Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/519EFB1CDF0C11EC95837910C4F9AE02.roa
File:                     519EFB1CDF0C11EC95837910C4F9AE02.roa (raw, json)
Hash identifier:          zxbpXMEWG/qk2Yi+G3QhThHQVpPR6NJik+qoxyUqFXQ=
Subject key identifier:   C7:37:12:AB:FB:21:C9:36:75:2F:86:10:DC:88:17:47:14:C8:11:05
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0381
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/519EFB1CDF0C11EC95837910C4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:04 +0000
ROA not before:           Thu 27 Jul 2023 02:04:04 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     24455
IP address blocks:        27.254.242.0/24 maxlen: 24
                          27.254.243.0/24 maxlen: 24
                          58.137.69.0/24 maxlen: 24
                          202.183.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:04 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d094-cde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:cf:04:34:66:83:3c:9c:3d:34:b3:9b:ca:
                    06:dd:ac:d4:46:08:ac:55:40:70:4f:67:3c:29:b1:
                    94:75:ac:9a:e3:38:4f:c2:49:88:c7:fa:3d:18:75:
                    d1:59:86:b5:4c:cc:02:cb:ef:be:54:91:94:94:a7:
                    6c:63:cf:b8:a3:32:12:dc:4f:f0:99:c8:df:55:18:
                    95:c6:c8:9b:94:66:b2:25:d2:c1:ef:9e:31:8e:c1:
                    2e:8a:c4:10:d5:a4:29:b2:09:71:76:bb:73:d4:fc:
                    b8:2c:e9:c6:48:86:ba:2d:f1:dd:58:b2:90:1c:6c:
                    82:c3:9d:0a:7b:b5:38:19:43:79:1a:9d:23:19:ae:
                    20:75:b1:df:f6:c8:84:04:6a:e6:f2:e9:cc:a1:7f:
                    4c:df:1e:31:69:c2:19:ce:04:00:8e:8d:b0:cf:e0:
                    88:24:e8:b8:7e:f3:2a:6e:e5:b4:3e:7a:7c:d9:98:
                    2d:67:31:2f:ce:49:29:63:a9:5d:7d:d3:3f:31:b3:
                    63:f7:c4:d5:6d:be:24:0e:5b:6d:f9:e4:bd:c6:af:
                    d1:db:4e:7a:e3:c3:c8:c5:75:e0:37:12:54:c2:f4:
                    c5:06:5b:6c:40:05:2f:cc:7c:ec:ca:02:1f:49:78:
                    91:4d:85:b0:08:90:c6:7b:da:33:5d:4b:76:27:41:
                    56:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:37:12:AB:FB:21:C9:36:75:2F:86:10:DC:88:17:47:14:C8:11:05
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/519EFB1CDF0C11EC95837910C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.242.0/23
                  58.137.69.0/24
                  202.183.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:e9:46:1d:81:cf:5c:26:84:15:4c:d9:c6:d3:32:5d:ef:
         41:91:67:51:c3:55:67:c7:bd:85:49:9d:6a:0c:99:b1:52:4a:
         d0:51:e0:6f:56:27:78:ea:cd:5c:07:7a:a7:25:9f:c3:5e:8d:
         91:b2:09:40:3d:38:03:8b:bb:ac:20:15:55:e4:d7:bc:7b:a0:
         35:7a:ae:c4:f0:18:1f:8b:f1:9b:02:57:c3:44:88:55:7d:dd:
         a7:30:1a:61:56:0c:b6:71:b7:cc:3d:45:a4:e6:44:44:01:36:
         b9:0d:8a:ac:d6:48:df:48:55:54:bc:97:9b:0c:82:04:bc:a8:
         24:a8:f4:94:1f:93:f7:2e:e8:90:eb:1a:e5:6c:e1:14:a5:1c:
         fa:45:15:76:16:40:82:ea:7a:83:87:d1:09:15:ed:f4:d2:6f:
         6a:9f:79:eb:4c:5f:9d:c5:22:90:95:fe:1d:0c:81:3e:1e:51:
         88:7a:81:6a:63:65:43:f0:f0:55:bc:c1:4f:b9:92:1a:de:99:
         96:66:d7:e4:ed:79:7c:f3:87:e1:86:62:25:b2:95:d2:b9:af:
         0e:83:97:1c:b7:43:07:fb:5e:2e:bb:c2:58:e5:d5:6a:f5:0c:
         fc:c8:57:70:ad:86:fe:9b:18:26:87:f6:15:7c:62:3f:d5:79:
         4d:85:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 05:03:45 2024 by rpki-client on console-ams.rpki-client.org