Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
File:                     C27C0758916B11EF81BBB521C4F9AE02.roa (raw, json)
Hash identifier:          0diVW8dy9wFSEzk96glJFk8zdqR8H6Y/olMf4xxS0Yk=
Subject key identifier:   89:CD:5C:49:FB:F6:6B:C8:19:90:76:95:2F:FD:5B:11:00:12:10:76
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       76
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
Signing time:             Wed 23 Oct 2024 18:36:38 +0000
ROA not before:           Wed 23 Oct 2024 18:36:38 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     53813
IP address blocks:        175.107.190.0/24 maxlen: 24
                          2400:7aa0:1d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Oct 23 18:36:38 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=67194236-afd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:95:a8:1a:b0:76:11:bf:df:52:0f:06:16:29:
                    19:01:2d:fa:47:3d:5d:37:0e:ec:c4:0b:90:3f:9c:
                    84:55:4e:4d:a7:f2:c9:2c:5a:d4:a8:d6:30:5e:b4:
                    64:ea:79:07:7b:6b:f0:6f:22:4c:f9:f2:dc:cf:66:
                    69:06:55:fa:2d:bf:23:3f:c9:65:6e:80:fc:bf:3b:
                    a7:bf:94:c9:63:68:e6:ca:38:4e:a9:9a:aa:06:4a:
                    33:56:6f:a7:c2:df:fe:1b:b1:5b:c6:07:4f:55:9e:
                    4b:24:4b:85:df:3d:5b:61:dc:bc:6f:cf:b4:12:7a:
                    91:d9:fa:58:bc:02:10:2a:81:46:8f:5e:3e:92:b8:
                    ac:a6:0e:3f:8d:5c:ad:39:70:b8:91:7f:09:b0:17:
                    2e:42:92:da:9d:bf:74:5b:0c:d7:fc:c7:68:d5:2b:
                    97:6f:3e:b6:1d:1f:ea:eb:0d:1c:43:b7:13:cb:33:
                    91:d1:54:54:11:86:06:64:12:17:c1:19:68:bb:fb:
                    55:7b:d6:e6:c5:74:05:6c:1f:28:53:7b:be:2a:93:
                    60:67:3c:21:49:3e:4c:e5:6a:97:1a:f6:13:bc:76:
                    19:39:e3:cc:27:b0:f3:12:5c:18:f5:0f:de:97:2c:
                    6f:da:5f:79:3f:cf:a4:c8:02:6c:9f:2b:f6:1c:aa:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CD:5C:49:FB:F6:6B:C8:19:90:76:95:2F:FD:5B:11:00:12:10:76
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.107.190.0/24
                IPv6:
                  2400:7aa0:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:d1:ff:9c:33:68:b9:1e:91:46:38:2c:43:e7:bb:fd:80:bd:
         18:bd:5e:e4:94:9a:56:3b:a7:6a:cd:56:e8:ee:e1:59:27:fe:
         34:ff:47:87:52:c3:b0:ac:58:ec:c5:1b:f2:bc:53:79:16:81:
         07:38:e2:4f:3a:41:93:79:83:fb:b1:3e:c8:0a:74:c0:03:6c:
         1d:c1:1e:d6:f4:f9:c8:fd:ab:8c:df:d5:83:ae:38:08:17:a7:
         4f:3e:ad:2f:ba:8e:da:dc:87:a0:89:78:29:83:a7:4b:0c:04:
         a2:79:59:3c:db:76:0f:36:0d:73:d2:d1:8d:71:42:8b:85:de:
         e2:94:06:e5:f8:88:dc:63:50:31:65:91:14:ae:e8:d8:6d:c1:
         f4:a9:71:01:51:86:24:b9:8e:f6:e6:4f:a7:cf:c3:3e:6e:48:
         5f:b0:c1:0c:fd:67:99:55:10:bd:33:84:cb:6b:3e:b2:14:35:
         2d:eb:a8:7c:79:e8:31:8c:35:03:c0:81:90:5e:03:d9:c9:d3:
         df:26:30:65:74:2a:be:df:6a:16:52:e3:de:6b:7a:fd:76:ac:
         0a:9e:5a:58:57:90:32:42:e9:12:e2:0e:96:ce:b8:b4:59:39:
         4e:89:58:1f:81:7c:0f:0d:a3:6e:81:27:08:5a:aa:df:81:14:
         ef:6f:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org