Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52DF0B84DF0C11EC95837910C4F9AE02.roa
File:                     52DF0B84DF0C11EC95837910C4F9AE02.roa (raw, json)
Hash identifier:          PEv+jQmmG0/edeZCTSsY6X4Ckh7DCK6Lh49pUfi6rO4=
Subject key identifier:   3A:B8:65:59:2E:4A:54:AA:7C:69:EE:0D:19:5F:4B:01:68:A4:82:E0
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       038E
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52DF0B84DF0C11EC95837910C4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:16 +0000
ROA not before:           Thu 27 Jul 2023 02:04:16 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     45530
IP address blocks:        58.137.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:16 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d09f-87a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c3:ae:09:3d:a9:bb:f4:24:35:fe:68:64:1e:
                    59:3e:a4:66:8a:1c:92:6c:8e:3a:a7:56:5e:4a:30:
                    3c:bd:c1:23:4b:a0:2d:08:83:11:66:0f:07:f4:e6:
                    c5:23:7b:e2:cf:3c:24:55:33:1f:e5:8e:e5:7e:1c:
                    dc:ec:c0:90:7d:c4:44:c5:fd:c4:a2:95:42:12:df:
                    b4:3c:91:4c:4f:d9:6a:10:ce:38:69:ef:97:44:52:
                    b1:51:c1:ee:e3:7f:da:f8:c9:26:ee:27:f5:b5:45:
                    1d:be:ac:f5:c4:44:57:9a:8d:bc:00:62:d5:c5:24:
                    1c:a9:95:dc:f1:fa:00:b5:d5:0d:fe:1c:02:5c:0d:
                    9c:40:05:fa:8f:4f:c2:b5:0b:09:47:80:a3:5a:b1:
                    0c:33:c8:6d:29:7f:f1:fd:81:15:22:4f:f4:3d:3e:
                    fa:48:2d:10:a9:e6:22:17:69:fb:d4:41:a4:e4:b4:
                    6b:73:10:01:ab:8a:c2:74:c2:6f:0e:64:3d:d6:cb:
                    bc:05:fd:eb:3a:af:c5:31:36:21:5c:0a:4d:29:c6:
                    a5:ae:8d:be:6e:c6:ed:b0:aa:88:ad:7e:8f:53:2d:
                    c0:10:c7:30:49:fc:88:97:8a:21:3c:a4:a6:cd:34:
                    6a:28:ef:1a:71:14:87:91:9f:1f:71:07:a0:bd:57:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B8:65:59:2E:4A:54:AA:7C:69:EE:0D:19:5F:4B:01:68:A4:82:E0
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52DF0B84DF0C11EC95837910C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:4e:c4:aa:5e:8c:72:f8:2e:fe:36:9d:09:86:60:00:29:
         f9:7e:c5:f0:5c:50:4c:c4:06:37:0b:a3:4a:29:f3:40:e4:cf:
         ac:bb:23:b0:5c:bf:59:40:2d:7f:e8:dd:f6:e9:b5:15:fa:9c:
         8b:3f:dd:0c:d8:f4:f9:56:4a:5e:58:a0:47:7a:0d:b3:c1:d9:
         6d:53:d1:9f:3f:7c:dc:45:c4:22:1a:a7:80:25:03:3a:13:0e:
         cd:f8:33:f6:f9:07:6b:3e:74:da:8d:2b:0e:37:33:fe:76:f5:
         a9:a8:4d:d7:94:98:3e:d8:6a:da:14:fc:22:82:f2:e2:b5:b8:
         30:5f:9d:23:73:d4:70:52:8d:38:36:0a:63:62:8b:06:c6:ca:
         55:8e:c4:4a:9a:0f:33:85:69:32:ea:7d:f5:67:cb:1f:aa:16:
         81:bd:13:9f:ad:fe:d8:2a:d3:38:ea:df:7f:60:1f:01:1c:f1:
         a5:5c:ea:03:b9:8c:3a:f9:33:e2:14:bf:1f:5d:d0:6b:c6:80:
         80:0f:c4:55:f2:3a:2a:61:dc:92:2c:d4:ee:f6:9d:a1:25:e0:
         41:ec:49:53:4e:5d:ea:01:28:29:0a:79:21:33:4a:ad:76:b8:
         58:20:3f:02:b3:48:89:62:05:18:3a:56:ef:95:c8:4e:a5:3f:
         f8:e8:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 05:03:45 2024 by rpki-client on console-ams.rpki-client.org