:3d:bb:6d:
         81:1d:a3:ee:d7:11:c8:30:08:d5:09:c6:fe:ce:5e:e4:3b:80:
         25:1c:7f:0f:b5:a1:53:6c:63:14:22:26:d7:fc:f8:4b:4d:e4:
         5e:83:7a:cf:03:bb:a2:d0:6f:58:d9:a7:e0:07:5e:49:93:6d:
         07:30:30:88:3c:bc:71:90:ac:62:54:4a:a4:f4:4c:50:fd:5f:
         b2:48:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:58 2024 by rpki-client on console-ams.rpki-client.org