Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/27560994BA0611EB8B424C22C4F9AE02.roa
File:                     27560994BA0611EB8B424C22C4F9AE02.roa (raw, json)
Hash identifier:          Xl8AtspU2gm9aJvgm/6OJcPbZkF6w9pgzK3+vnPiMlM=
Subject key identifier:   0C:B0:6B:28:4C:7D:94:1E:8D:DA:64:EB:0B:A0:E9:35:34:78:50:8E
Certificate issuer:       /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
Certificate serial:       04A4
Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/27560994BA0611EB8B424C22C4F9AE02.roa
Signing time:             Sat 07 Oct 2023 00:21:27 +0000
ROA not before:           Sat 07 Oct 2023 00:21:27 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     45939
IP address blocks:        202.4.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl
                          rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Jun 2024 01:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188 (0x4a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
        Validity
            Not Before: Oct  7 00:21:27 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6520a487-beee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:f1:56:4f:89:c9:c6:0e:d0:03:ee:b6:49:
                    76:a2:6d:73:65:b3:a8:19:c7:68:9a:a7:3f:71:38:
                    4d:9c:00:b2:f7:e9:fe:fa:2b:2f:59:e9:6d:e3:91:
                    87:41:d5:50:31:49:58:28:86:df:e4:f0:3d:4f:74:
                    c9:6c:c1:8d:77:22:e2:85:7e:6e:16:57:9e:13:9b:
                    d0:d1:ea:fc:03:0c:fa:02:77:59:c3:90:c8:58:c2:
                    53:44:62:94:5d:9f:f8:71:ea:44:9e:6e:19:89:61:
                    07:47:22:3b:cd:3a:33:fa:0b:dd:4f:ab:fb:db:2b:
                    c7:77:61:e9:6f:1e:a7:ed:d9:ac:92:77:0e:3e:54:
                    1e:fd:2a:7c:88:ac:4c:f3:84:0d:90:49:6c:e3:09:
                    75:46:60:41:1f:b3:93:47:e7:ef:13:71:75:da:f2:
                    f7:62:30:f6:c8:12:87:18:4b:2a:61:92:3f:9c:ac:
                    4d:e0:89:5a:b7:8f:bd:b2:60:aa:31:27:90:42:d9:
                    ba:b5:76:e3:26:d2:5a:4c:73:d5:8a:b8:5d:d4:bf:
                    eb:87:c8:4f:2e:aa:b8:17:f2:b5:58:0a:e8:ef:0a:
                    d3:da:0c:38:95:41:a4:93:49:9a:7c:e9:14:c4:a8:
                    20:0b:43:de:1e:44:32:98:00:93:6c:7b:eb:89:50:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B0:6B:28:4C:7D:94:1E:8D:DA:64:EB:0B:A0:E9:35:34:78:50:8E
            X509v3 Authority Key Identifier:
                keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/27560994BA0611EB8B424C22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.4.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:2e:44:72:76:29:59:cb:7c:de:b3:36:c0:55:76:88:d2:
         9d:0a:dc:39:fb:bd:3d:6e:35:17:92:fb:e8:7a:d6:ca:aa:18:
         c1:84:1b:70:ab:79:48:fc:cc:97:98:13:5a:a7:b6:33:d3:41:
         7b:e7:7c:5c:8e:42:eb:05:3b:b8:0f:3f:ee:2b:d8:b5:22:0d:
         80:90:e8:7a:f3:92:6d:7d:51:3e:b4:88:35:76:9f:f0:16:83:
         9c:23:f7:39:d0:a2:f7:d5:23:99:66:b9:16:e4:2d:b9:8d:91:
         1e:a0:5f:f6:2f:b7:e2:bc:55:3c:a9:91:21:4a:53:37:25:3a:
         13:e3:dd:7b:f3:7a:c3:e1:35:3e:a4:32:29:69:f8:58:39:56:
         3a:d0:13:17:1c:df:43:06:ac:94:9e:56:b5:90:98:b4:cb:2e:
         e9:4d:77:7b:7c:16:51:21:2b:e7:b3:2e:c1:9d:44:30:ee:79:
         b8:fa:ba:eb:c3:17:7a:66:a6:c6:ef:18:07:7b:9e:81:90:55:
         41:8c:60:86:76:2d:c9:1d:f0:59:a1:e7:4d:7b:77:05:39:92:
         dc:6a:96:7a:fe:f4:4f:92:77:bd:1f:8c:e3:40:9d:6a:4b:40:
         64:93:da:07:40:86:6f:8e:43:a5:64:3d:2c:4b:1f:de:1d:4d:
         5d:27:29:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:47 2024 by rpki-client on console-fra.rpki-client.org