Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C3ED28C8DF6C11ECB4B9B26AC4F9AE02.roa
File:                     C3ED28C8DF6C11ECB4B9B26AC4F9AE02.roa (raw, json)
Hash identifier:          WtVGj0tNdL2/uwcc8GS7AHaiUAXzYUp4M+TM3gmToTM=
Subject key identifier:   1B:9F:17:66:06:49:B8:A1:A6:1E:50:7B:BE:E1:F3:41:48:59:70:0A
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       04F0
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C3ED28C8DF6C11ECB4B9B26AC4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:15 +0000
ROA not before:           Wed 31 Jul 2024 02:33:15 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     132013
IP address blocks:        27.254.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:33:15 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a26a-b870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f7:1d:aa:d1:15:3e:c4:be:e0:8b:24:25:f6:
                    29:68:67:d7:b2:f1:2b:9f:d1:a1:62:54:93:f1:42:
                    7e:24:51:5f:f2:77:c6:c0:1f:b7:36:20:35:de:cc:
                    f7:bb:a4:28:5c:72:79:6f:dc:30:e3:3e:a6:86:28:
                    eb:32:70:ba:e1:80:70:4f:3f:b5:f5:df:ce:67:11:
                    b5:f2:29:70:3e:82:65:79:85:12:a0:f7:c8:84:35:
                    86:d0:ad:97:c8:90:72:cd:46:a3:b3:d8:d7:4f:16:
                    f8:61:5c:12:1f:aa:90:19:49:24:dc:3b:1f:73:23:
                    7e:9b:62:48:f0:9b:ba:70:bf:ae:c5:44:7c:74:ff:
                    0c:c7:35:3f:74:3a:1c:38:1d:8f:8e:0e:af:22:df:
                    c1:29:58:0e:02:bc:87:bf:75:42:9d:da:ff:fa:00:
                    15:45:98:66:d0:8e:5f:9a:c3:82:54:87:41:69:06:
                    f8:e9:dc:79:69:3b:d7:ca:e7:47:ff:3f:0a:88:b1:
                    f2:7d:97:b0:27:be:a6:f2:e5:74:c0:3e:99:eb:85:
                    98:fc:8d:cd:07:7e:a4:93:a2:a6:7d:bc:ca:f1:bb:
                    4d:83:e4:43:8e:94:2a:c3:97:ef:4d:fc:a6:e2:bb:
                    8a:d1:bb:b5:87:b9:91:ab:14:90:3d:27:3c:c7:3f:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:17:66:06:49:B8:A1:A6:1E:50:7B:BE:E1:F3:41:48:59:70:0A
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C3ED28C8DF6C11ECB4B9B26AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:07:ee:2f:2c:75:03:57:71:de:2d:02:f7:fd:65:c1:ea:77:
         84:3b:79:34:e1:4c:1d:87:14:8e:53:b0:2e:23:8b:28:56:c5:
         f3:40:ba:73:b7:cd:32:d6:fd:2c:08:24:c6:28:14:bb:c1:7d:
         60:ca:96:02:1a:ba:df:5a:ea:9c:83:d1:c4:6b:4a:c4:ec:cc:
         b9:f0:91:8b:6a:98:9c:bf:a3:e8:ca:68:33:45:00:6a:6f:7a:
         5a:ee:9c:7e:bb:15:2e:14:bd:27:0f:40:1c:c3:a6:49:d4:c1:
         e5:fb:29:cc:13:9d:b8:4d:bf:a5:cc:1e:38:68:66:16:45:9d:
         1d:e2:65:db:5c:39:a1:55:46:77:a5:ef:32:49:3e:79:2a:29:
         30:92:62:29:9c:a3:43:ce:8d:fa:2a:b9:d6:50:03:78:2a:52:
         b4:2f:0b:e2:f7:64:7f:d3:aa:41:7b:e0:e3:42:57:0c:15:ff:
         b8:80:31:1a:34:0a:97:9f:b6:7b:70:90:24:12:23:01:0a:21:
         30:8c:27:e5:6e:b3:47:c8:32:45:0c:8f:78:7d:2c:2c:ca:46:
         5d:d8:7d:2f:dc:95:74:33:25:36:64:fa:44:56:66:53:89:02:
         88:b0:76:41:a5:df:a1:60:33:92:a6:0e:b5:3e:7e:bc:da:a0:
         17:5d:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org