Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7DDB945CDF1011ECA2548C86C4F9AE02.roa
File:                     7DDB945CDF1011ECA2548C86C4F9AE02.roa (raw, json)
Hash identifier:          vFTjAuZjggtdG9lye3yJ7P7APNCds0fLCxsMo8+3z20=
Subject key identifier:   C5:84:7B:7C:17:5D:B9:F0:85:15:F9:AD:68:1A:13:53:0F:DE:C9:47
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0505
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7DDB945CDF1011ECA2548C86C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:32 +0000
ROA not before:           Wed 31 Jul 2024 02:33:32 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     17980
IP address blocks:        58.137.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1285 (0x505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:33:32 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a27c-3754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:a8:e0:c2:19:23:c2:25:6e:f8:e6:7c:ca:
                    a5:d7:c1:05:99:3d:29:29:23:b3:d0:c7:b0:d6:26:
                    b9:74:89:87:78:13:00:cb:db:cc:eb:25:82:19:3e:
                    8c:7e:5a:94:10:37:1b:87:9c:61:54:d0:6e:82:8b:
                    df:b0:8a:88:9e:f5:ca:f9:3c:92:e3:f4:2f:80:c4:
                    2e:be:ed:f1:d7:51:0e:3f:de:57:06:43:cd:26:31:
                    9e:06:4f:96:49:62:7c:03:15:de:b0:88:3a:b1:f8:
                    33:63:27:84:5a:9a:65:89:fc:47:4e:36:22:38:06:
                    a3:59:1f:a0:e5:86:fa:32:84:08:79:8a:af:36:99:
                    6d:fd:42:4f:85:e6:a7:06:50:94:a7:01:ba:3e:77:
                    8a:ea:39:03:99:c2:9a:af:da:a6:f7:ca:53:f8:4a:
                    7b:e1:cb:44:57:36:3c:77:d5:89:8c:63:0c:54:95:
                    36:51:6b:86:23:d0:ba:0f:f6:29:3c:fa:8d:4a:f5:
                    0c:c6:e0:aa:f0:b4:76:be:df:5c:35:52:62:51:b9:
                    ac:2d:22:ed:57:eb:92:da:8c:42:c3:cd:ee:cb:a8:
                    f9:63:b7:b1:3b:84:cc:1b:eb:53:68:6d:a7:87:85:
                    23:8d:a2:e4:cd:70:bf:82:89:15:ee:bc:7a:9c:7f:
                    30:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:84:7B:7C:17:5D:B9:F0:85:15:F9:AD:68:1A:13:53:0F:DE:C9:47
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7DDB945CDF1011ECA2548C86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:b6:94:e8:c7:b2:cd:a9:77:d4:78:d8:4c:e2:0c:f3:58:
         9e:fc:b6:e3:ea:4b:6c:91:ad:8b:10:00:e3:d5:67:6f:cb:7c:
         45:b8:8c:ea:3a:46:96:55:0c:b8:cf:d0:29:59:9e:11:d7:2f:
         d1:fd:1b:47:64:b4:97:5b:33:3e:a3:55:fd:fb:90:a0:ed:bd:
         41:dc:9d:7b:d6:a4:f1:fb:72:d6:78:e0:43:e1:9c:ca:1a:41:
         5a:a7:07:99:58:bc:a2:66:93:9c:ac:db:df:24:94:32:41:45:
         eb:f7:f3:11:a9:5b:b2:77:3b:70:7f:56:7c:33:91:1f:7b:d7:
         d7:98:ad:65:06:af:4a:49:d1:07:a9:98:69:11:70:86:3c:ad:
         05:81:32:91:62:22:01:b8:d7:50:66:9f:ea:57:ef:36:3b:fc:
         27:d1:58:8c:65:91:af:a2:1a:b6:ec:fb:0b:4a:b1:47:ee:5c:
         cb:43:e6:4b:b1:b8:ca:b0:1c:f8:60:50:35:ca:16:21:6b:56:
         ba:dd:2a:51:b7:60:8b:ff:19:7a:5a:7e:37:c5:af:6c:7a:83:
         10:39:13:c6:fd:cc:c4:86:12:ec:c1:5e:b9:71:db:13:27:82:
         0f:2d:7a:b7:32:c6:bc:23:f8:b7:19:45:53:d2:69:53:97:55:
         28:c7:c2:b4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjQwNzMxMDIzMzMyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5YTI3Yy0zNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoGo4MIZI8IlbvjmfMql18EFmT0pKSOz0Mew1ia5dImHeBMAy9vM6yWCGT6M
flqUEDcbh5xhVNBugovfsIqInvXK+TyS4/QvgMQuvu3x11EOP95XBkPNJjGeBk+W
SWJ8AxXesIg6sfgzYyeEWpplifxHTjYiOAajWR+g5Yb6MoQIeYqvNplt/UJPhean
BlCUpwG6PneK6jkDmcKar9qm98pT+Ep74ctEVzY8d9WJjGMMVJU2UWuGI9C6D/Yp
PPqNSvUMxuCq8LR2vt9cNVJiUbmsLSLtV+uS2oxCw83uy6j5Y7exO4TMG+tTaG2n
h4UjjaLkzXC/gokV7rx6nH8w6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMWEe3wX
XbnwhRX5rWgaE1MP3slHMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvN0REQjk0NUNE
RjEwMTFFQ0EyNTQ4Qzg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAA6iWwwDQYJKoZIhvcNAQELBQADggEBAEnytpTox7LNqXfU
eNhM4gzzWJ78tuPqS2yRrYsQAOPVZ2/LfEW4jOo6RpZVDLjP0ClZnhHXL9H9G0dk
tJdbMz6jVf37kKDtvUHcnXvWpPH7ctZ44EPhnMoaQVqnB5lYvKJmk5ys298klDJB
Rev38xGpW7J3O3B/VnwzkR9719eYrWUGr0pJ0QepmGkRcIY8rQWBMpFiIgG411Bm
n+pX7zY7/CfRWIxlka+iGrbs+wtKsUfuXMtD5kuxuMqwHPhgUDXKFiFrVrrdKlG3
YIv/GXpafjfFr2x6gxA5E8b9zMSGEuzBXrlx2xMngg8tercyxrwj+LcZRVPSaVOX
VSjHwrQ=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org