Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/5B5CBC68751B11EB9065A822C4F9AE02.roa
File:                     5B5CBC68751B11EB9065A822C4F9AE02.roa (raw, json)
Hash identifier:          5HlGKag658JvYwBq45MtXDAz/r3WmbZjF3WX8Bnxu6I=
Subject key identifier:   2E:C5:37:1F:F2:C7:1D:9C:68:61:A5:F4:79:64:88:38:D2:8F:D5:E1
Certificate issuer:       /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial:       07F1
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/5B5CBC68751B11EB9065A822C4F9AE02.roa
Signing time:             Tue 28 May 2024 23:03:16 +0000
ROA not before:           Tue 28 May 2024 23:03:16 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     58682
IP address blocks:        202.168.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 23:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
        Validity
            Not Before: May 28 23:03:16 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665662b3-73f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:41:c1:7e:55:95:98:d0:73:fd:e0:a4:56:
                    58:5f:45:4c:b8:2d:a9:d2:76:ad:30:64:85:11:b7:
                    c5:b7:3b:fd:46:4e:45:71:ea:4e:0b:7c:5c:cb:50:
                    39:36:1b:6b:fe:50:c0:60:10:82:45:12:cd:37:69:
                    cd:48:b4:05:21:4d:aa:7e:58:31:ac:19:4a:de:6d:
                    6a:1f:56:88:ee:a5:ab:15:d4:aa:06:c8:6a:b1:50:
                    8b:f8:19:0e:10:e3:e7:44:bc:c4:fb:9c:a4:2f:b4:
                    d0:45:97:6a:79:3f:46:ea:b0:2c:c2:6f:e0:53:92:
                    b1:5a:d3:08:f3:66:c3:5f:6b:a4:d5:a0:a9:83:06:
                    c4:99:0e:e5:cc:ee:e6:6c:58:8d:86:01:cd:16:a2:
                    14:6e:c7:e4:d0:98:47:ea:35:26:66:23:74:59:bf:
                    05:cf:b3:4b:52:4d:6e:f9:3e:12:53:99:5c:2c:31:
                    fa:bb:f4:0d:63:54:22:89:4a:74:f8:81:95:2f:be:
                    6e:a0:1d:c4:f9:dc:cc:68:bd:aa:05:6f:31:6e:98:
                    27:96:82:c6:ad:75:96:38:a8:4a:49:6d:33:e9:4c:
                    c1:4d:3e:64:ab:26:c2:8e:f2:df:b4:1d:9b:8d:fe:
                    bd:e2:ff:39:98:a7:30:94:f6:27:6c:ed:3d:97:5b:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C5:37:1F:F2:C7:1D:9C:68:61:A5:F4:79:64:88:38:D2:8F:D5:E1
            X509v3 Authority Key Identifier:
                keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/5B5CBC68751B11EB9065A822C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:95:d8:d7:2c:73:1e:ed:66:90:d1:24:96:b9:19:e7:f1:01:
         85:a0:14:fb:09:f8:89:c7:13:83:40:82:bc:ba:22:86:37:63:
         27:65:69:56:32:84:27:32:56:82:ff:77:2b:4f:61:73:80:8f:
         01:2a:eb:47:e6:04:6a:c5:51:f1:73:63:0f:95:a7:39:0c:d2:
         74:40:b6:3a:54:1c:f1:2b:f5:d8:a5:8d:80:e7:92:f6:28:88:
         80:d4:6b:8b:85:12:3b:a0:d1:ad:2b:7a:4e:cd:59:88:5b:87:
         dd:63:cd:e0:91:35:a8:73:97:30:b7:a3:1e:da:7e:c7:f8:84:
         fb:46:9b:85:29:c9:af:73:9e:a3:52:31:05:d1:59:a1:fc:29:
         c0:11:a9:25:a1:94:4d:02:3e:ec:26:81:f4:6f:1d:1c:ab:3c:
         d7:95:28:e4:b7:92:9b:fe:c9:82:15:c9:6b:0a:63:33:62:b4:
         76:30:f5:81:b0:da:ad:01:b4:1d:48:fe:09:fc:41:af:6f:fe:
         1c:fb:ad:83:cc:d1:4b:62:01:f3:e0:02:be:97:b1:3a:98:20:
         3b:4a:9d:7d:45:4c:28:29:f7:ec:87:d3:ed:cb:75:6d:eb:89:
         e4:9e:77:60:d0:0e:a9:6d:1e:13:54:b0:11:84:ac:3a:59:dd:
         d2:67:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:30 2024 by rpki-client on console-ams.rpki-client.org