Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/36F318D0890A11EE9F4C014DC4F9AE02.roa
File:                     36F318D0890A11EE9F4C014DC4F9AE02.roa (raw, json)
Hash identifier:          K06objCZTkF4R2m4Es3RoZwatUsJt3KTozD/Y+CKlGA=
Subject key identifier:   3C:F5:8D:94:C5:DF:27:08:3D:CC:87:0A:33:0E:46:69:5C:46:58:F0
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       05E9
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/36F318D0890A11EE9F4C014DC4F9AE02.roa
Signing time:             Mon 03 Jun 2024 01:04:26 +0000
ROA not before:           Mon 03 Jun 2024 01:04:26 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     140543
IP address blocks:        2405:f9c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Jun  3 01:04:26 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d169a-bf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:6f:e4:62:e4:9a:28:4f:18:ff:e8:88:8a:
                    e0:e3:97:a5:05:b9:be:2a:ca:c5:e0:e1:db:79:91:
                    d8:83:88:1c:93:24:aa:45:d2:d8:49:bc:ba:63:f1:
                    d4:27:19:ae:32:94:11:6d:a7:0d:aa:f6:c4:38:eb:
                    2d:cf:9a:59:a1:1e:0c:16:c0:7e:df:90:b9:dc:c9:
                    5c:45:cd:ca:ec:4b:46:a8:fc:fe:a4:05:48:c3:b3:
                    f1:e7:31:f5:ac:b4:09:59:03:4f:63:ad:b2:24:b9:
                    71:58:ff:3f:29:fe:24:12:3a:51:31:9b:7e:7d:de:
                    5f:66:76:42:12:2a:40:73:b5:e8:e4:e0:65:ed:00:
                    32:03:e7:9a:6f:bb:f2:08:6b:58:ff:f5:5f:2e:2b:
                    cf:d2:82:bf:d2:b8:9f:e5:76:cf:70:8e:f6:aa:43:
                    45:9a:33:00:a8:94:33:ea:01:16:52:c1:17:d0:dc:
                    97:c9:42:b6:8c:6e:de:ba:b4:b0:f3:6f:99:2a:24:
                    26:ec:4c:63:2c:a2:33:60:06:a7:06:37:98:52:39:
                    8d:0a:a0:25:5b:94:7d:b8:80:3d:52:d4:28:18:91:
                    f7:0b:be:de:2f:e2:88:d2:1f:7c:be:c2:8a:ef:a2:
                    fc:06:25:54:65:cb:ea:f6:5f:89:fc:ce:ec:e2:89:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F5:8D:94:C5:DF:27:08:3D:CC:87:0A:33:0E:46:69:5C:46:58:F0
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/36F318D0890A11EE9F4C014DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:f9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:67:68:14:53:1f:80:9c:5f:26:00:75:04:e0:87:6a:5c:a3:
         a3:5e:d1:c1:b8:25:63:d9:fc:47:42:ed:a7:bf:0d:25:14:68:
         39:a7:e8:f3:31:d2:fd:8d:10:a2:d5:da:e8:3e:5e:f3:8b:9b:
         1f:db:ba:2d:7d:99:a5:9c:d7:0e:b9:0f:69:15:ac:72:f1:dc:
         83:d4:54:39:40:a6:29:4a:01:0b:84:a9:cf:54:69:9f:ec:54:
         9b:23:75:d3:3f:5b:96:48:64:9e:c3:99:ee:4c:ad:7e:8d:28:
         50:be:f8:5e:42:90:d9:77:7d:08:d5:11:6f:d6:1f:c7:6e:51:
         7e:47:f1:87:3a:46:93:dc:bf:4f:2d:ae:f3:21:b9:57:32:8b:
         9e:fb:d3:3b:79:2d:68:2c:c9:57:a2:37:66:1f:49:2b:4d:4f:
         92:82:c0:20:f7:14:c5:77:bd:8b:51:ba:53:8b:5d:74:7f:1d:
         3b:7a:9c:a4:88:ef:90:ec:34:1f:b6:63:3d:95:4f:68:89:fa:
         89:1e:f6:6b:c7:51:ca:29:fd:c2:04:d0:e8:1a:72:74:0b:6d:
         34:b4:38:9a:89:34:1e:45:13:00:e1:50:b5:d8:02:db:db:46:
         ef:c3:fa:19:3f:be:3b:7a:82:b8:c9:c6:4e:d8:0e:ab:00:0f:
         50:79:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:56:02 2024 by rpki-client on console-ams.rpki-client.org