Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A13BE9EE8EE911EE8698A64FC4F9AE02.roa
File:                     A13BE9EE8EE911EE8698A64FC4F9AE02.roa (raw, json)
Hash identifier:          hHbc7cTA2KdEpF5za4xbMWTUVJbBw621yFqdzXjnJ7Q=
Subject key identifier:   BD:DA:0C:8B:8A:00:2F:D6:1F:E8:3F:CE:62:08:1C:BA:B7:12:47:9C
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       6F
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A13BE9EE8EE911EE8698A64FC4F9AE02.roa
Signing time:             Wed 29 Nov 2023 19:00:58 +0000
ROA not before:           Wed 29 Nov 2023 19:00:58 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     61112
IP address blocks:        2401:b60:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Nov 29 19:00:58 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65678a6a-3195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:0e:67:e0:fe:e6:b6:5b:01:e8:bb:36:fd:
                    2c:13:bc:77:bd:08:d9:e5:09:c7:de:3e:98:f5:f3:
                    2d:12:03:b0:f1:19:6c:86:50:4d:35:0f:66:e3:57:
                    dc:50:d0:b5:f0:4d:18:ac:3e:ce:e2:4c:20:5b:7e:
                    67:04:15:a4:98:4b:78:33:a1:1f:97:ce:97:83:a5:
                    01:6d:54:07:27:23:b8:b5:eb:fb:64:47:21:95:9d:
                    5b:91:f2:b5:92:25:8d:09:e0:f9:dd:78:27:c3:6e:
                    14:68:85:25:9d:5d:d1:9a:fd:80:2d:cb:35:1f:8e:
                    a2:41:29:82:0e:0c:7e:1f:43:85:67:2e:42:d2:de:
                    02:b9:ea:99:00:da:8e:45:79:d8:28:79:0a:7f:e7:
                    68:97:74:59:8a:eb:a8:a2:3e:24:eb:00:f6:dc:96:
                    d6:48:fc:cc:3c:ed:9a:1e:d4:b3:12:a3:16:b8:07:
                    3f:82:1f:2b:2e:54:ab:48:0e:cb:53:75:4b:4c:83:
                    89:80:2e:a8:c0:c6:b5:e0:63:94:d7:0c:8e:be:37:
                    10:4b:81:89:84:fc:12:bf:fb:c7:6c:9e:a9:4f:2c:
                    a2:ae:af:4f:3e:18:db:b8:4e:c5:2d:f9:e7:82:55:
                    d6:12:50:32:15:65:52:42:a4:8f:22:12:0a:6f:95:
                    61:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DA:0C:8B:8A:00:2F:D6:1F:E8:3F:CE:62:08:1C:BA:B7:12:47:9C
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A13BE9EE8EE911EE8698A64FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:50:67:f9:6f:f3:9c:3f:fa:14:3d:7f:6f:91:b6:a3:d5:9d:
         40:72:ef:79:05:65:22:b0:2a:c6:20:74:22:a8:35:ce:ec:fd:
         0c:6c:a6:40:1b:34:3d:79:9c:88:60:55:54:31:f4:04:70:34:
         15:93:e4:4b:fe:01:07:b2:a0:70:c1:8c:46:e0:7b:f0:b9:fc:
         4f:7d:54:b1:ab:82:cd:b8:90:22:7a:3e:f9:bf:2d:03:82:70:
         bc:1f:b8:3a:1c:f7:f1:50:9c:44:46:f9:92:4f:e9:d8:8b:13:
         35:1a:dc:1a:09:74:48:07:3b:5a:f6:38:b0:9f:54:a1:00:e1:
         bd:96:3a:98:a2:31:76:7e:99:26:89:e8:de:60:50:9d:0e:38:
         47:c2:c6:ce:8a:d6:ad:00:96:37:09:78:28:c5:cd:63:9c:8b:
         86:cd:00:78:e0:cf:9c:5f:ef:33:d0:30:ff:4e:a2:40:ec:9d:
         91:a8:db:93:bd:b8:62:ae:f7:88:f3:1b:cc:1d:e4:1c:4d:9f:
         e5:0f:31:49:fe:c8:26:c3:f1:4e:26:f6:5e:7d:63:a4:47:78:
         06:af:f9:be:d8:88:83:4e:8c:d4:4d:d2:4c:1e:9f:48:94:3f:
         51:1d:ce:56:d8:ab:00:19:ca:ef:a7:97:ea:9e:f0:7f:1b:9f:
         39:3a:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org