Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/4CBC0878AA5111ECBEC4A312C4F9AE02.roa
File:                     4CBC0878AA5111ECBEC4A312C4F9AE02.roa (raw, json)
Hash identifier:          ONWVqoqGDAvASJUxrEuLj1WiRORy7FeX/hp3qOHxxIM=
Subject key identifier:   A2:95:6C:C7:86:D3:76:6B:60:39:A5:32:C7:1A:DE:68:90:B3:56:A7
Certificate issuer:       /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial:       061E
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/4CBC0878AA5111ECBEC4A312C4F9AE02.roa
Signing time:             Fri 10 Nov 2023 23:31:36 +0000
ROA not before:           Fri 10 Nov 2023 23:31:36 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     24462
IP address blocks:        58.64.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
                          rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
        Validity
            Not Before: Nov 10 23:31:36 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654ebd57-cf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:7f:68:0d:cf:99:3d:a5:9b:7f:d4:dc:74:
                    3f:93:30:76:11:b2:66:03:ae:27:29:e1:dd:69:94:
                    31:cc:46:9f:53:f5:b2:38:8b:57:d7:fc:84:c4:7c:
                    bd:b3:88:07:f2:f9:5f:e6:dc:4f:b0:70:64:76:7f:
                    af:cd:23:3b:b5:a8:5e:75:e5:b9:6c:71:8c:11:9e:
                    3c:c4:06:c5:e7:55:d9:2e:24:83:a0:bf:18:32:78:
                    ad:93:f8:15:e1:02:29:55:47:04:66:ff:cc:0d:e2:
                    b4:18:19:a2:b8:53:b3:e4:3b:a0:21:6c:86:c3:45:
                    eb:9d:23:98:06:5a:84:f5:94:39:fe:95:93:44:f7:
                    2d:65:58:40:46:5c:00:e7:74:c3:29:c6:36:07:cb:
                    f5:7d:08:3f:6f:29:69:5d:53:c8:11:e3:e0:1d:d9:
                    82:06:e8:92:e0:0e:a2:f9:7c:29:24:83:32:c9:05:
                    f4:77:bc:ec:ba:ce:6d:70:0e:5b:52:6a:96:48:e3:
                    e1:65:a2:5e:45:8e:bc:4b:a0:ae:97:af:c3:6d:4c:
                    8c:0b:02:7e:d8:db:f5:85:6a:94:8c:8b:e3:39:d3:
                    99:dd:d7:fc:6c:f2:23:c6:d6:1e:48:dc:42:6d:a0:
                    21:c8:28:42:fb:33:1e:23:85:4c:d6:1a:70:fb:94:
                    02:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:95:6C:C7:86:D3:76:6B:60:39:A5:32:C7:1A:DE:68:90:B3:56:A7
            X509v3 Authority Key Identifier:
                keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/4CBC0878AA5111ECBEC4A312C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.64.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:1c:81:19:8e:f1:71:47:ab:19:f3:1c:9f:d8:1c:10:bf:
         ad:e9:00:49:3e:86:58:2c:de:f2:32:eb:6e:db:04:62:45:d4:
         07:2d:60:92:91:e8:96:88:d9:ee:ac:64:ca:73:90:26:a5:bc:
         84:d2:6a:f4:33:6e:a7:74:13:91:0d:02:5b:c7:4c:91:cc:7d:
         1d:1a:fc:f2:c6:54:5b:44:77:6b:d3:e4:ca:3e:67:c3:1b:b5:
         5d:7b:39:80:d7:97:64:9e:9c:07:18:70:f0:d4:77:33:56:54:
         ce:ba:45:53:cb:97:a4:2d:ac:84:55:3d:af:9e:d1:a5:5e:43:
         32:52:c8:93:06:06:e2:17:90:68:a3:39:0b:ae:25:64:43:b3:
         26:16:c2:ea:3f:7d:8b:6e:0a:47:4d:86:a8:cc:f0:68:ae:9d:
         b4:d2:dd:ae:b8:57:87:ed:1b:4d:a2:5c:49:2e:74:93:63:90:
         de:2d:92:2f:a0:a0:c0:2e:21:93:2e:30:1e:4a:39:4b:36:cf:
         b8:23:59:aa:9b:50:bd:d6:bc:03:73:0e:0f:85:25:50:a3:10:
         9a:72:83:59:14:1e:76:3b:1d:d3:7d:61:e1:6a:49:92:68:36:
         d8:64:30:d2:5a:08:67:0d:17:b8:aa:82:7e:05:cc:7f:9d:e3:
         ac:38:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:43 2024 by rpki-client on console-fra.rpki-client.org