Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C7052DC6DF6C11ECB4B9B26AC4F9AE02.roa
File:                     C7052DC6DF6C11ECB4B9B26AC4F9AE02.roa (raw, json)
Hash identifier:          9T+LG0kEDfHRsT2q7FvAj00BbdnLX7VV5HmD7NLxsqk=
Subject key identifier:   DC:B0:01:1A:C2:9F:29:81:0A:40:69:92:EA:EB:41:F4:10:9F:8C:68
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0388
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C7052DC6DF6C11ECB4B9B26AC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:10 +0000
ROA not before:           Thu 27 Jul 2023 02:04:10 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38718
IP address blocks:        27.254.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:10 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d09a-c1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:cb:33:9c:ac:da:8a:08:a4:ef:9e:b6:14:
                    98:d7:d2:bd:0f:57:4c:e2:a3:8d:4c:b2:f2:68:86:
                    55:60:95:8b:87:89:e2:ec:4a:ea:d9:04:f1:06:30:
                    fb:41:d6:51:dc:f1:11:f6:8d:49:92:68:4c:3d:76:
                    ef:56:13:d2:7e:6a:be:3b:a4:d5:41:6b:e2:e9:0a:
                    22:34:82:a7:f8:02:fc:f8:01:e2:34:84:f6:96:8c:
                    30:6d:1a:cb:5e:3a:65:44:63:fb:9c:7b:26:55:9d:
                    a8:8d:7c:73:d4:61:62:72:e3:f4:ae:01:ce:5f:84:
                    9b:e3:61:2a:f6:ce:fd:25:e3:4e:9a:b7:d5:2b:b1:
                    1a:8e:fc:02:e9:02:7a:c5:26:ae:63:eb:a5:b7:b2:
                    16:f0:07:f7:ce:00:36:f3:04:32:3d:02:bb:0c:93:
                    d9:3a:3b:8f:fa:bf:fc:59:1e:9e:2c:8f:ee:06:4a:
                    ad:7a:97:64:2d:b3:47:36:f3:52:f3:a5:71:e8:92:
                    05:85:5f:b7:3c:1e:5a:2c:2d:c3:b4:26:f7:df:cd:
                    f3:bc:b3:87:d9:7c:dc:64:c5:dd:84:6c:6e:b7:2e:
                    e5:84:54:2f:a5:af:34:df:b0:2d:5a:84:76:f3:7b:
                    00:35:82:cf:a5:f4:86:55:6c:0a:37:e9:5b:a1:f1:
                    62:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B0:01:1A:C2:9F:29:81:0A:40:69:92:EA:EB:41:F4:10:9F:8C:68
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C7052DC6DF6C11ECB4B9B26AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f9:fa:6f:03:ab:93:f0:b0:6c:14:58:f9:e8:d0:39:11:8e:
         17:18:eb:fc:3d:59:6a:c5:9d:db:5a:c3:61:95:96:51:87:96:
         cf:87:3c:3e:c9:f9:f4:bb:c5:d0:c0:64:48:ed:20:29:4b:26:
         c1:d8:6b:d1:b4:b0:db:26:4f:b8:e0:ee:1a:2b:eb:ad:71:90:
         9d:ea:fd:cd:43:dd:5d:40:a8:43:f5:bd:9e:ce:fd:96:2b:b8:
         75:4a:7f:56:43:f9:c3:8e:2a:21:ae:9d:bf:ee:2e:3b:61:e4:
         2a:f3:49:ff:c9:c3:b5:b3:21:20:04:ac:78:66:a3:38:5f:29:
         cc:7b:11:39:b9:64:2e:01:7a:a8:d6:39:7d:77:74:55:89:94:
         cc:dc:f5:2f:73:44:38:74:13:ac:4c:b1:c6:46:23:9c:0b:72:
         41:98:b6:c9:fc:4b:27:a2:d6:1a:41:94:64:aa:1a:28:b0:a0:
         76:43:d6:08:c4:9e:86:81:fa:8b:34:2b:9c:43:23:83:79:1f:
         c8:5c:43:e1:7f:33:0a:c3:90:11:7f:de:66:84:bb:01:8f:94:
         63:b4:82:45:bc:76:6b:48:74:1c:b0:d1:62:db:80:82:a6:b6:
         9e:e7:60:5a:1d:bc:bf:d9:42:50:38:72:cc:1f:59:58:1d:38:
         1f:c5:ab:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 04:12:04 2024 by rpki-client on console-ams.rpki-client.org