Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
File:                     253C821A388611ECBE8F7725C4F9AE02.roa (raw, json)
Hash identifier:          h0WayUQjkIc+1k3KSDTUW0WJMm7/vM6nH4tLae6DlNo=
Subject key identifier:   1E:2F:94:29:32:E6:92:40:3B:08:8F:0E:5A:37:EF:5D:95:9D:9D:FE
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       2614
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
Signing time:             Wed 10 Apr 2024 16:22:46 +0000
ROA not before:           Wed 10 Apr 2024 16:22:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     147055
IP address blocks:        124.109.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9748 (0x2614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Apr 10 16:22:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6616bcd6-89f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4a:c7:40:b5:f7:9d:72:6c:f3:49:0f:c3:e2:
                    72:6e:fe:77:6c:bb:c8:a2:a5:04:fd:11:cb:58:bb:
                    96:44:ff:0c:59:13:e9:c1:f9:43:2e:d1:45:4c:c7:
                    03:1e:49:0c:bc:27:b7:19:16:14:de:f3:3e:df:01:
                    89:be:b0:8d:02:e9:bf:f8:c1:dd:95:52:e6:2f:38:
                    2c:35:bc:53:c8:82:d1:4c:e8:94:34:32:9e:5f:43:
                    5c:95:aa:06:61:f7:66:f5:02:0f:b3:9e:45:93:1e:
                    72:6a:95:66:93:cd:0c:7e:ef:2e:6b:09:41:75:0b:
                    2a:c8:19:3b:e5:c3:c3:8f:9b:95:35:4e:5b:01:92:
                    6d:c2:e9:7f:1b:59:6d:8e:8e:98:c4:db:ca:b0:b2:
                    79:f6:a6:28:82:63:fc:b8:b9:21:55:af:8f:4c:7d:
                    75:2e:ff:34:99:50:1d:63:51:f5:0b:d6:cf:68:88:
                    3b:d9:36:e8:45:ca:a8:7b:bf:a8:ac:04:20:64:df:
                    fa:b1:88:44:aa:8e:b6:49:18:c2:64:4c:b6:dd:40:
                    7f:5b:cb:e0:4a:b4:d1:9c:29:36:78:59:02:81:41:
                    90:c9:1e:38:e8:98:86:7c:a6:31:a4:05:82:61:9b:
                    af:eb:c0:2d:83:bc:d3:ae:5c:2a:76:b0:8c:e5:40:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2F:94:29:32:E6:92:40:3B:08:8F:0E:5A:37:EF:5D:95:9D:9D:FE
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:2d:dd:2a:00:ac:40:56:85:5f:64:3d:64:89:b8:63:50:2e:
         8a:07:21:c2:a0:9b:aa:1a:1a:2e:8f:30:ee:c6:96:30:de:41:
         47:bc:89:da:15:4f:c0:3a:7b:1c:6f:56:b1:d2:ce:c5:27:66:
         94:7b:c2:c2:12:b5:c0:97:b5:67:7c:44:1e:7e:b8:23:09:d1:
         e9:82:c6:09:42:08:78:57:f5:a3:74:77:79:cc:7d:9a:58:f0:
         12:65:7b:58:04:bc:89:4f:9a:4b:ce:d9:f0:19:4f:ad:f2:4f:
         2d:4b:b2:00:c2:08:96:13:0f:6f:8d:62:b2:db:51:34:29:27:
         f3:8f:ec:d0:de:d1:d8:bb:b0:1b:11:bd:ce:05:e5:75:54:91:
         1e:22:f9:02:37:60:7f:84:ed:7f:05:b8:f1:14:7d:59:46:d8:
         b7:69:7c:2d:76:99:cb:27:0c:cb:ef:b4:95:b9:97:45:94:eb:
         f3:1f:f1:b8:a4:d5:fb:21:34:39:fa:cb:e8:6c:0a:6f:19:e8:
         a6:64:8a:bc:d8:8e:41:78:be:76:f3:19:5b:85:16:3a:50:37:
         de:12:b9:c0:1a:81:f0:d7:ff:99:06:32:f0:e2:38:b8:0b:dd:
         32:de:b5:6f:ea:36:43:9a:73:ba:58:e8:56:f3:b5:70:3a:b0:
         13:6f:4c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org