Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/63E8739003C111EEB2272068C4F9AE02.roa
File:                     63E8739003C111EEB2272068C4F9AE02.roa (raw, json)
Hash identifier:          GruXBNsoLQvj/P1gk1jgYpHV8Jab2lStx+J+qr87vdM=
Subject key identifier:   93:01:06:32:D5:5E:6B:5E:77:0C:E2:8D:1B:C5:6C:C2:72:72:8B:73
Certificate issuer:       /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
Certificate serial:       0307
Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/63E8739003C111EEB2272068C4F9AE02.roa
Signing time:             Tue 19 Sep 2023 01:42:57 +0000
ROA not before:           Tue 19 Sep 2023 01:42:57 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     135060
IP address blocks:        123.253.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl
                          rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 02:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775 (0x307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
        Validity
            Not Before: Sep 19 01:42:57 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6508fca1-bb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:0f:21:a1:e5:77:3c:29:c3:c9:8f:08:43:48:
                    9b:a4:5d:8b:9d:be:d2:35:08:0e:7f:83:29:fc:50:
                    96:39:4d:8b:7e:23:52:b3:9d:bd:1f:6a:57:a8:36:
                    5d:86:a3:42:f5:23:a4:e9:15:2d:ce:c7:2e:40:62:
                    2c:f1:d9:a4:12:f7:8c:ec:45:b4:b0:92:4c:6e:54:
                    5c:f2:ae:79:fc:b3:23:c3:68:30:9d:9a:dd:4b:4b:
                    25:4e:cc:94:c0:8b:05:17:0f:0f:cc:7f:7e:8b:e8:
                    d1:7a:26:2c:f4:0f:eb:a4:11:a2:bc:cc:59:e8:81:
                    4c:6b:dd:fb:cf:47:b9:43:5b:59:1d:04:e2:1d:6d:
                    8f:24:81:73:64:e1:5b:e8:af:5f:e7:de:d1:b4:2c:
                    b0:73:59:25:c6:7a:b2:d3:1b:d1:e4:71:8b:bb:b9:
                    e8:96:e1:cf:96:8c:0f:7f:f4:d4:83:55:69:09:7a:
                    7e:c2:6e:44:27:48:06:39:c9:3b:0b:37:64:29:09:
                    a7:68:28:38:1e:01:05:a6:62:a9:a9:a4:b8:2a:ac:
                    9f:03:cb:43:06:f8:f6:5e:9c:a2:5c:19:8a:8c:c0:
                    47:4f:74:04:b1:ae:a9:a9:b8:2d:68:e3:9b:be:8d:
                    68:af:a7:37:98:44:1c:8c:0e:df:be:aa:b9:86:f2:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:01:06:32:D5:5E:6B:5E:77:0C:E2:8D:1B:C5:6C:C2:72:72:8B:73
            X509v3 Authority Key Identifier:
                keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/63E8739003C111EEB2272068C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:3e:ca:0c:1d:13:ed:38:aa:a8:f3:41:e9:1f:12:b6:8d:95:
         34:37:88:cb:87:1f:df:50:31:81:72:36:eb:30:27:78:c6:86:
         49:4d:fd:70:df:ec:45:23:b0:f4:68:09:8f:27:92:1e:35:70:
         1e:e3:30:f1:ac:bd:27:82:1a:39:e1:36:93:e3:1a:2b:c1:73:
         42:78:19:3e:3a:ea:df:09:6a:1b:cf:b2:74:db:3f:67:3a:11:
         11:21:4f:ff:39:7e:a5:dc:62:17:3f:5b:19:60:30:90:da:25:
         81:c3:08:fe:91:05:fb:b8:98:ad:b3:6a:74:6a:36:f6:48:86:
         75:f8:4a:b9:52:b8:39:a4:0d:0e:f6:7a:3e:bd:bf:ab:f1:9d:
         cd:4d:8f:cf:21:6a:03:b5:07:3a:cc:37:4b:b7:f6:3e:08:e8:
         7e:2d:1d:8c:e4:fa:ca:cf:2b:2c:ef:7a:9d:4c:46:71:22:d8:
         0e:3d:5b:a8:ce:19:38:fe:fc:c0:fd:4e:e4:fb:3f:63:76:13:
         e8:5e:50:c3:77:59:b0:4a:3e:8e:ad:dd:da:c0:85:d8:a4:b5:
         63:d3:ce:51:f9:23:fb:2c:47:48:5a:20:d1:c2:fd:ed:fd:1e:
         4a:a1:ee:de:54:46:e0:05:98:a6:8b:ed:cc:b2:a8:ac:9b:24:
         43:f1:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 03:32:48 2024 by rpki-client on console-fra.rpki-client.org