Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0DF632EC8A5A11ECB056B715C4F9AE02.roa
File:                     0DF632EC8A5A11ECB056B715C4F9AE02.roa (raw, json)
Hash identifier:          3t1GmBbn39JSO6YQKJ3Ppdy8m0IMqgHNgrReeq3w168=
Subject key identifier:   C3:73:9D:CD:41:00:51:AB:D2:A7:16:B4:54:16:0F:C5:58:41:85:9E
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       039B
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0DF632EC8A5A11ECB056B715C4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:28 +0000
ROA not before:           Thu 27 Jul 2023 02:04:28 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     58955
IP address blocks:        27.254.141.0/24 maxlen: 24
                          27.254.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:28 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d0ac-d6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:60:50:20:5f:b4:5e:b9:8d:c7:d6:87:8d:42:
                    51:00:cb:fa:13:9c:c3:69:a4:0b:95:3a:48:af:87:
                    18:13:1b:da:fb:96:98:5d:8c:0f:c1:3d:56:d1:0a:
                    e1:f3:72:de:03:6f:44:93:1c:91:5b:03:e3:af:db:
                    68:0b:0c:b7:ae:39:9d:e2:c3:59:ba:5d:1b:3e:ee:
                    c3:f8:90:3b:3e:69:84:41:e8:a3:ca:d8:8e:82:c4:
                    0f:da:28:10:3a:7e:c1:25:7b:48:11:29:3a:70:d7:
                    35:02:60:da:1d:c8:0a:d4:31:fb:24:b1:f2:b9:54:
                    d3:47:03:52:fc:75:bf:b3:49:7c:b7:8c:4e:3f:1a:
                    af:41:89:f2:fd:81:47:f3:5b:14:d3:57:8f:29:bd:
                    26:57:5d:16:de:d8:5d:7c:f6:38:8b:6d:1d:6b:c4:
                    97:e0:ba:70:6e:5a:a7:e6:d4:96:a0:be:2e:1f:23:
                    0f:41:da:4f:a5:5e:ae:7d:90:39:4a:08:e4:da:4b:
                    f1:dc:88:9e:d3:0c:88:43:e5:c5:11:d0:08:44:4b:
                    a0:20:47:ec:3f:e6:da:31:53:7e:c1:96:68:ca:3f:
                    2e:f5:4b:1f:84:f6:93:de:97:fd:1e:0b:af:37:f7:
                    a6:71:47:6a:1e:1e:12:fe:c1:b1:53:98:4b:2e:aa:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:9D:CD:41:00:51:AB:D2:A7:16:B4:54:16:0F:C5:58:41:85:9E
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0DF632EC8A5A11ECB056B715C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.141.0/24
                  27.254.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:dc:95:d5:15:fd:a6:ce:0d:e2:81:f0:d4:f5:30:26:c7:3c:
         fb:76:0f:06:5e:f9:9a:ff:b1:0d:70:7f:36:c7:b0:b8:61:cd:
         7d:99:71:2a:ce:94:f0:e3:f8:89:12:b8:9b:4d:9b:14:dc:32:
         a9:df:2c:45:e9:ef:07:fb:25:41:32:c3:1c:da:87:05:1d:d0:
         73:f5:11:92:80:3c:d0:67:4f:ba:80:3f:4c:07:f6:ae:83:d1:
         f3:41:35:ac:64:4c:ff:d9:aa:ef:3a:e8:99:8a:ed:ee:21:5c:
         e7:86:23:25:79:b9:c2:79:40:3d:13:d0:a1:57:05:57:cb:7d:
         c8:b6:b9:93:d4:c8:72:03:25:78:34:10:c0:1c:f0:20:96:ca:
         a4:1b:a5:a1:aa:a3:2c:e9:56:de:3d:7a:25:b0:89:d5:ed:54:
         31:a3:4b:37:bb:82:3c:aa:87:d0:1d:97:c1:1c:9b:fc:6c:f6:
         6c:6d:9a:eb:d3:28:13:28:54:b4:64:22:3a:aa:bf:be:b6:86:
         50:25:f9:8f:0c:7e:ef:4c:e3:aa:59:35:70:58:e0:5f:00:11:
         37:b0:5d:e2:ac:ef:25:93:1b:1d:06:01:0b:08:b7:bd:76:6b:
         0b:e1:e1:89:92:a8:49:87:07:b0:de:00:01:ab:bf:af:1a:59:
         6a:bb:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 04:53:35 2024 by rpki-client on console-fra.rpki-client.org