Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7362D03E37C511EFBA013C34C4F9AE02.roa
File:                     7362D03E37C511EFBA013C34C4F9AE02.roa (raw, json)
Hash identifier:          9qnuOOqog1w0/6Ft0fo80AwEmtyxbUWJdcXWk0vjBP0=
Subject key identifier:   01:C5:E8:AB:E2:BB:34:CF:98:3F:58:CE:07:7F:43:21:D8:BB:5D:32
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       0103
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7362D03E37C511EFBA013C34C4F9AE02.roa
Signing time:             Sat 03 Aug 2024 05:55:46 +0000
ROA not before:           Sat 03 Aug 2024 05:55:46 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     214633
IP address blocks:        2401:b60:300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Aug  3 05:55:46 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66adc661-4f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:85:05:53:91:b6:c1:bf:3e:1a:e5:c1:aa:
                    cf:d8:72:67:b4:17:e6:71:ac:28:a3:12:a0:95:a7:
                    cd:82:af:37:4a:e9:df:68:7c:be:9b:81:3a:fc:ac:
                    02:15:6e:24:66:ab:50:8d:4b:ae:c2:d9:4e:4a:9a:
                    88:b4:19:c6:56:7c:bd:79:c0:b3:48:3d:45:8b:3e:
                    b5:10:10:44:84:57:e3:15:01:0a:46:78:61:18:c9:
                    92:23:12:09:7b:e5:d2:45:a9:69:68:17:04:c7:bf:
                    e7:bb:9b:1c:a0:53:49:4e:57:38:fd:b8:be:59:47:
                    c2:6d:20:87:af:46:1b:e7:da:15:ff:9d:b9:e9:6e:
                    dc:78:37:c4:1f:7f:fe:3e:2d:b2:6a:0c:53:d0:d7:
                    20:30:b7:f5:ab:e4:e0:02:e3:66:ce:de:e9:44:c3:
                    1d:5c:95:bf:98:5c:62:1e:72:ef:04:86:f9:f2:0a:
                    e3:fc:54:e0:f8:bf:99:5c:01:40:b6:72:80:cc:23:
                    be:f4:05:0c:d8:69:82:7a:c1:5c:c4:4e:9b:dd:9b:
                    60:03:b5:bf:ef:e4:c5:41:c3:12:73:37:1a:25:4f:
                    50:ed:fb:14:99:39:2d:d4:f1:df:7b:09:5f:7f:8a:
                    76:64:f6:45:60:dd:0e:bb:41:55:0b:47:4e:b0:c9:
                    0d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C5:E8:AB:E2:BB:34:CF:98:3F:58:CE:07:7F:43:21:D8:BB:5D:32
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7362D03E37C511EFBA013C34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:08:2d:f6:d4:17:cb:1e:e0:62:37:4a:24:e4:fc:56:60:12:
         68:70:bc:54:de:d3:52:5a:81:49:4d:ce:7f:6c:06:2f:0f:ee:
         6e:ba:d1:ec:1f:87:c9:92:10:ba:6b:5f:8d:24:46:67:07:53:
         f4:8e:95:54:20:e1:9d:be:1c:9d:d0:97:c0:0b:25:ad:c8:59:
         31:b0:f6:43:ab:28:fa:2e:6c:ad:90:52:2c:61:9a:10:c8:1c:
         3b:d1:48:94:14:d4:ad:a1:82:2b:38:37:60:de:df:9a:b5:d8:
         49:2e:96:64:0a:52:4e:3e:39:b1:6c:54:6a:fb:cb:c1:e8:b4:
         38:ec:90:c6:85:35:77:47:06:d0:51:4f:c8:52:0d:f9:bb:3c:
         81:f8:ca:ff:19:e3:5b:bf:a0:51:07:9c:06:79:cd:3c:24:90:
         ff:d6:5b:c2:06:66:ea:9e:16:3b:07:f9:e6:6c:5e:45:7a:b2:
         5f:b9:96:a9:6b:32:38:e4:96:8f:13:87:5f:1a:b1:b9:70:d5:
         41:44:0e:ba:96:02:b1:1a:d5:52:cd:c1:d6:59:a8:85:e1:06:
         62:6a:fc:88:2f:99:d4:b8:29:7b:f2:49:13:d2:b8:72:8b:be:
         7c:c6:0c:e8:de:37:ca:fa:0d:ee:84:37:02:e0:91:14:75:42:
         aa:9f:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:08 2024 by rpki-client on console-fra.rpki-client.org