Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B807F672DF6811EC866E2171C4F9AE02.roa
File:                     B807F672DF6811EC866E2171C4F9AE02.roa (raw, json)
Hash identifier:          eOOWsg8eo/IsDDLWYdnTETfZw1pNyDXY/AntZ/bK5kg=
Subject key identifier:   33:99:51:31:AF:98:14:13:2A:DF:48:0F:58:C0:81:7B:70:C0:83:D4
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0522
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B807F672DF6811EC866E2171C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:57 +0000
ROA not before:           Wed 31 Jul 2024 02:33:57 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     55636
IP address blocks:        27.254.112.0/24 maxlen: 24
                          27.254.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:33:57 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a295-0b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:81:41:3a:aa:26:8f:af:83:dc:9a:87:f6:
                    bc:b1:2e:24:f3:90:3a:2e:7e:97:79:d8:4e:de:ba:
                    cb:20:3c:6b:d6:dc:e5:0b:6b:e9:88:12:e5:ab:4d:
                    94:44:a6:1a:c0:33:70:a6:10:90:e3:71:ab:ce:42:
                    72:06:60:53:b5:05:34:f1:ae:a0:8c:21:3b:54:84:
                    b2:f8:6e:06:10:a4:da:bc:48:79:0c:26:7b:3b:a0:
                    2b:25:fd:7f:31:ba:9f:3f:27:2d:94:69:ab:d6:5d:
                    54:18:24:14:83:18:fb:be:fa:16:d5:a4:b3:24:da:
                    a0:6b:65:fa:31:8c:53:b6:f9:90:1d:c9:73:2a:3e:
                    71:5e:c7:50:d3:bf:c2:d4:23:57:af:48:a9:1f:05:
                    5a:e3:7f:8c:30:62:28:c3:ca:39:91:d3:c9:f2:52:
                    87:d9:b6:7a:83:20:c3:c8:18:8e:fa:07:e3:29:40:
                    ec:78:0f:0a:e0:35:7e:9c:39:1a:58:64:64:71:db:
                    8f:00:7d:af:f0:99:e8:ba:7e:02:51:c6:f4:52:7f:
                    e2:49:0f:c0:71:77:87:43:85:34:12:ce:31:6b:c0:
                    07:fb:22:9b:6b:06:b9:fc:d2:eb:9a:ac:57:bb:b8:
                    f4:55:32:fa:22:37:6f:34:92:c5:ff:b7:e4:0d:fa:
                    34:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:99:51:31:AF:98:14:13:2A:DF:48:0F:58:C0:81:7B:70:C0:83:D4
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B807F672DF6811EC866E2171C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:27:29:11:82:13:f1:a9:c9:5d:e2:fd:a7:15:ba:05:e2:e4:
         be:73:13:db:f7:dc:d5:65:bf:ec:89:71:96:ea:03:ca:a1:e1:
         49:81:39:d1:0e:b3:24:69:f6:02:c2:f2:71:a6:79:6d:37:b6:
         11:fa:79:d5:a0:bc:7b:a0:3c:4a:33:51:82:f9:dc:30:b6:22:
         a2:57:79:e3:70:2d:f8:2e:0a:0b:0f:b4:af:09:b3:7a:b0:b0:
         7d:9c:6a:e1:99:f1:a6:fc:ae:20:ee:00:b2:85:99:6d:a5:7e:
         63:e6:98:3b:54:7f:5d:eb:47:e5:bb:43:79:e2:ff:aa:8a:50:
         7a:c2:d3:64:fc:15:46:2a:51:e9:9a:f3:b6:c3:14:e7:67:d7:
         b1:7d:2e:ef:4d:6c:23:f5:d7:48:74:7b:f5:93:86:b1:0d:9a:
         0c:26:39:da:1b:90:29:b4:46:10:a7:06:29:be:0d:81:a1:0a:
         5b:0f:ae:bf:70:f7:2b:ba:ee:e9:0a:f1:f1:31:90:ee:19:ee:
         3e:a9:80:72:10:e9:ac:09:9b:d3:12:6b:b5:a7:87:85:8d:5a:
         63:80:78:08:99:5e:da:b6:f7:d8:b6:b3:1b:3a:3b:40:5e:53:
         fc:be:dc:c2:fc:a0:69:95:04:0e:31:6f:fa:eb:ac:4d:ea:85:
         8c:4b:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org