Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/679C01E6DF1911EC8F85991EC4F9AE02.roa
File:                     679C01E6DF1911EC8F85991EC4F9AE02.roa (raw, json)
Hash identifier:          u2Dn7Q7vy8ZMSbzBp7QNuzMgVCFaJaP2Nqfxyb6n9Eo=
Subject key identifier:   91:E6:63:32:7A:EB:26:B5:F2:2D:41:E6:5D:6B:FF:CD:7A:8D:FB:33
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       038B
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/679C01E6DF1911EC8F85991EC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:13 +0000
ROA not before:           Thu 27 Jul 2023 02:04:13 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     45173
IP address blocks:        58.137.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:13 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d09c-df53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:90:cd:90:39:68:43:2b:e2:1d:17:2c:99:
                    6d:7c:c7:12:b8:47:30:91:ad:02:07:b4:bd:e4:90:
                    1c:ef:17:be:43:2e:df:a0:b6:96:f0:99:e8:2c:e6:
                    d1:0d:4d:dd:13:0e:57:12:26:c6:dd:e2:2d:15:5d:
                    6e:29:fc:a0:12:c3:d1:a1:8d:a8:39:72:7c:45:e8:
                    5f:e3:ca:a9:de:57:ae:46:69:f1:ad:0a:3f:88:8c:
                    25:3d:7e:77:a0:4a:59:7c:bf:b1:b0:df:7e:da:33:
                    02:8b:ff:d4:db:31:da:b9:eb:46:fe:fe:88:d3:76:
                    8e:34:9d:73:d3:fe:03:79:c8:68:26:26:ee:22:d7:
                    d9:c8:ae:2d:3c:7b:e4:29:4e:73:12:45:96:db:a4:
                    f5:b2:c2:4b:67:4f:ed:80:f2:52:10:7d:fc:f4:a7:
                    8d:97:c7:76:43:0a:04:88:2a:62:f5:d4:9c:24:41:
                    7c:1e:33:38:a3:51:86:3e:cf:bb:56:97:47:c0:4c:
                    74:0e:25:fc:77:84:0f:96:d5:86:27:6f:7f:5b:e6:
                    24:4d:ed:19:83:42:c4:36:8f:4c:74:93:95:c3:7f:
                    28:2e:36:49:d7:64:74:a5:96:68:6b:1c:7e:2a:48:
                    67:30:df:65:cd:fa:a8:52:ef:70:bd:29:a7:95:9d:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E6:63:32:7A:EB:26:B5:F2:2D:41:E6:5D:6B:FF:CD:7A:8D:FB:33
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/679C01E6DF1911EC8F85991EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:ef:1f:02:e2:ef:08:5b:0a:67:fd:7d:bc:01:af:45:ee:64:
         5c:7c:f3:aa:2a:a0:31:f4:b5:11:3d:55:32:09:9e:41:d7:ee:
         47:3d:97:6f:2b:50:aa:50:78:25:f2:97:09:58:d9:15:af:73:
         db:fb:9b:2e:31:57:bf:29:10:75:ed:27:30:60:58:fc:21:b9:
         08:0a:f0:6b:43:71:6c:c0:0f:93:02:bc:ac:bb:8e:70:66:00:
         bf:37:a0:4b:dd:a1:ce:52:9d:61:a5:12:96:5d:66:31:9d:8d:
         a6:be:14:eb:3a:6d:d1:ea:d1:8e:99:a8:c5:3c:00:27:7f:59:
         45:12:a6:58:f2:df:c0:77:76:40:ef:b8:d1:ae:ab:3d:05:61:
         25:c1:3b:64:4f:df:bf:3a:57:e3:5e:be:01:bf:95:65:0a:77:
         6a:ad:73:ff:b1:a5:15:a1:c3:bf:60:b4:4e:4d:90:b3:ca:35:
         19:08:ac:e4:4e:19:9e:75:e9:8a:a0:bc:41:84:39:57:be:48:
         88:2b:51:2a:02:e1:e3:67:af:eb:b9:49:65:d4:54:b1:93:7b:
         b6:45:37:e7:1c:3b:41:c9:bc:e5:f6:9e:e2:29:e4:31:e9:61:
         7f:77:9a:a1:d4:d5:16:46:a9:d7:07:29:16:69:d7:9a:a8:3a:
         18:32:a8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 05:03:45 2024 by rpki-client on console-ams.rpki-client.org