Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/63E8739003C111EEB2272068C4F9AE02.roa
File:                     63E8739003C111EEB2272068C4F9AE02.roa (raw, json)
Hash identifier:          /Rbx6OJhJ6ckosxCOp8Q7z2qAW9GwaEBJxfRz4+B/gY=
Subject key identifier:   84:D4:0E:49:59:19:18:67:1C:D6:31:63:E3:7C:B9:EA:52:3A:5F:2B
Certificate issuer:       /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
Certificate serial:       03C0
Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/63E8739003C111EEB2272068C4F9AE02.roa
Signing time:             Sat 31 Aug 2024 02:34:26 +0000
ROA not before:           Sat 31 Aug 2024 02:34:26 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     135060
IP address blocks:        123.253.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl
                          rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
        Validity
            Not Before: Aug 31 02:34:26 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=66d28131-99c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:89:51:e3:ea:cf:b3:cb:bf:f3:c4:3e:27:16:
                    0a:3e:7a:ec:4c:54:65:41:bb:08:90:71:08:ce:e2:
                    f3:bd:22:d4:e5:2c:53:6f:1e:39:32:4e:d0:59:3c:
                    3a:9c:3f:90:bf:59:46:5c:58:df:d5:4e:c3:7f:46:
                    92:19:8d:e2:95:ce:1a:ed:fb:f0:1c:ce:43:db:24:
                    a7:fe:ae:0f:54:2a:64:cb:ff:0a:ef:47:b0:5c:a9:
                    38:0e:6f:83:5d:32:e1:c3:f0:b3:47:20:49:c0:51:
                    74:93:e7:47:b9:cb:d5:3a:21:b0:cf:eb:5f:77:26:
                    ba:15:a6:e7:77:63:5c:24:9c:b4:17:5d:f9:d2:85:
                    34:fb:7a:7c:db:45:64:83:be:9c:b5:1a:f0:27:fe:
                    92:57:1c:80:1a:c3:cc:d1:1c:00:3b:c6:ee:e6:d9:
                    da:bf:ec:a3:75:fc:4d:e2:fe:3c:60:63:d6:f9:2e:
                    90:d0:be:f7:e1:c9:8b:e1:a6:24:47:a7:a6:8b:56:
                    0c:8d:da:5f:52:4c:8d:6e:3e:8e:97:55:3d:31:9a:
                    fe:cf:cf:1c:8e:30:43:7b:a5:8c:ad:12:95:7c:07:
                    35:28:c9:51:b9:5d:76:0e:ad:7f:6c:fa:50:2c:c1:
                    de:27:25:0a:43:6a:bf:33:12:67:5a:1c:2b:2b:a4:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D4:0E:49:59:19:18:67:1C:D6:31:63:E3:7C:B9:EA:52:3A:5F:2B
            X509v3 Authority Key Identifier:
                keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/63E8739003C111EEB2272068C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:83:74:19:dd:ca:b7:1e:ee:df:45:16:b5:dd:73:1d:62:0d:
         4c:6d:85:6b:dc:ce:eb:7b:d1:3a:4f:3b:3c:ce:3c:88:26:cd:
         7d:7d:e6:04:2f:dd:91:b8:a9:e0:2c:1a:b7:1b:43:37:17:8a:
         5a:2e:ee:54:7a:6f:08:fc:ab:fd:30:5a:69:77:fc:d6:2b:48:
         5e:11:ce:a7:24:85:cb:27:d2:ab:e9:d0:1b:61:29:53:f3:dc:
         04:fb:72:d7:7c:83:1e:35:eb:44:3e:f9:d4:de:84:14:0d:27:
         3e:c9:cf:b4:d8:9d:9e:f1:b9:ae:a8:25:8f:9c:8b:77:b4:21:
         03:42:fd:d4:1f:ff:7e:3e:14:e6:3e:91:da:e4:f4:24:5d:93:
         e0:40:d1:f7:6f:08:1f:74:83:7b:7c:ef:e0:8e:02:01:ad:0f:
         29:b0:f8:d3:dc:f1:94:fe:6d:59:ae:3c:49:72:40:43:e6:ff:
         d7:27:ce:a6:94:92:dc:14:6a:1c:1f:94:78:f0:7b:a2:55:7b:
         4b:8e:f9:13:39:8c:56:e6:fb:ae:fc:d5:1c:02:b5:11:1a:61:
         92:85:fc:5b:ac:a1:52:3c:f5:67:f7:cc:bb:ea:8a:48:9c:cc:
         4e:29:f4:83:f2:9d:6a:c8:09:b5:2b:5e:e8:53:f2:39:15:f0:
         b6:cf:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org