Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B9CCEC5A72E411ED833AE326C4F9AE02.roa
File:                     B9CCEC5A72E411ED833AE326C4F9AE02.roa (raw, json)
Hash identifier:          NHN79Wm41KubiZEhgiInohGXuUSrK9jksrgtJrn4WhI=
Subject key identifier:   7A:82:04:15:28:C9:78:33:6F:72:CB:AC:3F:7C:B6:0D:A6:D6:39:DC
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       0587
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B9CCEC5A72E411ED833AE326C4F9AE02.roa
Signing time:             Mon 14 Aug 2023 23:20:32 +0000
ROA not before:           Mon 14 Aug 2023 23:20:32 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     140224
IP address blocks:        121.54.188.0/24 maxlen: 24
                          121.54.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jul 2024 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415 (0x587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Aug 14 23:20:32 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64dab6c0-e541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:b0:f1:18:a0:f0:88:85:b4:62:d9:82:b8:
                    65:6b:c9:42:ff:9f:17:aa:4c:2c:42:74:f8:8c:26:
                    4b:65:4d:f9:36:f4:c6:cd:02:0f:c5:fa:17:73:2c:
                    1c:54:6d:fe:1b:4f:69:fb:3d:e0:b3:96:2c:d1:47:
                    ca:ef:b3:75:9b:a7:5b:52:a1:cf:3b:5c:8f:19:75:
                    2b:b9:13:47:bf:d0:33:cf:64:39:71:64:1c:aa:10:
                    d7:17:1c:29:41:68:14:43:97:39:39:c4:fa:20:16:
                    86:bb:6d:46:69:05:83:0b:b3:8c:eb:d0:6d:97:26:
                    ca:f9:1e:af:6d:b5:5c:8a:6c:3a:d1:c5:d1:66:9b:
                    f8:c2:de:22:f8:3f:a0:18:6b:be:ac:c1:a7:19:27:
                    89:26:f6:dd:76:1f:f3:c4:45:ae:49:5c:f9:1b:67:
                    fa:ad:be:99:cc:0c:ef:9e:d9:a2:b8:e0:d6:b0:de:
                    9f:c1:89:8b:0c:25:de:55:83:71:75:9b:66:e5:ca:
                    3d:a7:7b:26:78:78:02:cb:92:cd:0e:28:fb:7d:29:
                    e2:7a:3e:2e:06:10:78:d4:93:b5:c8:9d:8b:45:b8:
                    3a:6c:7b:f9:f4:77:c4:2d:58:89:8a:de:24:57:bf:
                    fd:f0:7d:8a:c0:cd:36:46:fa:6a:8c:82:18:2d:95:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:82:04:15:28:C9:78:33:6F:72:CB:AC:3F:7C:B6:0D:A6:D6:39:DC
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B9CCEC5A72E411ED833AE326C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.54.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:2a:2c:0a:ee:2c:b0:db:d9:84:37:49:7c:01:68:b2:21:91:
         f8:79:de:1a:f9:00:6a:42:c5:4e:95:59:50:1e:02:f1:c7:18:
         2c:df:ae:44:2a:3f:02:07:6b:7e:d7:81:4a:ee:a6:2b:c2:37:
         41:2f:e3:f6:b1:29:73:27:61:0d:55:ab:f4:48:d6:cb:63:26:
         22:5d:78:ac:13:82:d9:cc:b4:1a:6c:04:a9:b0:da:8a:81:9d:
         75:91:24:98:98:05:2a:eb:8d:4f:81:af:aa:79:73:21:d9:dc:
         9b:4c:53:ae:c3:0c:ed:b1:fc:dc:37:82:c1:ec:29:ba:8b:b5:
         38:ef:c4:46:28:bc:e9:46:18:58:33:4e:c9:73:a2:f7:fd:a4:
         89:8f:46:7b:02:e2:c9:df:3e:4f:dd:af:e2:ef:b3:2d:3a:58:
         8f:ff:cb:73:90:30:34:27:6f:53:91:96:f0:ce:93:b4:6a:1a:
         aa:38:81:df:67:07:8e:4c:62:da:91:db:36:48:18:a6:dc:fa:
         6f:c9:54:eb:71:41:ad:ad:da:3e:b9:49:92:03:51:60:35:c0:
         fc:ef:3c:d6:bd:5c:1a:ca:9d:e8:9d:2c:a3:9b:e8:93:ac:23:
         c5:b7:66:b9:02:0d:19:f1:c6:df:e1:e1:5d:74:95:61:97:d1:
         84:e1:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 23:52:18 2024 by rpki-client on console-fra.rpki-client.org