Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0CCC69AEDEB011ECAA66AC68C4F9AE02.roa
File:                     0CCC69AEDEB011ECAA66AC68C4F9AE02.roa (raw, json)
Hash identifier:          vSru4XFA4wLcCAFNgS8w8rP3gI1u6lcZ5xzU5ywU7yw=
Subject key identifier:   CC:F7:FE:AF:CE:3C:11:7C:27:0C:42:D5:A4:0C:CE:1E:5A:26:F7:0D
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       04FA
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0CCC69AEDEB011ECAA66AC68C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:23 +0000
ROA not before:           Wed 31 Jul 2024 02:33:23 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136158
IP address blocks:        27.254.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:33:23 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a273-dd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:35:41:85:3a:a1:a7:5e:3d:2c:d2:43:06:
                    0d:11:44:a7:7b:5c:0d:8d:ff:50:6e:30:91:ea:59:
                    db:7b:ef:49:80:19:74:8c:79:bf:53:30:eb:93:c9:
                    d9:62:0c:f4:e7:a8:f6:22:f7:1d:66:9d:7d:89:0a:
                    7b:45:e4:21:94:3a:a7:aa:09:f7:83:1f:5c:79:67:
                    1d:0d:50:93:c4:a8:d3:3c:74:51:8f:b6:e2:3c:38:
                    b5:ed:bb:2f:f7:83:ea:34:ae:48:d8:ae:57:6f:6b:
                    48:92:c1:98:57:15:90:ff:29:fc:a0:3d:42:90:d2:
                    99:c8:94:f7:38:9b:fc:20:97:4c:7c:97:e3:41:78:
                    fd:72:97:3f:3e:19:b3:d8:5c:00:05:e7:c9:a0:0c:
                    d8:d7:ee:36:f9:4a:2b:d3:40:7e:c2:8d:fa:62:93:
                    15:4d:df:75:3d:74:16:86:7b:9a:fb:9f:2c:55:86:
                    4f:7b:ed:cf:13:f2:26:91:1f:ab:64:bf:31:27:68:
                    3f:75:19:c5:b4:df:50:33:f0:3b:8b:aa:e4:e1:7e:
                    ce:c3:05:e0:05:30:80:72:47:c4:62:84:e1:b9:b8:
                    49:af:31:ff:48:48:25:18:44:88:6c:52:7d:35:55:
                    36:95:e1:c0:29:af:1c:8c:f4:8c:03:b2:23:68:c4:
                    81:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F7:FE:AF:CE:3C:11:7C:27:0C:42:D5:A4:0C:CE:1E:5A:26:F7:0D
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0CCC69AEDEB011ECAA66AC68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:74:f3:d4:42:b2:9e:db:89:95:af:b8:0d:c1:a3:ea:9b:
         76:8f:6e:7d:0f:13:19:5d:1a:45:79:81:a9:72:f1:5b:fc:8e:
         11:09:d5:4e:87:44:3e:27:e3:40:98:d8:83:e4:1e:63:7f:08:
         b5:62:ae:a9:2c:55:87:74:dd:ef:c7:ab:ee:75:09:b9:72:45:
         60:9b:5c:27:23:a3:08:3f:2a:60:be:ca:ed:29:9b:44:46:bb:
         63:29:d2:1f:33:ce:1b:01:9a:73:de:06:70:c7:a0:4e:46:af:
         9e:8d:f5:e3:af:3d:1a:17:54:12:ac:f8:cd:57:37:4a:80:18:
         d4:bb:ac:fb:ef:72:1d:61:72:fd:4d:54:7a:2d:f3:5b:dd:d1:
         62:bc:56:99:dd:38:53:f2:4e:52:4f:a7:e4:11:70:cc:8f:d9:
         e8:8b:c2:ad:d7:c5:74:da:8a:b7:b0:55:b4:29:33:18:af:43:
         9f:96:f4:82:2a:0e:4b:fa:18:33:08:3a:82:2e:a9:e2:59:e5:
         7a:83:75:a7:9e:d3:d2:2b:5d:4c:09:d9:09:53:1f:f6:a0:41:
         b1:f2:fd:6c:75:6d:e9:10:90:2b:ad:1a:2d:d5:fc:85:7e:a7:
         c6:24:f0:02:5c:6a:e8:38:07:b9:30:f7:e4:eb:9a:f9:ab:87:
         b4:f3:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org