Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/64A4C4A0DF1911EC8F85991EC4F9AE02.roa
File:                     64A4C4A0DF1911EC8F85991EC4F9AE02.roa (raw, json)
Hash identifier:          5b2kP/UDTGzE8r5Dy2dHjB+DD6JaTPTFFvg38wvXspo=
Subject key identifier:   2B:21:33:74:E4:E0:C3:12:E5:F4:B0:52:32:86:C9:54:7D:C3:32:17
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       04F9
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/64A4C4A0DF1911EC8F85991EC4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:22 +0000
ROA not before:           Wed 31 Jul 2024 02:33:22 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     135620
IP address blocks:        58.137.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:33:22 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a272-6bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:fd:db:57:db:6d:c5:e2:92:95:d2:3a:35:
                    05:16:8a:41:42:1e:e4:03:1b:23:43:18:ba:74:62:
                    d9:ea:f9:6a:58:d6:47:46:d6:8a:af:68:88:ff:07:
                    bb:cc:fa:94:ae:10:72:c2:80:6c:19:b0:15:83:d4:
                    3c:c5:62:f9:ab:8e:d2:25:ba:38:bf:63:47:47:30:
                    69:69:7e:05:78:d1:d9:20:4e:31:2e:96:65:5e:84:
                    51:41:07:ec:56:9d:b6:25:5e:dc:0b:ef:46:ed:3f:
                    d6:d4:40:5d:8f:ee:d6:f2:63:9e:2a:99:84:de:a6:
                    47:d8:4d:aa:3c:8f:83:b7:12:47:e5:23:ac:05:46:
                    5d:a3:c4:9e:6c:4b:d6:4d:88:7b:8a:14:6c:7f:88:
                    17:32:6b:f4:37:57:1f:c3:98:cd:ba:66:aa:e0:1a:
                    8d:19:bd:73:d3:7d:3e:cf:3c:80:a3:8f:3b:0d:82:
                    b2:02:2f:6f:91:23:00:5e:39:99:d5:d7:06:cb:75:
                    5d:8b:b7:0c:67:65:de:ca:dd:14:da:2a:3e:9e:5f:
                    c3:41:ec:cc:03:08:ab:0a:8d:19:53:53:f6:78:c5:
                    3f:92:77:fc:cf:9e:ba:c5:b5:57:1f:ae:1b:51:75:
                    6b:f4:63:0b:a3:c9:44:65:99:99:53:66:f7:c9:3c:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:21:33:74:E4:E0:C3:12:E5:F4:B0:52:32:86:C9:54:7D:C3:32:17
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/64A4C4A0DF1911EC8F85991EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:7e:25:c2:02:d6:80:db:bc:57:d6:fc:53:50:4f:ea:8b:46:
         2c:f5:a9:c8:64:91:de:5d:aa:f7:53:79:18:29:d8:76:ff:89:
         eb:43:71:0e:a2:27:83:6d:3c:31:eb:bf:5a:a9:05:0a:bb:7a:
         11:36:ff:8b:0f:66:da:72:4b:a2:ef:9c:57:ab:7f:97:cc:97:
         82:e0:27:4b:05:ab:87:75:a7:7b:9b:ed:93:ca:76:ab:81:ca:
         d3:b2:04:39:9d:63:0e:5b:27:49:6f:1d:68:9d:10:bf:11:db:
         26:7b:52:57:39:a8:99:47:be:42:99:1c:ef:07:7d:01:51:70:
         82:e7:24:4f:4b:fc:22:cc:e6:b3:9e:a4:35:3e:99:0b:46:5d:
         f1:a4:26:8d:cb:c8:25:30:dd:b2:6a:2c:ae:48:d4:40:e0:7e:
         f5:89:4f:6e:ae:9e:45:f6:aa:13:b5:85:9e:33:11:7d:53:65:
         6d:1b:69:10:85:b2:33:6a:8a:7b:c6:f0:b1:69:66:e7:ca:54:
         65:1f:bc:49:72:97:47:39:a3:b6:46:27:f1:2a:73:50:5f:43:
         1b:3f:44:81:5e:d1:52:82:d8:8a:bf:b6:23:d5:a8:0a:c3:ee:
         cb:42:6a:69:b3:af:ae:2b:dc:66:c2:22:10:b5:43:5b:4e:40:
         53:ac:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org