Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa
File:                     C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa (raw, json)
Hash identifier:          VE9HLG3KNhc6ufte/7GHFa/1lZVn4DtNA8NTgEIeYMA=
Subject key identifier:   40:44:E3:E1:39:49:91:0D:A7:F3:20:BC:69:21:70:9A:D4:94:FE:C1
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       04FE
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:27 +0000
ROA not before:           Wed 31 Jul 2024 02:33:27 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     138344
IP address blocks:        27.254.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278 (0x4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:33:27 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a276-2bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:c2:b0:32:87:e2:da:ed:28:db:8b:04:65:
                    f2:12:e3:e8:3f:f4:b7:b3:93:86:d4:91:55:46:3c:
                    98:90:44:39:6e:10:23:d6:b9:06:3a:ef:eb:b5:c2:
                    64:57:4b:2b:2b:30:72:25:d7:21:15:31:c8:cf:7a:
                    3b:a6:26:15:cf:5d:94:ee:91:62:7b:d8:c5:e7:66:
                    45:17:3d:68:cf:5f:66:d4:be:4b:f4:87:3a:ab:70:
                    6c:f2:2d:97:13:bd:cd:bb:0d:76:6a:d6:35:50:28:
                    5d:ee:5e:34:d1:d6:6b:7b:48:bb:75:12:d0:96:5d:
                    76:46:d6:66:99:61:4c:1e:26:9b:15:ee:4a:3a:ac:
                    fe:0f:50:01:a8:e9:0f:4a:23:cf:60:a9:e3:cb:c2:
                    1f:e4:1b:c7:cd:54:b4:65:c1:e4:c4:08:dc:84:ca:
                    1d:1c:b9:da:f7:c3:6b:de:3f:c6:fb:3f:a0:64:06:
                    9e:a8:fa:c6:02:64:76:7c:82:5b:df:d1:33:a0:b0:
                    c0:07:ea:9e:50:d2:86:5c:b7:87:63:61:cc:4e:52:
                    a7:5a:a9:21:5d:cd:be:07:4e:f3:dc:a3:00:bd:5e:
                    9d:f5:0d:60:b8:14:ea:63:25:bf:cd:7e:db:ba:6f:
                    57:13:fb:0e:16:7c:18:d8:76:d1:1e:d7:ef:dd:33:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:44:E3:E1:39:49:91:0D:A7:F3:20:BC:69:21:70:9A:D4:94:FE:C1
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:02:d2:41:c3:fb:5f:a1:fe:bb:b5:1f:01:f2:b6:1b:69:b6:
         ee:76:bd:54:68:0a:04:0d:83:11:fb:0a:98:12:d0:18:ad:10:
         4f:54:40:ea:c7:50:0f:d1:da:11:52:d1:d4:2f:fb:9d:a6:18:
         d2:26:8c:25:05:eb:08:93:a1:07:ff:aa:2d:05:e1:ba:7b:1c:
         70:f9:8e:73:cd:f9:36:30:80:61:06:27:ac:a0:86:f2:63:11:
         17:65:5c:ec:84:0a:3a:e6:60:8e:0e:05:e5:aa:08:48:d7:5d:
         f8:93:08:82:c9:23:9f:26:e3:da:5c:84:22:78:61:db:bf:6a:
         58:27:6e:95:9c:75:53:50:00:cb:2d:b7:88:bb:b6:f6:1d:c6:
         6a:8a:64:fc:43:52:c2:2b:ae:4f:60:a1:59:fe:d3:c5:46:64:
         2b:08:4a:08:63:45:26:43:17:f8:80:81:f0:55:57:01:34:00:
         d1:6d:27:ca:2f:c3:7e:80:46:ea:1c:ce:8a:f7:b4:0b:37:6a:
         ee:75:52:46:50:7c:7e:61:fb:8c:68:37:0b:70:13:bd:05:c0:
         17:28:f9:d3:24:73:0a:25:c3:6c:9a:df:c6:93:65:03:b7:96:
         d5:7d:3b:29:89:c0:1f:1f:28:2e:b9:8d:04:38:33:be:a8:6a:
         6d:00:c1:c0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjQwNzMxMDIzMzI3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5YTI3Ni0yYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8XCsDKH4trtKNuLBGXyEuPoP/S3s5OG1JFVRjyYkEQ5bhAj1rkGOu/rtcJk
V0srKzByJdchFTHIz3o7piYVz12U7pFie9jF52ZFFz1oz19m1L5L9Ic6q3Bs8i2X
E73Nuw12atY1UChd7l400dZre0i7dRLQll12RtZmmWFMHiabFe5KOqz+D1ABqOkP
SiPPYKnjy8If5BvHzVS0ZcHkxAjchModHLna98Nr3j/G+z+gZAaeqPrGAmR2fIJb
39EzoLDAB+qeUNKGXLeHY2HMTlKnWqkhXc2+B07z3KMAvV6d9Q1guBTqYyW/zX7b
um9XE/sOFnwY2HbRHtfv3TN3CwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEBE4+E5
SZENp/MgvGkhcJrUlP7BMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQzVEODg2MUVE
RjZDMTFFQ0I0QjlCMjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAb/t8wDQYJKoZIhvcNAQELBQADggEBAFcC0kHD+1+h/ru1
HwHythtptu52vVRoCgQNgxH7CpgS0BitEE9UQOrHUA/R2hFS0dQv+52mGNImjCUF
6wiToQf/qi0F4bp7HHD5jnPN+TYwgGEGJ6yghvJjERdlXOyECjrmYI4OBeWqCEjX
XfiTCILJI58m49pchCJ4Ydu/algnbpWcdVNQAMstt4i7tvYdxmqKZPxDUsIrrk9g
oVn+08VGZCsISghjRSZDF/iAgfBVVwE0ANFtJ8ovw36ARuoczor3tAs3au51UkZQ
fH5h+4xoNwtwE70FwBco+dMkcwolw2ya38aTZQO3ltV9OymJwB8fKC65jQQ4M76o
am0AwcA=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org