Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/65A36988DF1911EC8F85991EC4F9AE02.roa
File:                     65A36988DF1911EC8F85991EC4F9AE02.roa (raw, json)
Hash identifier:          W1Lf4vNx96iB4jS21xHuR+8NQdiGwHXFseoTL+kdyx8=
Subject key identifier:   44:5D:1A:2F:C1:C8:F4:24:67:04:85:42:A0:4B:B4:83:9C:23:E3:80
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       037D
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/65A36988DF1911EC8F85991EC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:00 +0000
ROA not before:           Thu 27 Jul 2023 02:04:00 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     24083
IP address blocks:        58.137.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893 (0x37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:00 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d090-8f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:2c:31:8a:44:17:90:ae:fa:ba:21:cb:5a:
                    fc:5c:9c:a9:c7:a1:f9:52:a1:35:0b:99:b9:a5:ef:
                    f8:e8:09:38:a1:d9:fb:19:b7:f1:85:72:e7:5b:a3:
                    ae:65:0e:45:57:8b:f4:6a:83:74:4c:3f:c1:5b:c4:
                    bd:95:81:f0:33:c7:65:b7:fe:b7:26:8f:8b:95:64:
                    b0:67:66:cb:7e:c9:11:e4:cd:90:b1:dc:bf:65:a1:
                    93:fa:17:95:52:2f:8d:9d:1b:0d:2e:17:22:20:68:
                    e4:a6:b8:45:47:84:39:e0:6c:80:7b:90:57:9f:6c:
                    87:4e:f5:a3:6e:0e:f7:f3:f9:d8:9d:13:03:cf:ac:
                    54:80:e9:5c:97:99:16:51:c9:0f:e7:39:fd:b3:86:
                    51:80:7e:fc:e8:3a:83:9a:d8:cd:da:f0:8e:9d:34:
                    7e:17:22:31:28:d2:08:4b:d1:f3:c4:b0:62:b0:a2:
                    7d:24:f8:f3:6d:85:0a:8c:5c:b1:cb:da:eb:69:43:
                    d7:d4:97:e6:e7:ec:74:ba:38:a7:7f:f8:d0:3c:67:
                    b9:80:ff:1d:58:2a:ab:58:03:1c:dc:60:e0:c9:8c:
                    96:9d:c2:38:63:ec:aa:45:8c:7f:03:ed:76:a8:fa:
                    83:e9:99:9e:6f:b3:4a:7f:9b:a5:75:cb:71:11:0c:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:1A:2F:C1:C8:F4:24:67:04:85:42:A0:4B:B4:83:9C:23:E3:80
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/65A36988DF1911EC8F85991EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:58:f8:2c:e7:50:70:5e:9b:3e:38:3a:7c:17:72:3c:be:
         ea:19:f3:af:10:2e:a1:34:ee:fe:53:3f:f5:23:0f:ec:a0:50:
         d6:cd:70:83:c6:b0:cf:fe:2d:d2:a7:e4:97:5f:f7:73:11:bf:
         04:de:de:19:6c:ab:4b:31:f2:0d:75:a5:8f:b1:83:c1:bc:71:
         db:20:7e:20:d7:dd:24:21:25:63:57:f9:d1:ac:08:67:74:d6:
         31:b7:88:b8:9d:db:39:fe:fc:ee:74:e1:14:c1:42:6c:60:e8:
         ae:30:03:64:76:ef:a4:b5:5b:c9:6e:96:9c:7f:7b:67:86:5f:
         4c:6f:bf:e9:f8:f5:b9:6d:b6:1c:4b:83:db:07:8a:24:55:57:
         17:10:da:35:7d:28:07:f0:a1:77:d6:ea:df:5e:d2:1e:e3:82:
         50:87:e4:be:c7:bd:af:b3:8e:14:85:a0:42:13:45:c0:a4:04:
         a3:08:e9:c5:14:21:af:22:8a:5a:9f:d3:38:24:8f:2b:3c:4d:
         dd:a2:6d:c9:fa:e8:6a:39:b7:0f:24:e0:ff:f0:16:c7:93:b5:
         86:9e:c0:3a:c5:b6:d1:d9:bf:91:7f:d4:4a:6c:54:a5:3b:5f:
         01:bc:63:70:51:fe:6a:75:75:2a:d2:61:cf:13:85:8e:e0:18:
         23:eb:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org