Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6CF915F2636511EFAB755B09C4F9AE02.roa
File:                     6CF915F2636511EFAB755B09C4F9AE02.roa (raw, json)
Hash identifier:          wIx/XlLyhYkpw/Bx/6RzvXtwuopDhNz8FBZHdEYiLg4=
Subject key identifier:   4D:2D:E5:6C:4F:D1:07:CB:44:06:F2:B2:EB:06:64:09:0F:81:2E:93
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       054C
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6CF915F2636511EFAB755B09C4F9AE02.roa
Signing time:             Mon 26 Aug 2024 04:41:14 +0000
ROA not before:           Mon 26 Aug 2024 04:41:14 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     59374
IP address blocks:        27.254.155.0/24 maxlen: 24
                          27.254.164.0/22 maxlen: 22
                          27.254.164.0/24 maxlen: 24
                          27.254.165.0/24 maxlen: 24
                          27.254.166.0/24 maxlen: 24
                          27.254.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 26 04:41:14 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66cc076a-77bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:0b:c6:f9:1d:ee:2e:a2:f2:d2:b4:45:28:
                    f6:92:f7:d4:af:91:e7:e9:e5:1b:cf:10:f0:81:e2:
                    4a:2b:bf:76:3b:88:05:fe:ea:f1:a6:59:f8:28:e3:
                    4d:ba:12:35:27:23:fe:c8:aa:8b:66:ed:34:cc:fa:
                    d9:d9:88:57:c8:02:a8:b2:ce:a7:ed:4f:b2:20:29:
                    b9:38:64:a8:49:95:6a:d7:83:c8:c3:05:83:6f:b0:
                    42:3b:1a:cc:c1:48:50:b1:e5:fa:7a:3c:b5:a6:22:
                    6b:41:f1:51:15:8b:10:6b:4d:69:8e:6e:2f:0d:de:
                    c1:9e:45:03:7d:62:00:32:fb:db:29:17:4a:f4:2b:
                    a0:d5:be:f4:32:55:cf:90:fa:d2:8b:60:c5:8a:11:
                    5b:18:3e:56:b9:8c:03:8e:e6:a1:93:8a:96:bf:72:
                    d8:6b:0e:63:a4:66:3c:76:2f:16:eb:91:6f:7f:5c:
                    67:db:1a:75:86:94:fc:b0:8f:e5:33:74:45:f2:b2:
                    5c:b3:fb:80:ed:70:ea:4b:c1:43:27:8c:cf:af:a0:
                    1d:44:c0:db:13:12:df:f4:c9:25:31:35:eb:0c:c9:
                    b1:4e:d0:fc:c4:91:8d:b6:65:6a:5c:67:7d:2a:12:
                    a8:c2:f6:09:9e:d4:b2:af:c6:64:ff:cb:30:1b:50:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:E5:6C:4F:D1:07:CB:44:06:F2:B2:EB:06:64:09:0F:81:2E:93
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6CF915F2636511EFAB755B09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.155.0/24
                  27.254.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:8c:08:7d:2e:8d:a3:5e:0b:d1:6c:19:87:46:18:8f:37:
         a5:7e:00:d1:04:b2:4a:ae:29:d5:5c:4c:ea:d1:45:c1:c3:30:
         ce:4c:e1:82:7f:d7:8d:bf:a4:b3:61:75:be:6a:d4:36:21:0d:
         49:d9:47:28:b7:19:66:27:cd:05:b4:ec:ec:2e:88:4e:38:7b:
         17:04:c7:dd:76:9b:29:bf:63:6b:fe:45:99:28:ba:a0:26:d3:
         70:0e:5f:bf:c4:34:9f:b4:e6:95:e5:96:f3:d1:f3:d5:36:98:
         af:b2:d6:72:32:fe:63:f7:93:55:2d:1f:72:0c:31:3a:47:f0:
         7a:98:bc:82:df:7f:23:35:bd:34:a1:a3:6b:46:bd:a7:34:cd:
         73:dd:e4:44:f7:6c:12:6b:79:2f:e3:de:36:a5:32:c6:90:b3:
         f5:63:44:23:f7:3d:f5:65:f9:1b:90:ae:9c:dd:1d:4e:80:b8:
         80:69:ff:5f:33:1f:03:a8:bb:db:87:7a:41:48:ba:96:f5:18:
         bd:fd:a3:b5:55:f3:54:86:91:89:86:c5:d6:dd:6c:fa:d0:4b:
         09:16:b9:f2:f7:d6:02:d6:39:ea:15:f9:0e:30:b2:3c:7c:51:
         99:dc:6c:41:f1:2e:cb:d8:61:19:26:53:72:63:f4:30:74:25:
         39:ca:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org