Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E35133A60ED911EE8A4E0A23C4F9AE02.roa
File:                     E35133A60ED911EE8A4E0A23C4F9AE02.roa (raw, json)
Hash identifier:          SZ94xyHCrv/Ipee1oEJ6Jejttw8fUNtDqNDoawLEkQs=
Subject key identifier:   C2:BA:F1:D1:A4:BA:58:94:FD:0A:23:B1:C8:41:27:32:36:ED:42:EB
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       59
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E35133A60ED911EE8A4E0A23C4F9AE02.roa
Signing time:             Tue 31 Oct 2023 20:16:28 +0000
ROA not before:           Tue 31 Oct 2023 20:16:28 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     151407
IP address blocks:        2401:b60:6::/48 maxlen: 48
                          2401:b60:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 06:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Oct 31 20:16:28 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6541609b-485c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:ff:58:ee:20:75:c6:60:e1:22:40:ab:cc:
                    0d:13:a8:7c:50:20:bf:a4:89:29:0f:94:42:fa:eb:
                    54:21:4d:e2:ab:34:ad:ab:6c:ad:1c:f0:e2:f3:0a:
                    45:d1:c4:31:b4:4e:d1:2d:f9:ba:b7:e2:cd:03:87:
                    e1:96:71:b7:85:a2:44:97:36:60:65:27:8f:4c:0a:
                    e1:95:f0:fc:39:03:28:e3:c9:a8:33:10:a8:b5:26:
                    3e:26:48:91:cf:8f:9e:bd:3e:16:67:88:48:2d:57:
                    9a:24:17:c2:27:23:51:0f:8d:22:55:26:e6:03:f4:
                    4e:ab:54:4f:ea:d4:2c:d5:ef:81:25:97:77:94:95:
                    4b:d4:86:fc:ce:3d:8a:18:4a:d4:8c:91:48:88:11:
                    ee:6e:23:77:c3:a2:1c:8e:f1:c2:e6:35:25:46:80:
                    10:51:e0:d4:91:87:52:d4:56:86:3c:a5:e9:ee:0e:
                    1f:01:f5:cc:39:89:c7:d8:61:02:34:74:a3:1b:4c:
                    0e:1e:fa:06:d9:e9:5f:2c:0e:d2:6d:01:6b:d0:23:
                    eb:e7:cb:8d:e3:cf:26:8c:c3:dd:d5:17:34:87:fd:
                    b2:87:e5:f7:18:8a:b7:46:60:87:61:95:81:27:02:
                    f8:d9:f1:29:61:a4:86:cb:21:90:61:b4:81:58:9b:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BA:F1:D1:A4:BA:58:94:FD:0A:23:B1:C8:41:27:32:36:ED:42:EB
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E35133A60ED911EE8A4E0A23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:6::/48
                  2401:b60:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:ba:3e:81:67:a1:60:af:dc:70:b9:90:4a:3a:e0:bd:1b:ee:
         15:32:a2:ad:75:df:66:83:d4:68:1c:b4:b3:f9:92:a1:0c:2b:
         2e:2c:6a:9d:c6:d1:d5:66:92:36:a9:e2:c3:4d:eb:09:a4:27:
         b7:0a:52:b6:97:88:e9:a5:61:00:3f:9b:6d:d1:e8:a2:af:f4:
         f5:af:f6:31:2f:c1:6a:1e:56:d0:7b:84:3a:97:33:76:77:ce:
         a9:31:53:b1:61:de:23:c0:14:ae:74:38:b5:b2:5c:4b:e5:84:
         94:a5:b5:ee:ac:a4:69:ad:fe:a8:e9:8a:7e:72:d7:3d:ec:44:
         dd:f2:0b:56:6a:d2:11:44:da:c4:c9:bb:50:39:01:03:02:29:
         20:ea:e7:58:f2:70:b2:1f:41:00:01:9e:f2:d7:29:1e:76:af:
         44:c3:20:3a:2a:06:81:35:95:3b:67:23:fc:a3:ed:23:65:ed:
         89:5b:28:1b:2d:57:d3:d7:60:f5:0b:0d:8c:8b:b3:ac:aa:cb:
         bf:a6:bd:0b:e0:2b:95:d8:bf:1d:a3:14:09:86:42:fe:da:6d:
         6c:87:23:ce:8e:33:24:94:cc:dd:14:cf:5c:e9:1b:d5:b1:f9:
         52:04:f5:a8:be:80:db:95:f9:97:65:40:db:1f:b3:f6:23:a5:
         34:0e:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:02:35 2024 by rpki-client on console-ams.rpki-client.org