Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52319814DF0C11EC95837910C4F9AE02.roa
File:                     52319814DF0C11EC95837910C4F9AE02.roa (raw, json)
Hash identifier:          YQdCK4DolCISMw/Ig9l0kcG19vgalQwFEoS0lt2ncjs=
Subject key identifier:   D3:D6:9B:94:5C:AB:76:25:B6:61:F5:AE:D4:B5:05:61:BB:2F:34:FE
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0518
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52319814DF0C11EC95837910C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:49 +0000
ROA not before:           Wed 31 Jul 2024 02:33:49 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     45255
IP address blocks:        58.137.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:33:49 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a28c-e26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:fa:06:82:a7:06:b6:c1:d2:8f:2e:b7:d9:
                    8e:8e:0d:a1:8e:41:b8:0e:69:ea:44:0c:49:37:76:
                    a4:5b:28:99:76:64:31:fc:dd:4a:b6:4b:3c:83:f4:
                    a9:2d:54:bd:2a:2a:ea:c7:0f:1f:fd:ed:56:76:0c:
                    2c:d3:7d:2b:2b:18:b3:17:e9:f1:d0:0f:07:ee:f5:
                    36:54:13:ba:1d:c6:8c:7c:92:b1:21:73:69:a8:7a:
                    8c:e2:20:92:9e:ac:10:02:d5:17:c8:f0:42:6e:09:
                    5b:59:33:74:38:fb:5e:d4:2f:90:12:bf:f1:70:4a:
                    8c:55:84:bb:fc:fd:c6:ee:fb:81:a0:55:af:3a:64:
                    49:e1:e4:89:59:34:2e:2f:c2:c4:bf:fe:ff:2c:45:
                    5c:5b:00:2c:fc:b9:2a:d8:f8:7b:c3:b4:38:39:db:
                    c4:03:b6:93:c2:f5:8b:69:49:88:35:e3:e1:e8:13:
                    ba:9b:e6:04:95:72:2e:89:1b:6e:6d:cb:9d:b4:2a:
                    00:92:5a:b2:8d:9c:1f:70:bf:0d:67:c2:e9:e2:0b:
                    49:a8:a2:83:1c:05:05:27:23:3b:bd:18:33:62:e2:
                    80:2b:05:f4:30:dc:4d:39:4f:9d:8c:c9:dd:04:f8:
                    c6:54:b5:c8:67:5b:0a:ea:61:af:2a:df:60:76:3c:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D6:9B:94:5C:AB:76:25:B6:61:F5:AE:D4:B5:05:61:BB:2F:34:FE
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52319814DF0C11EC95837910C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:cc:23:ad:58:0a:66:b9:eb:ff:ba:ea:cb:07:68:6a:3c:
         96:40:c0:03:e2:2e:46:da:fd:d2:ca:af:ed:b8:19:d9:18:d7:
         bb:c1:09:ba:c6:ce:32:c1:72:a8:a1:4e:12:b2:d4:04:ed:a6:
         61:e7:18:88:19:bf:e6:13:88:ad:ca:6b:f4:45:93:9b:6d:4b:
         cc:e2:55:31:e2:80:21:df:c6:ee:d3:de:15:75:f3:58:ee:ab:
         bf:b2:ca:2f:d6:33:cf:53:be:2b:57:73:ea:07:35:e9:48:c6:
         a2:fe:81:e2:91:2e:64:b2:01:58:88:ef:ca:e6:2e:90:76:fb:
         86:ec:db:11:d1:cd:02:5e:83:37:f3:1f:5e:c7:97:56:a5:9e:
         10:d3:44:eb:9d:77:83:26:17:95:66:13:73:fd:7d:96:30:16:
         fd:95:58:51:5a:e3:e8:0e:82:c3:b5:60:2f:06:18:c8:83:38:
         3d:0e:2e:98:d8:f9:67:05:65:77:96:e4:6a:59:15:3f:90:fa:
         b2:8a:f9:2b:4d:2f:3a:6b:fa:cd:de:57:99:2d:a9:9b:6f:39:
         f4:14:a7:74:65:a3:69:3e:81:4c:a5:66:dd:4e:1e:d6:9f:dc:
         2b:d4:52:da:c6:85:d7:87:b6:22:85:4c:42:f5:60:7e:41:25:
         86:ed:55:64
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjQwNzMxMDIzMzQ5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5YTI4Yy1lMjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxhn6BoKnBrbB0o8ut9mOjg2hjkG4DmnqRAxJN3akWyiZdmQx/N1Ktks8g/Sp
LVS9Kirqxw8f/e1Wdgws030rKxizF+nx0A8H7vU2VBO6HcaMfJKxIXNpqHqM4iCS
nqwQAtUXyPBCbglbWTN0OPte1C+QEr/xcEqMVYS7/P3G7vuBoFWvOmRJ4eSJWTQu
L8LEv/7/LEVcWwAs/Lkq2Ph7w7Q4OdvEA7aTwvWLaUmINePh6BO6m+YElXIuiRtu
bcudtCoAklqyjZwfcL8NZ8Lp4gtJqKKDHAUFJyM7vRgzYuKAKwX0MNxNOU+djMnd
BPjGVLXIZ1sK6mGvKt9gdjz5YwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNPWm5Rc
q3YltmH1rtS1BWG7LzT+MB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvNTIzMTk4MTRE
RjBDMTFFQzk1ODM3OTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAA6iTwwDQYJKoZIhvcNAQELBQADggEBABZszCOtWApmuev/
uurLB2hqPJZAwAPiLkba/dLKr+24GdkY17vBCbrGzjLBcqihThKy1ATtpmHnGIgZ
v+YTiK3Ka/RFk5ttS8ziVTHigCHfxu7T3hV181juq7+yyi/WM89TvitXc+oHNelI
xqL+geKRLmSyAViI78rmLpB2+4bs2xHRzQJegzfzH17Hl1alnhDTROudd4MmF5Vm
E3P9fZYwFv2VWFFa4+gOgsO1YC8GGMiDOD0OLpjY+WcFZXeW5GpZFT+Q+rKK+StN
Lzpr+s3eV5ktqZtvOfQUp3Rlo2k+gUylZt1OHtaf3CvUUtrGhdeHtiKFTEL1YH5B
JYbtVWQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:55 2024 by rpki-client on console-ams.rpki-client.org