Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/12702794577711ECB7FD0C6FC4F9AE02.roa
File:                     12702794577711ECB7FD0C6FC4F9AE02.roa (raw, json)
Hash identifier:          MaYbbHtjpLS1xFLxKLibRDfvViTN5yjw7d1U+zaG5ek=
Subject key identifier:   EB:9D:F3:E3:F1:9E:6D:3F:6E:FA:4F:B0:D6:2F:BF:AA:68:F4:58:09
Certificate issuer:       /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
Certificate serial:       02EF
Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/12702794577711ECB7FD0C6FC4F9AE02.roa
Signing time:             Sat 15 Jul 2023 01:22:00 +0000
ROA not before:           Sat 15 Jul 2023 01:22:00 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     18196
IP address blocks:        2400:3c20::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl
                          rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
        Validity
            Not Before: Jul 15 01:22:00 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64b1f4b8-acf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:22:30:44:44:10:24:f0:d6:0b:1c:71:b3:5a:
                    10:c7:c5:60:ea:77:e0:77:a2:0f:d3:60:62:1a:75:
                    b6:12:80:1c:24:93:74:88:40:77:50:f1:be:e4:bc:
                    9d:33:dd:02:6e:bb:5e:33:56:20:7d:b1:19:05:58:
                    af:c9:dc:da:b9:b6:9a:5b:9d:05:6a:36:64:3d:bc:
                    27:d6:13:fa:95:94:12:5c:62:c9:da:c9:22:9b:60:
                    9d:82:4c:9e:49:47:40:bd:5c:de:6b:fe:58:a2:3f:
                    34:dc:44:6a:2e:8a:76:b8:16:84:3f:06:db:ff:4f:
                    58:29:df:19:11:43:b8:5e:b7:cc:6e:78:b4:2f:07:
                    42:cb:f4:db:26:80:67:59:f1:36:3e:d3:38:3f:f9:
                    91:da:19:91:33:86:f7:97:db:1d:9d:49:53:9b:3a:
                    fd:ae:aa:9d:38:56:a4:75:23:89:0a:37:fb:fe:e9:
                    20:fb:40:0e:d1:83:49:85:b8:09:80:92:ac:d9:44:
                    4c:57:ab:f0:4e:39:9f:be:59:d2:ec:77:26:22:2c:
                    26:ee:a1:da:ee:6f:08:58:7d:23:7f:2a:c5:49:c8:
                    9b:ad:43:38:10:d0:8a:8c:f3:00:76:e4:80:17:ac:
                    c3:ac:ae:7c:91:e6:ac:9f:7b:1b:60:8c:86:27:0d:
                    d7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9D:F3:E3:F1:9E:6D:3F:6E:FA:4F:B0:D6:2F:BF:AA:68:F4:58:09
            X509v3 Authority Key Identifier:
                keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/12702794577711ECB7FD0C6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:a0:d7:92:ac:44:28:5c:ec:28:b2:e4:47:11:fe:b2:e8:c5:
         8f:6a:f1:43:8a:b4:41:63:3d:fc:5a:8a:2b:de:3c:d4:63:16:
         8f:02:83:80:9c:a7:f5:ed:ea:6a:fc:4b:af:fa:1c:fe:dc:ec:
         0d:f5:a8:8d:37:9a:9b:32:44:2b:34:ee:d5:84:53:97:af:c9:
         1a:d5:db:ff:8c:7f:8b:1f:16:ab:4e:69:85:2e:f8:40:9c:7a:
         bc:98:fa:3f:9e:ea:d2:a9:10:aa:bf:eb:3d:eb:e0:c9:4d:02:
         31:87:71:43:fe:18:ac:4e:53:07:0d:1c:76:a0:5e:c8:64:b8:
         b3:af:67:77:da:2d:c0:5e:ec:df:1b:54:99:9a:a0:8d:bf:b1:
         c9:04:80:dd:ab:34:86:36:e5:c5:e1:5c:f3:10:3f:df:79:68:
         d4:3f:46:a1:a0:5e:2f:61:57:95:11:5b:dd:ce:bd:6c:f7:7d:
         cd:d3:82:19:53:24:17:e6:67:d9:f9:53:71:09:67:50:88:57:
         80:bf:2c:73:31:e1:98:8b:bf:d8:25:0c:f0:2f:92:e7:05:d6:
         d0:81:be:d7:0e:bb:45:11:d5:f4:e1:ce:b0:de:17:15:60:66:
         24:da:22:11:57:50:8c:a5:07:21:ef:b7:30:0e:70:b5:79:ec:
         61:53:2d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:52:23 2024 by rpki-client on console-ams.rpki-client.org