Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/52644D4AA1E411E8AE269764C4F9AE02.roa
File:                     52644D4AA1E411E8AE269764C4F9AE02.roa (raw, json)
Hash identifier:          Mbfd5VpIfvRMDcFTC+b57JrG1/6jEpd6n/DO7HbeZ2s=
Subject key identifier:   57:14:AC:AF:26:C9:D1:EA:70:14:CF:17:B3:B4:BF:CB:00:C6:CB:BF
Certificate issuer:       /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial:       214E
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/52644D4AA1E411E8AE269764C4F9AE02.roa
Signing time:             Thu 30 Jan 2025 16:03:28 +0000
ROA not before:           Thu 30 Jan 2025 16:03:28 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     135132
IP address blocks:        27.111.82.0/23 maxlen: 23
                          27.111.82.0/24 maxlen: 24
                          27.111.84.0/24 maxlen: 24
                          2402:cb40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
                          rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8526 (0x214e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3794
        Validity
            Not Before: Jan 30 16:03:28 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=679ba2d0-343a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b9:75:cc:89:94:10:12:1b:79:70:80:84:92:
                    1a:cd:35:90:26:c0:97:b7:2f:6a:00:9d:a6:80:06:
                    65:ff:d6:9e:2b:7c:79:06:26:48:5d:93:fb:9a:3e:
                    bc:a6:fb:ab:fb:cd:cb:63:0c:61:f8:97:74:1c:43:
                    98:5f:9d:74:dc:71:78:e7:37:df:af:71:b4:d4:5a:
                    24:a2:02:48:dd:5d:41:0e:30:f9:1c:7a:b5:e1:00:
                    ee:cd:7d:6b:91:20:a7:5f:82:3e:8d:44:0b:e5:3d:
                    5b:09:6a:c6:26:40:eb:6a:8a:73:6c:aa:b7:4c:ff:
                    26:63:e7:38:93:ba:3c:fb:a2:93:a8:80:25:77:a8:
                    22:e2:e1:c4:f0:2c:8e:c8:2c:f9:29:9c:d3:6b:8d:
                    af:67:e4:58:6c:ed:c8:a4:0f:64:23:b9:76:f2:6a:
                    98:30:29:c4:d4:80:a1:58:53:42:be:b9:de:98:96:
                    d5:67:38:f6:49:ec:c4:8a:ff:85:6c:f7:45:31:1a:
                    5b:67:48:55:6f:58:cc:16:b6:b1:2b:2a:aa:02:dd:
                    91:2f:f1:0a:dc:5b:9f:0d:da:0d:6c:cc:cb:03:c0:
                    23:44:76:35:21:2f:94:1e:bf:fd:cd:81:f7:7b:1b:
                    2f:b5:a4:40:e0:01:7b:de:80:5c:97:74:4b:3f:ed:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:14:AC:AF:26:C9:D1:EA:70:14:CF:17:B3:B4:BF:CB:00:C6:CB:BF
            X509v3 Authority Key Identifier:
                keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/52644D4AA1E411E8AE269764C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.82.0-27.111.84.255
                IPv6:
                  2402:cb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:8f:6e:d7:b7:14:bd:c5:d4:49:0e:89:a7:b8:f6:3d:67:97:
         27:62:94:ae:ad:16:93:cf:ef:97:b2:1a:07:24:3f:f7:d2:2a:
         5d:b2:73:f7:76:1d:7c:ee:d1:cb:94:02:0b:61:71:16:15:2a:
         48:1b:bc:0b:db:52:4e:c7:c7:cc:00:47:fd:37:91:76:1b:c5:
         a0:4f:a6:eb:3e:9d:85:a7:ee:2b:c8:03:65:8d:1e:d2:3b:af:
         41:27:ce:96:18:94:17:ae:69:9c:17:c3:0e:d8:d3:c7:61:e4:
         74:ad:5e:d5:2b:52:bd:d6:62:06:3f:f9:2d:d4:45:5d:62:c4:
         ac:7e:89:22:f3:4d:75:fb:61:49:18:c8:28:56:5c:a5:b1:26:
         28:a8:fb:bd:9c:9d:d2:19:d1:cb:cc:34:f3:1c:18:09:f9:14:
         77:f3:3f:e8:cc:d0:cc:e4:ac:86:cc:05:29:87:c7:29:5d:04:
         0c:c8:8c:1a:28:87:aa:d6:f2:0d:14:01:56:36:1d:ac:a7:75:
         e5:c9:4f:0a:1a:82:f1:fe:24:74:cd:17:97:bd:1f:c8:53:cb:
         01:d7:71:5f:61:8e:a5:e5:42:00:4e:d5:73:b2:53:03:e7:f4:
         c9:11:f1:6d:eb:a1:e6:3c:ff:ca:dc:75:1e:cf:82:db:8d:4b:
         29:55:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:25 2025 by rpki-client