Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/64E2B628BE4911EE897F291BC4F9AE02.roa
File:                     64E2B628BE4911EE897F291BC4F9AE02.roa (raw, json)
Hash identifier:          oj9MA2Xl79Ulu/1U7XExVD59vw2GZhJkFrHTogIDTCg=
Subject key identifier:   30:33:C3:76:A0:7E:ED:3F:7E:33:71:D5:A5:4A:1E:67:D5:9C:FF:F1
Certificate issuer:       /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial:       352C
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/64E2B628BE4911EE897F291BC4F9AE02.roa
Signing time:             Thu 10 Apr 2025 15:20:55 +0000
ROA not before:           Thu 10 Apr 2025 15:20:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38719
IP address blocks:        2404:3800:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13612 (0x352c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
        Validity
            Not Before: Apr 10 15:20:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f7e1d6-dbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:2a:2a:b7:8c:c2:d5:ca:99:81:94:8f:5c:
                    30:b3:20:c2:1a:7a:c3:19:80:02:40:ba:da:41:0d:
                    70:6b:02:42:bb:b8:02:36:1b:79:6b:06:87:4f:ca:
                    ed:bc:d1:cc:54:b9:1d:f4:4e:1c:2f:f5:f3:d7:f1:
                    a3:d6:b1:34:29:14:a0:27:9c:8e:8d:b2:c3:69:fd:
                    f6:08:30:95:71:9a:74:e5:07:4c:15:f0:65:31:84:
                    bc:6f:0b:4c:59:13:97:bd:6e:78:68:af:30:a1:9d:
                    ae:5b:5d:53:42:33:48:68:42:b8:09:94:be:b6:8b:
                    9e:4d:63:09:26:b2:b4:a8:f4:31:1d:f0:10:c7:21:
                    92:81:ec:64:be:f0:a2:a9:88:96:d0:0d:31:66:c8:
                    f5:e9:0b:b4:f8:9f:44:c7:1c:a2:03:06:e3:f2:79:
                    e4:b9:40:d6:3f:36:19:c1:47:b4:fd:a1:32:33:69:
                    2c:15:76:74:db:16:c5:1d:c4:37:94:a5:5f:2c:7f:
                    df:e4:98:f1:bf:d8:e5:22:49:78:bb:26:f5:63:a9:
                    a7:fd:61:76:61:87:b5:72:24:dc:80:1a:ee:d2:4f:
                    7b:9c:b9:1b:53:df:9f:f6:08:d0:7e:b2:c9:bb:99:
                    18:2c:19:58:3a:72:da:87:84:37:64:35:22:a3:c4:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:C3:76:A0:7E:ED:3F:7E:33:71:D5:A5:4A:1E:67:D5:9C:FF:F1
            X509v3 Authority Key Identifier:
                keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/64E2B628BE4911EE897F291BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3800:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:d4:c9:2d:7e:28:67:14:d8:b3:7b:78:da:c8:4d:52:fe:
         54:58:8e:5d:ed:67:65:0c:4f:62:da:fb:c4:2e:ab:43:14:0a:
         ac:3b:ff:3b:f2:7f:30:bb:06:b5:66:89:20:30:5d:ac:8d:60:
         71:47:18:20:10:58:47:de:7a:61:0e:3c:57:e6:c7:b4:83:1e:
         3a:1a:e7:b7:32:cb:2c:b4:b8:9d:4f:74:55:21:e5:86:5e:17:
         1d:f6:2c:c6:10:ad:04:e7:50:14:96:1a:32:e2:1d:a4:53:d6:
         61:b1:28:14:b5:b7:2b:8f:7e:c0:fa:c9:0e:18:a8:49:98:ce:
         d3:60:0e:75:ab:46:7c:14:db:f3:f0:4b:2a:07:c5:00:32:73:
         9f:56:a0:c2:31:12:fc:2e:28:6c:3d:5e:b1:1e:37:86:74:ba:
         19:c7:c9:9f:b0:bf:f0:80:55:7a:2b:d2:9c:04:a7:2e:9e:9d:
         d5:1a:4e:49:17:70:8f:4f:77:0f:d5:82:1e:04:f6:cf:32:7e:
         47:fb:59:98:7c:de:dc:e3:0a:d2:50:57:6a:b8:58:e6:c9:38:
         34:67:29:b6:60:8d:fa:d5:ac:88:ad:f6:0b:6e:59:f4:4e:e5:
         b5:82:b6:ed:bd:0c:b3:28:00:9c:03:bc:99:24:53:f3:fc:bd:
         63:44:f2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:20:31 2025 by rpki-client on console.sobornost.net