Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/52644D4AA1E411E8AE269764C4F9AE02.roa
File:                     52644D4AA1E411E8AE269764C4F9AE02.roa (raw, json)
Hash identifier:          Be04HRXxlQOHAi5Hqa0Q5Q9UaKy0xvlmJcdd+zJ1GtQ=
Subject key identifier:   55:A6:F6:F2:FC:98:B8:83:7C:1D:27:B9:93:F2:80:60:60:12:1D:46
Certificate issuer:       /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial:       20E8
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/52644D4AA1E411E8AE269764C4F9AE02.roa
Signing time:             Thu 25 Jul 2024 15:05:09 +0000
ROA not before:           Thu 25 Jul 2024 15:05:08 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     135132
IP address blocks:        27.111.82.0/23 maxlen: 23
                          27.111.82.0/24 maxlen: 24
                          27.111.84.0/24 maxlen: 24
                          2402:cb40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
                          rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8424 (0x20e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
        Validity
            Not Before: Jul 25 15:05:08 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66a269a4-b324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:21:69:20:51:de:e3:d4:63:b5:92:9a:cd:
                    72:2d:aa:ed:06:06:73:2d:4d:85:6b:e0:97:48:be:
                    37:75:b1:55:64:2c:22:8b:94:f0:3a:6c:4c:23:3e:
                    99:b2:11:d4:30:f5:74:8d:a0:60:3f:c0:d0:c5:ec:
                    25:a8:67:0e:a1:ee:07:a7:4b:3c:ca:c6:17:cb:0d:
                    7b:fb:34:bd:bb:e9:42:34:9d:f3:d7:0f:b1:9e:8c:
                    6c:45:ab:f8:08:06:44:77:f7:5e:8e:b3:a1:49:4d:
                    47:b7:5c:8f:18:3e:26:ab:36:69:15:87:15:20:d9:
                    5a:b6:e7:5b:86:f5:de:5d:ca:92:10:aa:e0:21:1b:
                    ef:a8:11:e3:32:78:a7:c1:91:7e:09:8b:20:bd:4f:
                    f4:4c:96:10:c8:76:09:c4:73:aa:97:2e:63:7d:0d:
                    52:c0:50:cc:b9:46:6b:47:0e:77:a0:31:87:c7:b4:
                    45:30:d8:14:25:ca:62:48:40:53:1b:d7:aa:b4:89:
                    da:de:28:de:20:4e:a5:0f:6f:0b:30:0b:41:25:0d:
                    27:1f:5b:44:98:dd:08:f1:c8:ad:5b:c9:a3:0c:15:
                    84:a3:a5:37:00:89:c6:99:e7:71:f9:c3:ff:6c:c5:
                    2b:65:a3:d5:53:59:30:4c:6c:95:9a:aa:76:df:e5:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A6:F6:F2:FC:98:B8:83:7C:1D:27:B9:93:F2:80:60:60:12:1D:46
            X509v3 Authority Key Identifier:
                keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/52644D4AA1E411E8AE269764C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.82.0-27.111.84.255
                IPv6:
                  2402:cb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:ea:f3:a7:4c:84:81:af:0d:aa:cf:db:0e:58:d4:04:02:
         bb:66:c1:b8:68:d3:20:34:19:03:f8:47:86:25:89:a4:07:e3:
         cd:c9:ea:5a:19:05:d9:d6:d9:fe:74:8d:c7:df:52:86:85:e6:
         2e:56:7d:4e:0e:af:a9:40:5e:71:ed:35:2f:20:0c:e7:ee:60:
         0f:21:f5:96:c0:6a:e1:84:8a:21:fb:fd:02:2a:9f:11:40:2a:
         5b:c5:67:0d:f3:08:2d:ad:68:d6:46:5c:19:e2:76:e3:05:49:
         9b:ff:79:b7:96:3a:81:82:ba:7b:e2:b5:6e:cc:c8:19:85:b6:
         a5:71:91:d0:12:fa:9f:c2:d5:fa:0a:52:34:cc:54:05:a4:15:
         08:02:0a:08:97:24:88:28:cb:ea:0b:bc:72:23:85:fd:74:3f:
         1e:5e:7e:71:d4:09:46:be:eb:21:83:87:2f:e4:7d:27:61:fb:
         ac:f9:3b:8b:d9:e7:04:16:09:af:02:c3:45:25:c7:12:10:78:
         eb:96:97:b4:a9:8d:50:4b:43:17:3e:e1:af:54:5a:57:59:2e:
         76:e4:01:46:a8:2b:a0:ed:d6:3c:a0:8d:b6:60:3a:c2:43:14:
         82:0e:96:f9:32:94:b4:e2:2a:90:02:e5:ea:b9:4c:e6:fa:30:
         6d:bc:33:d7
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICIOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5
NzUzQkRCQ0UwHhcNMjQwNzI1MTUwNTA4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmEyNjlhNC1iMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArxIhaSBR3uPUY7WSms1yLartBgZzLU2Fa+CXSL43dbFVZCwii5TwOmxMIz6Z
shHUMPV0jaBgP8DQxewlqGcOoe4Hp0s8ysYXyw17+zS9u+lCNJ3z1w+xnoxsRav4
CAZEd/dejrOhSU1Ht1yPGD4mqzZpFYcVINlatudbhvXeXcqSEKrgIRvvqBHjMnin
wZF+CYsgvU/0TJYQyHYJxHOqly5jfQ1SwFDMuUZrRw53oDGHx7RFMNgUJcpiSEBT
G9eqtIna3ijeIE6lD28LMAtBJQ0nH1tEmN0I8citW8mjDBWEo6U3AInGmedx+cP/
bMUrZaPVU1kwTGyVmqp23+W0PwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFFWm9vL8
mLiDfB0nuZPygGBgEh1GMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5
OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDM3OTQvMjBGRTU2MTZFOThGMTFFNUEzREREQzY2QzRGOUFFMDIvNTI2NDRENEFB
MUU0MTFFOEFFMjY5NzY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBQEAgABMA4wDAMEARtvUgMEABtvVDANBAIAAjAHAwUAJALLQDANBgkqhkiG
9w0BAQsFAAOCAQEALJnq86dMhIGvDarP2w5Y1AQCu2bBuGjTIDQZA/hHhiWJpAfj
zcnqWhkF2dbZ/nSNx99ShoXmLlZ9Tg6vqUBece01LyAM5+5gDyH1lsBq4YSKIfv9
AiqfEUAqW8VnDfMILa1o1kZcGeJ24wVJm/95t5Y6gYK6e+K1bszIGYW2pXGR0BL6
n8LV+gpSNMxUBaQVCAIKCJckiCjL6gu8ciOF/XQ/Hl5+cdQJRr7rIYOHL+R9J2H7
rPk7i9nnBBYJrwLDRSXHEhB465aXtKmNUEtDFz7hr1RaV1kuduQBRqgroO3WPKCN
tmA6wkMUgg6W+TKUtOIqkALl6rlM5vowbbwz1w==
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:52 2024 by rpki-client on console-fra.rpki-client.org