Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/53913D86DF0C11EC95837910C4F9AE02.roa
File:                     53913D86DF0C11EC95837910C4F9AE02.roa (raw, json)
Hash identifier:          ttZaeodKSW/2DUsXPd0QOHSP1yLsjaN3EXJVTfNLEMY=
Subject key identifier:   F4:1C:C7:3F:24:52:20:6A:A0:76:9E:20:A2:92:F7:5B:7B:B9:B2:79
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0390
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/53913D86DF0C11EC95837910C4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:17 +0000
ROA not before:           Thu 27 Jul 2023 02:04:17 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     45959
IP address blocks:        58.137.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:17 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d0a1-3a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:ce:53:57:4c:04:02:a9:8f:ef:0f:83:9e:
                    e6:b3:8e:f4:68:49:e1:88:db:78:58:a9:12:0a:11:
                    49:d6:dd:e3:82:05:bf:d7:bd:e1:f0:a8:a3:30:0d:
                    65:cb:22:7e:ac:a6:32:7f:7a:b9:ed:cd:fb:ee:9a:
                    53:b4:5c:68:c7:aa:34:05:3c:41:8b:23:13:ed:a1:
                    7f:9b:b6:6d:4f:d8:54:a5:f8:50:9c:30:b3:a1:48:
                    76:bb:7a:96:1d:12:cf:df:91:1d:07:1b:e0:e4:b7:
                    4a:fd:0f:fd:b4:5f:c1:0a:e1:2b:2d:9d:48:21:c5:
                    5f:94:71:f0:05:b3:5b:da:77:a3:18:da:49:6d:48:
                    c0:1e:57:84:5c:6f:30:02:15:f4:49:3f:0c:31:48:
                    92:cf:77:f9:9f:1c:23:2f:5d:f5:df:db:a9:7e:c0:
                    a2:3b:37:ff:6b:11:a1:13:1a:a0:8f:ab:c2:ef:61:
                    46:8f:96:99:4d:80:cb:ad:14:d3:1f:2f:48:28:e5:
                    8b:c7:e0:61:38:db:41:eb:dc:55:0f:f8:c7:d9:92:
                    03:e7:b0:03:6a:9b:a0:a2:e3:2a:ac:94:52:b7:33:
                    b0:a4:fc:d9:60:51:e0:c1:3d:12:02:11:26:c0:94:
                    07:d1:2c:92:5b:fb:53:3d:be:5f:8b:59:99:ff:33:
                    d6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1C:C7:3F:24:52:20:6A:A0:76:9E:20:A2:92:F7:5B:7B:B9:B2:79
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/53913D86DF0C11EC95837910C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:56:d2:b0:56:d6:50:15:b8:85:75:a0:3f:f0:f0:d5:dc:f2:
         5a:24:57:da:4a:85:d6:a1:a1:28:22:17:b0:89:ff:2c:ba:c1:
         0e:eb:e1:72:2b:15:8b:d0:ef:a1:ff:cd:11:c3:2b:d5:8d:5b:
         77:85:96:34:c0:32:1f:bc:45:cb:b9:35:40:ad:eb:71:ea:50:
         b1:fe:f4:58:8e:ff:71:49:c6:79:18:d7:28:45:21:d2:c2:f9:
         81:67:d6:c5:79:99:13:5d:ea:30:9c:f4:56:d2:d3:07:ef:e7:
         50:40:08:c7:70:ab:78:25:7e:3d:35:c7:ca:5a:e7:c5:1e:45:
         2c:a9:65:8b:0d:83:40:da:e9:c2:cb:4c:d6:f2:a8:83:61:ed:
         4f:cf:90:b4:f4:06:e5:d1:eb:8d:a2:db:df:db:5b:fa:8e:11:
         f7:0a:25:56:62:c1:a7:7b:25:5e:02:88:55:2e:1a:ec:74:65:
         00:26:10:ce:3b:50:e6:5d:ee:69:8e:98:37:6d:cc:ab:14:6a:
         29:59:83:6a:77:cd:36:bd:c9:b8:34:c2:e9:53:97:b8:eb:7f:
         3e:fd:d0:b6:34:97:fb:f2:55:0b:d2:85:2f:57:23:54:5a:80:
         66:69:4c:49:56:8b:58:89:84:ba:1a:62:f1:39:e4:86:52:e3:
         d6:6f:ef:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 04:21:39 2024 by rpki-client on console-fra.rpki-client.org