Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/652917F0DF1911EC8F85991EC4F9AE02.roa
File:                     652917F0DF1911EC8F85991EC4F9AE02.roa (raw, json)
Hash identifier:          UrcK5zvlZ5d6YfI4Yymt0bJrpcdw8nSImxU1TQZmUIA=
Subject key identifier:   86:1E:2A:BD:5D:D4:2D:47:16:B6:62:CF:D1:ED:E4:CE:01:82:D3:AB
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0500
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/652917F0DF1911EC8F85991EC4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:28 +0000
ROA not before:           Wed 31 Jul 2024 02:33:28 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     140326
IP address blocks:        58.137.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:33:28 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a278-5734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:3d:ae:1f:84:e9:66:ed:a5:ac:5f:9b:f2:
                    9f:22:d4:68:55:0d:8f:2e:3e:4c:58:02:c8:f0:65:
                    7f:f1:ef:de:58:46:af:cf:45:d1:2e:45:1a:a0:5f:
                    6d:4d:c9:41:b6:ea:cb:1f:dc:04:0d:db:a6:7c:bf:
                    d0:63:fd:e1:c8:d0:47:af:8b:69:5b:94:a9:0f:94:
                    24:d3:c1:27:2d:bb:7a:20:e0:48:ad:05:fb:08:ca:
                    e4:42:aa:6e:a8:5e:7b:67:c5:8f:a0:b3:0e:e2:94:
                    c6:1b:5c:be:d2:5d:97:1a:df:af:bc:55:25:f5:f0:
                    3a:5f:aa:0b:57:33:4c:da:5a:f5:91:4c:d9:dc:7c:
                    3b:06:18:15:df:2e:93:24:8f:f1:cf:e5:5a:f0:82:
                    dd:e6:f5:f2:69:13:0a:73:f7:34:2b:94:54:5f:b6:
                    ac:62:fb:7a:b6:22:2b:7b:d1:08:cc:2a:6d:26:0f:
                    43:ca:e2:8b:cf:89:d4:03:3a:d9:a0:bd:7e:95:7e:
                    5a:55:50:26:34:a1:47:93:76:08:4f:64:c5:11:be:
                    a4:62:e2:c4:d2:93:d1:45:0d:61:05:c7:9a:5b:91:
                    26:e7:b5:b5:d2:ef:e6:55:94:99:61:d5:b3:7d:6b:
                    bf:8d:49:9e:8e:7c:b2:b0:a8:c0:a6:f8:aa:38:ed:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1E:2A:BD:5D:D4:2D:47:16:B6:62:CF:D1:ED:E4:CE:01:82:D3:AB
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/652917F0DF1911EC8F85991EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:08:5f:6f:a1:d4:36:1b:20:14:77:a8:db:7f:22:58:58:
         cd:80:fd:73:0c:98:58:16:25:65:43:7b:ab:1c:b6:7b:27:c9:
         11:5d:7c:4f:53:aa:1b:5b:77:1c:bd:5a:75:44:07:ca:1c:8c:
         d5:73:24:fd:9b:3c:be:8d:38:f8:a0:0c:62:44:e4:fe:73:41:
         84:1a:37:6c:3e:14:c0:9b:7d:80:11:72:27:52:9b:1a:f7:42:
         6b:08:44:53:17:56:b3:41:61:ac:97:83:5c:a4:33:c0:9f:90:
         96:03:52:68:9d:7a:e0:2b:aa:fb:2e:60:57:5d:1b:92:37:11:
         d0:94:c8:cb:40:dc:12:47:54:88:2b:2a:02:e2:66:9f:a4:83:
         06:73:5e:9d:9e:30:e8:a4:b0:f6:c4:09:74:57:ca:e7:fc:06:
         a1:ed:ba:06:66:ce:ac:96:6b:ae:83:df:91:96:80:6d:a8:dd:
         46:24:98:dc:7c:d3:f8:a0:e3:db:8c:fb:f0:79:14:7b:89:c1:
         52:37:0d:0e:43:3a:1f:7f:ee:56:18:39:eb:3e:94:ce:ac:9d:
         b2:3f:8e:f0:f3:2c:a4:b0:c1:a6:3f:47:49:5e:a1:28:ff:11:
         8c:5b:b1:eb:89:09:24:6a:63:87:15:59:e0:63:43:c8:f4:db:
         6f:6e:d7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:55 2024 by rpki-client on console-ams.rpki-client.org