Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7F0CE9E8DF1011ECA2548C86C4F9AE02.roa
File:                     7F0CE9E8DF1011ECA2548C86C4F9AE02.roa (raw, json)
Hash identifier:          aNkixgMjnov5nMP39xpXphIKhNrnAUO4zqDGCoJwReE=
Subject key identifier:   86:52:76:CB:9A:61:E9:D2:20:FD:4D:5F:09:1C:0B:2D:8E:99:94:FC
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0397
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7F0CE9E8DF1011ECA2548C86C4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:25 +0000
ROA not before:           Thu 27 Jul 2023 02:04:25 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     55868
IP address blocks:        58.137.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:25 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d0a8-7afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:54:3c:66:db:14:52:26:ec:7e:46:b7:a3:
                    d9:f7:5a:61:34:5a:3d:1c:47:36:97:ba:39:97:b7:
                    16:6b:7e:89:63:27:3a:2f:fd:12:fb:30:0c:1d:1f:
                    2b:b2:6e:a6:7d:0b:8b:ad:ee:57:2e:8c:b4:56:d9:
                    13:f3:2f:07:10:f6:77:e5:9a:c4:14:c8:95:fe:71:
                    05:af:48:be:0b:02:b4:a5:78:19:9c:c7:50:3c:5e:
                    de:0d:b1:9e:55:93:c4:ad:5e:c6:32:22:4f:2f:5a:
                    81:87:c8:48:ea:06:4f:9b:da:f2:1c:10:6b:9b:6b:
                    9f:c2:c2:d6:f9:ad:17:14:55:55:31:a8:b0:15:58:
                    ea:00:a5:2d:e6:f4:c9:9f:b8:2a:db:db:4a:de:4a:
                    41:a0:aa:e0:50:a9:ea:7a:12:da:63:8c:2c:4f:08:
                    78:f2:a8:0e:06:aa:94:b5:b4:f9:16:97:71:d4:60:
                    17:36:f8:4b:77:a8:ee:21:39:83:cf:bb:eb:94:7f:
                    5c:f5:ff:75:f4:45:d6:14:ad:6d:3b:20:8f:0f:53:
                    5f:90:85:61:77:de:7c:77:bf:20:4b:6c:41:28:39:
                    d0:53:cf:fa:2a:b0:e3:91:60:45:14:da:51:23:40:
                    c2:b9:0e:7b:c2:6a:4a:6d:56:0b:19:3f:ec:80:28:
                    f3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:52:76:CB:9A:61:E9:D2:20:FD:4D:5F:09:1C:0B:2D:8E:99:94:FC
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7F0CE9E8DF1011ECA2548C86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:02:7b:21:23:8f:60:9c:cd:d8:77:ea:c3:1a:94:70:39:
         92:67:79:3e:42:b0:64:a8:ea:ed:ab:1a:3c:2b:54:42:aa:75:
         10:18:77:18:1f:9b:58:8b:c1:db:41:e2:72:a3:10:88:2d:ed:
         c6:a7:d1:50:69:b5:c5:f6:69:49:bc:37:7d:fe:13:1e:55:ee:
         48:b2:1c:2f:d2:90:93:87:02:80:35:33:0c:28:e3:a8:e7:a9:
         4d:ee:4a:6c:9d:b4:1f:5a:cb:61:a1:0d:21:da:5a:00:df:50:
         3a:79:4f:ee:44:e8:cc:25:16:0c:8f:3f:21:f0:b4:d6:ce:f7:
         ae:6c:af:1d:f0:06:60:58:59:cc:ff:93:61:75:64:d7:b1:9b:
         11:5e:9a:44:e3:b8:39:94:14:66:51:94:3a:48:43:c1:90:9e:
         1e:61:7d:4a:0d:49:39:05:6e:4c:68:47:a7:41:f7:47:b2:fb:
         5e:23:99:f3:c2:13:33:f0:22:23:6f:36:02:f2:81:a9:b8:e6:
         bc:8c:2f:24:66:49:9a:36:1c:72:0f:87:45:17:61:fa:b9:a8:
         68:36:22:e2:0c:d7:e6:dc:90:8b:fa:75:6c:85:9c:a6:c8:0f:
         af:f3:7e:83:37:7d:e7:1a:7e:c8:b7:ab:e2:c1:5b:15:f4:60:
         27:30:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:00 2024 by rpki-client on console-fra.rpki-client.org