Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/12CC909ADD9311EC8E83E43CC4F9AE02.roa
File:                     12CC909ADD9311EC8E83E43CC4F9AE02.roa (raw, json)
Hash identifier:          h69OVH85CGsocpI0ySf8E7YzLCshglbXmssAe5FgJ/4=
Subject key identifier:   7A:65:CB:7E:ED:31:A0:B3:F5:5D:F0:C7:47:CF:7A:C2:AB:09:3F:67
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       039D
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/12CC909ADD9311EC8E83E43CC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:30 +0000
ROA not before:           Thu 27 Jul 2023 02:04:30 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     63940
IP address blocks:        27.254.146.0/23 maxlen: 23
                          27.254.146.0/24 maxlen: 24
                          27.254.147.0/24 maxlen: 24
                          27.254.152.0/23 maxlen: 23
                          27.254.152.0/24 maxlen: 24
                          27.254.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:30 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d0ad-6e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:05:92:49:f8:88:5f:19:6f:e7:82:41:77:
                    67:36:9e:76:b2:6e:be:11:3a:54:80:2b:5c:8a:f8:
                    01:3f:2e:03:8a:4c:09:3d:b0:b5:9f:8f:98:bd:e8:
                    dd:ed:b5:7c:dd:55:35:10:ff:ce:31:f9:7f:f7:fa:
                    56:db:e0:aa:cd:e3:95:27:92:70:e8:6d:0c:90:8d:
                    38:4b:a7:f1:9c:72:d6:1f:58:0d:82:48:30:f2:96:
                    e5:ac:11:46:5b:24:49:cd:47:49:0e:44:da:d9:77:
                    3b:ae:05:27:30:7c:8f:67:e7:c7:eb:ff:8f:f3:6c:
                    ee:89:ca:20:23:e1:f6:57:1e:6a:d4:53:58:c5:71:
                    a4:c0:6a:b3:c9:a4:e4:de:a8:79:8b:4b:03:1b:83:
                    46:fa:55:0c:4e:5e:15:95:45:90:de:85:7b:18:63:
                    1e:c7:89:de:92:71:5d:fb:c4:6f:8f:a6:37:9d:78:
                    5e:5e:6c:32:fd:2d:a4:cb:33:76:e6:d6:b4:d1:35:
                    c1:a3:6a:b0:2d:4f:6d:4c:63:ea:c9:d0:28:03:18:
                    7b:c0:ef:5d:0d:7f:59:af:30:95:67:14:89:ec:c4:
                    1b:18:9d:f7:1d:b2:34:49:d0:ef:41:4f:c1:8e:40:
                    ac:1e:16:c3:d4:b5:7e:0a:b2:d3:8b:7b:20:b1:f0:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:65:CB:7E:ED:31:A0:B3:F5:5D:F0:C7:47:CF:7A:C2:AB:09:3F:67
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/12CC909ADD9311EC8E83E43CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.146.0/23
                  27.254.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:24:4f:8c:ea:e0:3a:fd:62:53:4b:f2:91:b8:c4:79:80:bd:
         6f:08:07:6d:ba:5f:6f:6d:07:19:c5:7a:11:10:8d:13:1f:a0:
         eb:99:28:14:40:84:62:00:55:17:fe:f8:d3:cf:2d:aa:3c:b1:
         12:32:29:7a:15:32:c3:38:91:5d:19:e4:fe:9a:49:85:24:81:
         a4:45:8e:30:ec:b7:44:ca:75:3e:e7:5f:71:9b:83:ea:69:5d:
         1c:03:29:c3:95:11:a0:be:95:3a:28:5a:25:27:28:4a:16:84:
         1a:d6:50:c5:4c:60:89:e8:bd:7c:23:fc:19:cd:bc:8d:fc:7d:
         fb:29:72:96:cb:e2:0d:ea:3c:f3:03:f4:7e:3c:f9:3c:83:44:
         c2:52:ff:58:58:b6:37:e0:92:6d:ff:5f:f3:78:e7:92:2e:59:
         c0:29:6a:bb:21:fc:b9:5c:0c:09:5b:a7:e3:26:60:f0:ab:d7:
         cc:be:4b:aa:a7:70:60:9b:e4:c5:19:c0:b7:da:78:40:68:73:
         22:3b:21:16:39:06:dd:22:9c:5d:df:fa:72:e2:17:e4:31:bc:
         92:49:6f:cb:8e:ff:f5:a4:dd:f9:83:c1:38:4e:bb:8a:cf:94:
         51:89:5e:f7:91:d7:fd:24:a7:b9:1e:fa:7f:b4:8c:39:f9:85:
         19:dd:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 04:53:35 2024 by rpki-client on console-fra.rpki-client.org