Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
File:                     764601EE6A7A11EFAF10EC37C4F9AE02.roa (raw, json)
Hash identifier:          wlnyKHrlK/WWGM/sWHlA6+OjLcmqJ1sU/DSuQx9lYJQ=
Subject key identifier:   8F:1E:D0:59:08:49:BB:5E:46:22:4D:F4:0B:96:05:5E:23:DC:CB:91
Certificate issuer:       /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Certificate serial:       2581
Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
Signing time:             Wed 04 Sep 2024 04:59:28 +0000
ROA not before:           Wed 04 Sep 2024 04:59:28 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     38071
IP address blocks:        58.147.168.0/21 maxlen: 24
                          223.27.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9601 (0x2581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
        Validity
            Not Before: Sep  4 04:59:28 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66d7e92f-72f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:14:2d:b7:ad:96:2c:e0:c8:e2:bb:35:1f:
                    ea:ca:70:f4:b5:85:05:5e:5d:45:43:41:1d:aa:4b:
                    f2:73:db:6c:07:14:3b:91:f5:64:9a:12:47:10:8a:
                    6c:73:9f:73:61:85:d6:c4:f8:b1:a5:7c:89:18:71:
                    e9:7a:56:90:a3:46:0d:aa:0d:c8:57:1b:ca:36:62:
                    7d:15:86:1d:98:ff:2e:15:24:b2:38:ec:bd:06:19:
                    ab:df:81:ca:5b:46:7e:0d:e9:69:69:33:d8:54:00:
                    3d:6c:39:fc:1b:73:8d:bb:c1:f7:20:ab:99:ba:a2:
                    a8:da:cc:1c:b9:32:0f:45:07:48:50:d3:72:8c:c6:
                    9d:c0:fb:79:75:3c:ee:1b:14:09:72:64:20:aa:d0:
                    3b:70:73:18:81:ef:09:47:0d:5d:d1:1c:b5:67:5b:
                    1c:c4:90:cb:5c:2b:6f:ee:21:4d:67:48:f5:04:c7:
                    d2:71:27:31:0d:5a:ea:9c:c5:09:93:5a:7a:16:be:
                    96:b0:5d:29:e5:1a:64:81:36:dc:4b:fa:6a:75:23:
                    d9:f8:e3:2e:13:a4:b1:68:92:10:e2:27:2f:3d:6f:
                    3a:ea:86:4d:d4:af:05:c9:d1:8e:84:96:18:a3:06:
                    5d:4c:74:85:a1:1d:41:08:67:e3:58:40:1d:f3:f4:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:D0:59:08:49:BB:5E:46:22:4D:F4:0B:96:05:5E:23:DC:CB:91
            X509v3 Authority Key Identifier:
                keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.168.0/21
                  223.27.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:6b:00:70:02:dc:97:ca:74:84:72:d1:d0:66:f0:56:f9:fb:
         8f:3f:f6:0b:a0:bb:98:1b:a1:ae:4d:e0:8a:a2:2b:80:f7:b5:
         93:c4:26:35:33:b3:17:a3:71:c3:c7:98:d3:c0:bc:4c:39:7d:
         2d:95:42:73:2b:92:7b:c3:ef:87:87:67:8f:86:5e:3e:a9:f2:
         01:04:0d:a5:dc:6d:f6:24:36:6c:46:ce:c0:b9:9c:6a:e7:00:
         41:5b:c3:7f:d6:73:33:f5:98:fe:0c:89:31:25:79:0c:8e:ea:
         5f:ae:4f:8c:58:90:0d:aa:b2:80:f8:5f:a9:5b:db:9b:09:4b:
         b5:54:e0:81:c5:b9:52:4c:7b:5c:6d:c9:0e:6e:77:08:c6:f7:
         95:ee:bc:ce:b6:bd:b1:2a:2f:67:d2:29:30:a7:3f:ba:62:33:
         18:a9:ef:b0:3a:75:5e:83:31:c5:aa:6e:d8:e1:c6:44:c6:b3:
         31:e5:df:42:71:c9:d7:8f:c1:ef:3c:8d:f4:e8:95:67:3e:91:
         13:c6:d7:b0:8c:de:42:37:2b:0d:bf:b8:ce:bb:f9:21:6a:a2:
         ec:5d:bb:ec:de:ff:e3:0f:55:2c:a9:27:da:10:5e:53:b7:b7:
         56:7c:17:85:6e:91:dc:eb:0b:de:1e:89:a9:13:9e:af:c4:e3:
         56:49:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:59 2024 by rpki-client on console-ams.rpki-client.org