Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BA537176DF6411ECBF2A5F4DC4F9AE02.roa
File:                     BA537176DF6411ECBF2A5F4DC4F9AE02.roa (raw, json)
Hash identifier:          mCTBJetBw2PBynpaPTXLJP7utPQkmUvJgi5hLZ0gygk=
Subject key identifier:   B4:DC:08:C7:13:6D:1E:AF:09:E1:95:3C:A7:FE:5D:BE:55:8A:70:0E
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0374
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BA537176DF6411ECBF2A5F4DC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:03:53 +0000
ROA not before:           Thu 27 Jul 2023 02:03:53 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     138422
IP address blocks:        27.254.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884 (0x374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:03:53 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d088-06c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:07:5a:4e:a9:a2:47:32:f7:78:fe:51:e0:
                    cc:79:38:39:67:09:15:0a:d7:5f:cd:f7:7b:08:31:
                    5f:11:0b:89:ff:ba:2e:e6:44:b4:c1:f6:86:77:50:
                    5c:1e:ce:e8:57:d6:2d:6d:5c:78:c0:7f:ab:90:75:
                    49:b3:fa:d1:42:e9:9e:85:dc:b3:3d:ee:68:f8:0a:
                    ea:56:a9:68:fe:05:92:4c:ff:ed:6b:b0:9e:fc:04:
                    51:66:86:8e:9a:87:2d:02:5e:2b:25:31:34:41:97:
                    25:9e:21:4b:20:80:b5:b5:e0:1b:a0:5a:82:43:0e:
                    fb:7f:f3:6b:be:de:79:94:aa:1f:05:4b:a8:69:3c:
                    ba:b2:cf:14:91:93:51:ce:f9:24:11:6f:96:13:43:
                    72:30:3d:2c:81:b4:17:ea:9d:77:0c:8b:5e:a6:17:
                    51:dd:e9:9b:52:40:4b:4c:2c:f2:cb:cd:05:c8:17:
                    97:e3:a8:b3:e0:eb:76:98:21:10:88:7f:33:12:6a:
                    f9:1e:9f:e5:c0:32:16:b1:34:17:26:78:8f:d5:b5:
                    46:e8:f0:bc:f6:4e:67:e3:9c:3c:95:ce:01:a7:a9:
                    b1:50:25:30:d7:bb:03:03:b1:1f:3d:12:bd:97:bc:
                    ca:f1:8d:1c:55:fa:15:c9:8a:04:50:72:0f:bb:ef:
                    72:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DC:08:C7:13:6D:1E:AF:09:E1:95:3C:A7:FE:5D:BE:55:8A:70:0E
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BA537176DF6411ECBF2A5F4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:59:20:7d:c1:82:c9:c3:ff:a8:39:b2:39:d6:f7:8c:ce:8c:
         8f:74:58:fb:9f:ab:e5:f6:a6:ac:13:9f:30:59:6e:02:bc:5c:
         71:b6:ff:43:92:b5:60:64:5b:e7:13:10:de:ea:32:9e:9a:95:
         91:d0:ae:bd:32:05:1e:07:bb:3b:1b:ab:69:7a:26:0f:9d:a6:
         76:8b:38:03:4b:d4:ea:b7:29:b1:b0:5a:04:bd:24:69:6f:05:
         9f:f1:1f:24:cd:ad:96:34:d0:e6:ea:4f:98:8f:70:60:5f:79:
         84:0a:2d:2f:6e:76:8f:7b:57:fa:fb:fa:fe:00:6a:62:96:78:
         37:e8:ff:0b:90:eb:2a:13:17:7c:c4:53:bd:da:1c:06:f3:47:
         80:7b:6d:2f:c4:72:9a:1a:be:ad:d9:32:65:93:bc:e0:f8:84:
         57:d9:8b:c7:2a:ca:b0:1c:b3:75:30:48:34:57:bc:3a:1a:71:
         e9:09:30:bb:af:98:83:1a:fc:b8:69:8c:31:3e:44:75:8c:56:
         86:a4:d1:d8:56:be:aa:cb:e6:b3:8a:e4:2a:c1:83:d8:ce:48:
         39:b7:29:7e:27:e9:71:9f:e5:55:f0:6a:79:17:60:b9:46:e6:
         ca:3f:9d:6e:26:f0:83:91:09:1d:37:6b:17:5e:e7:42:b5:e7:
         7f:0f:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 04:53:36 2024 by rpki-client on console-fra.rpki-client.org