Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0C362F66DEB011ECAA66AC68C4F9AE02.roa
File:                     0C362F66DEB011ECAA66AC68C4F9AE02.roa (raw, json)
Hash identifier:          o5gutpof1Zr7GHwEyv6nBTT3Bu4cK5+5UJrbogrVLvk=
Subject key identifier:   AC:00:BF:AF:AA:4D:12:88:51:C0:F5:23:EA:9C:F5:B8:61:C4:3D:65
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0366
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0C362F66DEB011ECAA66AC68C4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:03:40 +0000
ROA not before:           Thu 27 Jul 2023 02:03:40 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     133063
IP address blocks:        27.254.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870 (0x366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:03:40 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d07b-dad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:cc:39:f2:69:cd:b3:ec:32:20:1f:3d:c6:
                    86:02:d4:67:97:a2:c2:b6:c2:39:8b:32:20:ed:6c:
                    59:d2:fd:bb:60:3d:5b:e2:48:12:40:fc:e0:c6:22:
                    9a:e9:70:91:77:b5:37:95:7d:1a:3f:f8:57:82:a5:
                    6b:4c:db:1f:d5:b9:1e:f6:b8:6d:ca:cf:76:a7:0d:
                    c6:8e:ac:21:16:25:5f:a2:bd:63:75:07:cb:0a:1d:
                    50:c0:6d:c9:e5:f7:9b:25:ac:c5:39:7e:35:50:c5:
                    3e:08:48:37:1c:22:86:2f:bb:d9:ad:52:0f:e8:4a:
                    6d:00:cf:cf:6e:72:15:cd:a9:24:b0:c4:86:4f:81:
                    7d:06:8c:c2:6d:ad:87:f1:94:fe:ef:3f:e2:24:d3:
                    b1:c7:c9:05:98:6f:08:6d:c3:dd:55:3a:48:0b:ad:
                    bf:e2:2f:78:14:cf:d1:bd:33:5b:a2:ce:57:c8:74:
                    ef:f3:12:9f:80:d7:dd:78:f6:53:93:2d:04:83:bc:
                    50:60:d2:d9:1e:a0:c1:80:37:38:d1:08:ea:e7:cb:
                    b5:dd:74:f3:c9:6a:79:18:85:2e:a9:44:ca:a4:87:
                    5e:2b:0e:c3:70:cf:1c:c6:fa:10:48:3e:a4:d6:12:
                    d8:7b:70:3c:f6:31:a9:96:8e:13:a3:55:73:64:a1:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:00:BF:AF:AA:4D:12:88:51:C0:F5:23:EA:9C:F5:B8:61:C4:3D:65
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0C362F66DEB011ECAA66AC68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:b5:aa:54:6e:a2:10:31:4c:fe:0f:b7:93:a1:08:c5:23:
         31:38:c6:c0:bf:3a:83:78:ec:61:9f:15:19:f3:84:61:17:04:
         45:0b:56:d8:fc:b5:8e:80:90:2d:fd:85:9b:d1:f9:4f:16:15:
         da:14:f4:49:fb:0d:f8:48:06:b5:a7:f7:a0:b3:5a:84:7a:2a:
         60:2a:22:78:28:12:dc:37:35:38:8b:d6:15:9c:5a:26:62:75:
         e3:17:b2:7b:f9:58:b1:d4:e2:a5:fa:49:f1:4f:20:41:40:16:
         2c:2e:31:85:01:7b:b7:07:54:cc:77:13:89:40:f4:74:08:a0:
         d4:fd:38:10:a3:cc:29:95:75:25:88:97:8e:51:fb:b4:a6:c8:
         44:39:50:6a:3e:28:77:19:a5:bd:c2:57:58:33:7f:ff:ec:52:
         09:f6:b2:f2:20:ee:ed:9d:af:2c:db:9b:e7:30:25:d6:f9:cd:
         cc:7e:8d:17:1c:4f:da:5b:dc:12:98:2c:dc:1b:26:63:58:63:
         b3:60:32:ca:41:c0:e3:91:6f:8d:df:f8:97:2e:d9:13:42:ae:
         e7:7e:79:84:cd:5e:18:d3:e8:bc:5c:bf:cd:02:b0:88:7e:79:
         75:24:94:ef:f7:be:17:29:08:92:28:0d:97:db:ee:58:f8:81:
         fc:97:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 04:53:35 2024 by rpki-client on console-fra.rpki-client.org