Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D80ABAE0B0F811E595E0F761C4F9AE02.roa
File:                     D80ABAE0B0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier:          c22mNO/5Hdkx8PFMzFu3jsnlkAhn1ItEIOY2vepnAxw=
Subject key identifier:   80:26:4F:12:4B:75:AC:35:F6:01:40:BB:13:8C:C7:2C:AF:91:23:83
Certificate issuer:       /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial:       341E
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D80ABAE0B0F811E595E0F761C4F9AE02.roa
Signing time:             Tue 02 Apr 2024 14:50:09 +0000
ROA not before:           Tue 02 Apr 2024 14:50:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     38186
IP address blocks:        27.50.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
                          rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13342 (0x341e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
        Validity
            Not Before: Apr  2 14:50:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660c1b20-c467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7a:0d:4e:89:b9:30:d0:35:8c:c2:7b:74:01:
                    5b:83:19:9e:88:17:a6:cf:83:e3:b5:31:f3:63:75:
                    92:b9:ce:3d:12:c3:e7:11:64:b3:49:d7:95:9c:fa:
                    fa:4b:40:20:03:30:b0:97:fe:34:ed:e2:57:99:3b:
                    f6:57:c7:e4:00:b9:54:2a:83:91:01:49:99:72:97:
                    5f:46:73:c3:ee:0b:b6:00:f3:e0:de:6a:fe:cc:53:
                    01:94:df:b7:5d:8d:a6:dd:92:40:a7:f1:3b:41:b7:
                    11:d4:c4:4a:7b:d6:48:bc:92:d1:88:72:3e:82:82:
                    ef:c0:a3:27:af:ee:fc:35:43:04:31:2f:d5:b9:9b:
                    19:42:2b:04:e8:a1:7b:6c:a5:3e:ce:35:4e:fc:a1:
                    e1:8e:c2:3e:af:cb:14:69:69:da:b3:38:94:25:52:
                    26:fd:3e:a7:f5:b9:35:93:3e:af:13:16:76:92:31:
                    a9:9f:d4:82:b2:d1:27:c1:77:1e:fc:af:10:1d:b3:
                    af:49:c6:15:e9:af:a7:70:23:ff:c3:ab:0f:2d:cc:
                    5c:21:51:0b:b6:6e:56:1c:2b:11:5d:10:d9:3c:09:
                    79:37:77:25:67:e3:a0:59:39:ea:4d:f1:3e:66:98:
                    ea:2a:80:a8:50:a5:0c:de:04:24:03:36:78:c2:8a:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:26:4F:12:4B:75:AC:35:F6:01:40:BB:13:8C:C7:2C:AF:91:23:83
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D80ABAE0B0F811E595E0F761C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:ad:75:9b:f6:a5:8e:64:8b:0e:3c:88:f7:bc:6c:85:57:
         df:4d:4b:ca:6f:2e:b6:04:7b:50:7e:49:40:1c:f5:9d:fb:70:
         ec:b2:61:78:07:1b:d0:0c:9f:28:c3:87:b4:af:36:53:65:a9:
         3b:30:cf:57:b8:a0:69:1f:7f:73:48:b5:f7:41:76:b9:f2:03:
         a2:0a:f3:ac:b2:cc:da:e8:ff:db:70:cc:44:8a:c2:46:3a:2b:
         50:76:d2:f1:86:1a:2c:4e:9e:29:3c:4e:3c:bc:c5:d1:57:2c:
         46:14:d1:42:34:18:0b:98:2d:70:c8:b6:80:92:d6:96:25:16:
         d6:a3:87:b2:7f:47:d0:d4:45:a0:c5:86:d3:9d:6a:20:42:e9:
         e4:1b:71:5a:9a:3c:0e:db:ac:f4:38:73:65:4f:f5:6c:46:9c:
         72:f1:ab:48:64:b1:8e:9d:5a:fe:84:cd:12:c7:a6:64:6e:d9:
         cd:ba:49:15:ab:ec:dc:f1:2c:77:e4:cc:56:db:cb:03:ee:7b:
         f9:ad:a5:fc:18:b7:a2:ff:19:91:ca:c0:fa:e8:5a:8a:2a:14:
         60:e5:ee:e0:5d:fa:e6:9b:ef:63:34:92:f8:a3:71:4c:91:92:
         04:58:33:48:fc:46:44:28:fb:3e:4f:cb:ad:5b:da:c6:45:a5:
         cd:b9:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:07 2024 by rpki-client on console-ams.rpki-client.org