Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5171D3A6DEB411ECB528FF5DC4F9AE02.roa
File:                     5171D3A6DEB411ECB528FF5DC4F9AE02.roa (raw, json)
Hash identifier:          OA7lSTQNYrEaFxI5JWcKYuT0WUpzRmRqH0npsAiKutw=
Subject key identifier:   82:1E:C2:CC:6D:D6:51:EF:07:93:84:F5:62:A1:8B:54:A9:E9:7C:43
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       036B
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5171D3A6DEB411ECB528FF5DC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:03:44 +0000
ROA not before:           Thu 27 Jul 2023 02:03:44 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     134695
IP address blocks:        27.254.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:03:44 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d080-5ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:f4:e8:8a:59:52:40:16:10:cd:7f:95:67:
                    90:c4:a5:31:5b:77:13:62:bd:fa:5e:8f:07:a7:21:
                    be:38:58:c3:3b:00:f7:39:13:bd:28:36:27:01:64:
                    07:c9:5a:f2:70:8f:7c:f0:1b:18:71:fe:3e:23:94:
                    98:62:be:83:94:b4:43:27:a9:47:50:ef:fb:90:30:
                    0b:ac:b6:02:c6:76:ad:e3:25:55:94:85:48:32:1a:
                    94:2e:0b:a1:28:bc:63:38:8d:08:4e:52:20:c7:fd:
                    0b:a0:b8:f3:9f:3d:6d:90:f0:61:f6:d3:8d:28:38:
                    62:3b:df:e9:f9:74:a8:98:02:a2:c7:7b:f6:1d:6b:
                    32:ce:89:08:90:40:e1:5b:ad:0a:9d:7d:18:e9:24:
                    c8:3f:61:57:27:e6:78:61:14:8f:c5:9d:fa:bc:fd:
                    bb:26:60:cc:df:78:1a:ed:ef:12:8a:82:24:d7:2d:
                    9d:55:b7:40:5f:7b:be:39:77:93:6d:b3:8e:53:9f:
                    27:b5:81:95:d9:17:e2:d5:f0:d5:65:14:b1:99:79:
                    b3:cb:05:b4:04:1d:93:52:e8:a4:ff:72:72:11:15:
                    3f:3e:eb:7b:15:92:22:68:70:dd:de:06:d3:3b:9c:
                    23:f6:d9:c6:95:8e:77:bc:c3:58:54:6c:0f:72:67:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1E:C2:CC:6D:D6:51:EF:07:93:84:F5:62:A1:8B:54:A9:E9:7C:43
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5171D3A6DEB411ECB528FF5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:e9:33:5a:40:dc:aa:9f:a4:64:1e:de:b2:90:c3:81:d3:6e:
         51:c2:8b:f5:93:6d:d2:7e:3a:7f:13:0d:47:43:13:d5:46:2d:
         d8:06:2f:14:4e:b1:c1:e9:74:04:fb:86:13:fb:54:cf:f8:b9:
         7b:41:99:c8:da:c6:ce:92:ec:53:67:ae:7a:1c:f0:df:c8:5b:
         ff:4f:96:86:1d:62:4e:58:34:9a:2b:0e:e2:31:40:52:5d:75:
         b2:22:d2:52:25:e7:59:f1:71:4d:fd:d2:65:57:5e:4d:84:5f:
         3b:4a:56:b6:42:24:ca:71:fd:68:f9:d4:b1:e2:2f:ed:fa:10:
         ca:51:61:29:64:ee:38:09:24:ae:81:bc:3f:1a:9e:8e:27:c5:
         f1:a6:70:13:e2:1a:69:d8:b2:be:db:b5:05:8e:80:90:a7:0b:
         db:7d:0b:26:31:f2:36:f0:31:c5:02:48:8d:02:d6:67:0d:3c:
         2d:8f:6a:aa:92:3a:84:2e:77:58:76:27:05:a5:4e:92:36:97:
         db:df:f6:e6:6c:f9:10:1c:ee:ec:21:a9:88:16:b2:79:f9:a5:
         06:e0:48:d6:14:d0:86:1e:56:4c:fd:90:fd:ec:eb:09:fd:7a:
         f6:94:97:2e:45:59:d3:f2:50:df:0a:70:11:9c:25:89:fd:fa:
         cd:18:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org