Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/9ABFC32C94F811EF92676015C4F9AE02.roa
File:                     9ABFC32C94F811EF92676015C4F9AE02.roa (raw, json)
Hash identifier:          gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=
Subject key identifier:   03:A9:6B:78:BA:70:46:07:88:86:17:26:37:C9:22:C9:D4:3B:31:32
Certificate issuer:       /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial:       03
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/9ABFC32C94F811EF92676015C4F9AE02.roa
Signing time:             Mon 28 Oct 2024 06:48:14 +0000
ROA not before:           Mon 28 Oct 2024 06:48:14 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     153379
IP address blocks:        2001:df4:82c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
        Validity
            Not Before: Oct 28 06:48:14 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=671f33ae-b777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:15:35:c9:62:8f:f3:74:aa:3c:fa:1f:c5:
                    91:0c:ef:3f:65:6d:ac:66:23:20:bb:52:d6:5f:9f:
                    4e:a9:29:59:04:0d:67:b8:21:bc:c5:27:57:d4:aa:
                    06:36:71:6a:e2:ab:b4:67:92:01:40:3f:92:b5:a5:
                    b6:bc:2a:18:c2:50:0c:5d:26:88:32:53:6f:e5:1d:
                    4f:39:2e:49:57:13:08:3d:73:db:89:18:83:48:fc:
                    e0:6a:1a:af:3b:96:c7:f4:65:d3:76:c2:9a:fe:9f:
                    e0:d7:5b:44:19:e0:1c:da:67:a8:95:a7:f0:f5:b0:
                    69:3d:1e:8b:2d:e9:c0:83:a5:6c:c3:b4:27:33:40:
                    eb:ee:ae:ec:f5:13:88:73:fb:8c:de:8c:9a:98:2f:
                    cf:5a:73:1a:23:08:30:87:eb:9c:79:ba:44:53:63:
                    f6:27:f1:e2:0f:37:98:72:6d:10:00:4b:b0:6a:37:
                    dc:9a:4c:72:ca:dc:9d:08:70:85:24:d6:51:36:d6:
                    44:ec:37:9d:1d:39:01:c5:86:57:a0:77:27:e8:ab:
                    69:74:7a:98:89:48:24:40:d9:7a:51:0b:b2:c2:75:
                    fa:7d:34:bb:22:d3:18:a1:2a:ed:2a:26:3e:53:2c:
                    04:9f:86:55:2e:89:1a:29:e3:0f:13:31:45:f3:44:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:6B:78:BA:70:46:07:88:86:17:26:37:C9:22:C9:D4:3B:31:32
            X509v3 Authority Key Identifier:
                keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/9ABFC32C94F811EF92676015C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:82c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:8e:f4:8f:f8:54:84:3a:4c:a2:e3:0d:6b:73:38:47:c8:
         79:97:31:6b:6b:e1:23:11:14:1a:44:14:c5:22:91:ee:42:a0:
         6f:4c:f8:48:cc:fa:de:11:2b:78:14:24:e0:01:74:c0:20:a4:
         48:86:d9:2d:3f:36:57:e7:78:c5:46:37:a6:85:74:ab:2e:f6:
         eb:86:0d:34:04:75:7c:87:df:e6:eb:9f:51:21:fa:a4:83:fe:
         b0:86:e3:b8:aa:79:75:ad:db:5d:ac:41:e3:03:af:51:aa:5f:
         c8:6b:45:2d:84:0c:a6:35:24:3e:6e:2f:63:54:10:11:e5:04:
         82:dc:1d:9e:1a:51:68:98:44:fe:84:1c:a4:c5:a7:75:13:1e:
         2f:0b:1c:b3:c6:07:ee:af:f0:62:43:34:0f:a6:8c:0c:ff:cd:
         67:d3:c8:63:a3:b3:c7:dd:9e:37:de:0c:b0:62:23:1f:6b:eb:
         81:45:1a:41:db:fd:60:09:68:93:d8:01:2c:1e:71:5e:09:11:
         3e:53:53:48:09:d0:d9:1d:55:ac:62:8a:82:e2:74:1b:77:e2:
         e6:0d:5b:01:44:ea:7f:5b:76:04:5f:5d:b5:24:1b:1f:1f:4d:
         ea:f3:6a:9d:11:2d:75:1d:b5:ad:8c:7e:2a:a6:02:e7:80:34:
         96:fd:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org