Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/8C2F1C96367F11EEB689C243C4F9AE02.roa
File:                     8C2F1C96367F11EEB689C243C4F9AE02.roa (raw, json)
Hash identifier:          cJ9vrI4eJIdm2y+RaY9D8ivBT7pC0PY4Wcwl7yuzDtc=
Subject key identifier:   72:D7:0D:E6:33:E3:17:1A:81:F2:82:5F:47:D4:AE:79:97:B3:9A:C4
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       0374
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/8C2F1C96367F11EEB689C243C4F9AE02.roa
Signing time:             Sun 13 Aug 2023 01:22:45 +0000
ROA not before:           Sun 13 Aug 2023 01:22:45 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     19701
IP address blocks:        182.54.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 00:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884 (0x374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Aug 13 01:22:45 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64d83065-62d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:df:c3:98:fb:bf:95:c8:c3:d1:b1:71:3a:
                    b0:a4:41:69:73:04:aa:86:96:8c:b5:b3:ba:f1:6f:
                    6c:a5:90:95:de:69:42:fc:68:88:8c:ac:1b:22:32:
                    d8:61:1f:a0:b2:28:ff:71:d9:a3:64:92:68:d6:f9:
                    82:29:fd:33:a5:f5:db:c8:d3:8d:b0:9b:54:5f:0b:
                    29:80:6e:de:34:e9:37:4a:4d:94:48:80:96:3b:e5:
                    49:49:f4:5a:0c:71:f1:96:b2:0a:b2:0e:90:38:3a:
                    eb:9a:e5:08:72:77:05:f9:f7:46:43:ea:04:ed:76:
                    17:93:6d:be:8b:bf:ed:cd:d4:9e:6c:ec:ea:18:01:
                    d1:5c:5e:ca:95:7a:68:62:fc:1c:60:ac:32:b0:af:
                    5b:10:ef:6d:ea:cd:73:21:b6:dd:c4:29:23:d1:b2:
                    35:71:18:1c:47:ef:52:f0:34:c9:3d:56:02:91:65:
                    28:82:14:1e:9e:e4:34:4a:30:37:ae:b5:b8:c8:da:
                    23:00:8b:3d:4c:22:8a:45:1b:1f:07:f1:f6:32:f3:
                    fa:13:b0:b6:bb:f7:20:fc:b1:5a:11:2a:e2:cf:6e:
                    64:f0:dd:84:cb:0c:b7:b5:1c:55:6e:3a:16:12:4a:
                    97:b8:90:b6:73:2e:aa:8b:49:b4:fa:ee:05:02:92:
                    25:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D7:0D:E6:33:E3:17:1A:81:F2:82:5F:47:D4:AE:79:97:B3:9A:C4
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/8C2F1C96367F11EEB689C243C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:da:71:f9:a2:02:8b:6d:b8:c4:4b:13:f0:61:bd:99:9d:
         07:31:08:7c:4c:4a:88:ea:9c:4f:2d:7c:75:dc:8a:84:f2:8e:
         71:05:05:29:83:78:3a:6d:17:ca:ca:2d:de:ec:5c:6a:7a:2c:
         e2:ca:2f:4c:59:e2:43:d8:16:59:aa:46:d2:bb:e1:80:a6:af:
         0b:bd:aa:7f:3a:c1:c7:ab:57:d6:4a:48:0f:e2:24:cd:5b:48:
         f6:9d:68:5d:6d:66:61:c2:27:21:00:02:15:02:de:a2:0b:e4:
         e4:e4:1d:d5:41:e5:a6:d2:70:ec:83:1b:b2:2a:ba:25:50:77:
         25:19:4d:50:13:dd:b4:6f:ab:f5:4e:60:b1:60:bd:62:69:f5:
         1e:46:38:50:d1:77:fb:73:b5:70:ab:b4:90:e3:8e:dd:75:80:
         33:5c:b0:09:8d:1b:9f:c0:a6:d1:68:73:fb:fa:99:b7:74:4a:
         99:12:af:29:6b:4d:1b:71:c6:da:c4:6a:89:f8:b1:10:e5:bc:
         af:20:f1:b1:bb:2a:bb:a7:8c:24:f1:f2:a9:85:8b:60:18:6d:
         dc:0d:58:57:32:ef:59:55:32:d4:14:ec:d5:2f:bd:1f:03:e1:
         f5:23:9b:04:05:69:9f:97:a2:58:fa:f3:9a:8c:46:00:1a:26:
         7a:e5:02:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 03:05:59 2024 by rpki-client on console-fra.rpki-client.org