Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F8312D62DD8E11EC8005001CC4F9AE02.roa
File:                     F8312D62DD8E11EC8005001CC4F9AE02.roa (raw, json)
Hash identifier:          ZhIhCf55lM9fQhORheRgaeg87aoNJ5Og8sC+bBGIsk0=
Subject key identifier:   F6:6F:4B:5A:D4:5F:0B:4D:48:62:82:3F:CE:5F:A4:61:5E:F7:E9:E6
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       039E
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F8312D62DD8E11EC8005001CC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:30 +0000
ROA not before:           Thu 27 Jul 2023 02:04:30 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     63989
IP address blocks:        27.254.140.0/24 maxlen: 24
                          27.254.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:30 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d0ae-b235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:f6:28:14:fb:24:a7:5d:b6:80:99:48:9d:
                    20:c4:90:65:72:93:08:a3:cc:10:ab:e0:09:d1:ba:
                    31:c3:ee:c4:68:57:5e:12:60:a2:b4:c6:4f:6c:bf:
                    58:b6:2e:c6:e3:9e:6e:02:32:4a:e6:86:30:19:57:
                    ff:91:10:de:fe:9f:e1:48:4e:ca:d5:e7:8b:1a:c7:
                    d9:1e:26:75:1f:c5:fc:6b:b2:d9:e1:07:c3:f1:64:
                    d2:1f:4b:8e:d0:53:c5:b4:d8:59:d4:0d:7c:19:9b:
                    dd:ae:95:30:2d:7e:d4:15:c2:5c:6e:91:90:8e:0e:
                    cf:1f:22:69:a6:b5:64:81:11:4a:6d:86:ce:bd:87:
                    37:fb:c1:1c:27:34:72:0c:2e:eb:92:f0:28:8e:61:
                    56:f3:2e:7b:3a:78:55:50:82:0e:a9:54:0a:8e:c7:
                    11:4f:a1:c0:92:7e:b4:58:ee:55:7a:d2:e0:ee:79:
                    17:ad:c5:96:74:68:f8:f2:4c:77:d9:55:29:75:4b:
                    6d:43:35:3f:0b:39:a0:33:0c:7b:aa:c4:8b:ab:0f:
                    02:cf:90:69:77:82:85:c1:b1:4b:c4:d1:27:0d:50:
                    22:63:0a:69:6f:3c:4c:ae:49:72:4c:73:06:28:d4:
                    38:9d:12:1d:24:9d:cb:eb:d4:c4:39:f6:ff:6e:5e:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6F:4B:5A:D4:5F:0B:4D:48:62:82:3F:CE:5F:A4:61:5E:F7:E9:E6
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F8312D62DD8E11EC8005001CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.140.0/24
                  27.254.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:fb:8f:45:a8:79:68:f9:2b:dd:0b:44:56:33:7a:8b:2e:
         43:91:10:77:d0:dc:83:fe:df:53:2b:f1:76:88:9b:c9:04:c0:
         fc:d5:15:ed:8b:01:3d:e0:fe:88:ca:c3:44:70:57:be:da:99:
         f7:13:37:55:a7:75:68:ef:70:6f:f8:bd:e3:c0:98:33:1c:57:
         f6:7c:7e:83:34:50:3c:7e:bf:0d:8e:04:df:4c:36:a2:c5:98:
         7b:45:6c:53:ce:04:98:8e:62:7e:d4:8e:42:e1:e0:fd:79:d9:
         38:b4:c1:02:1e:29:af:0d:e0:c6:12:ff:bb:36:50:85:06:83:
         dd:5b:27:04:07:e3:a4:fc:ed:6f:8c:36:05:23:6b:6e:1e:1e:
         b4:a3:ca:d4:11:5c:08:cd:9b:5b:1d:ac:e9:cf:7d:6e:7c:c9:
         14:43:ca:a4:0c:80:70:b0:d3:48:38:a9:75:1e:77:9b:7f:b3:
         91:4f:ed:ec:20:df:6c:d0:57:fb:f2:cc:e6:99:ea:15:a3:19:
         e7:73:ec:31:28:9c:82:40:10:51:8a:51:9e:b0:d3:af:9a:d5:
         cb:9d:e2:bb:50:56:ef:ea:04:ce:34:4a:f9:cd:3e:04:29:86:
         17:68:c0:1f:6b:0d:04:cc:4b:96:7f:55:08:17:ee:0f:35:dd:
         f6:c1:2d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:13 2024 by rpki-client on console-ams.rpki-client.org