Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/54098620A37B11EFAC4F8E3CC4F9AE02.roa
File:                     54098620A37B11EFAC4F8E3CC4F9AE02.roa (raw, json)
Hash identifier:          hSui0ebWc4lkxLtGfFPvwezZYPnLWYoUQ7IH9/TNQXs=
Subject key identifier:   18:E2:81:A9:14:BC:91:57:0E:1A:5B:34:6D:E9:00:DE:2B:95:EC:69
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       09E8
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/54098620A37B11EFAC4F8E3CC4F9AE02.roa
Signing time:             Fri 15 Nov 2024 17:59:16 +0000
ROA not before:           Fri 15 Nov 2024 17:59:16 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     150371
IP address blocks:        123.253.93.0/24 maxlen: 24
                          123.253.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2536 (0x9e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Nov 15 17:59:16 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67378bf4-b67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:d1:9c:25:2f:7a:2a:92:20:e8:f0:ea:01:
                    da:7d:e3:dd:04:b8:69:dc:b6:d5:d5:4f:aa:d0:82:
                    4e:ce:f8:7b:5f:29:2b:53:9e:f7:1a:45:bf:05:33:
                    4b:79:27:96:0f:62:fd:82:97:39:26:21:cd:a4:07:
                    c4:71:7b:1a:dd:10:51:fc:d1:7a:ca:9e:63:cb:9d:
                    4a:9c:27:cc:ea:13:a6:35:8e:d9:06:6e:6b:76:41:
                    36:b8:cd:b6:98:fb:74:00:03:a7:49:f4:ea:41:cc:
                    26:53:6c:d9:06:d3:ac:af:64:9c:23:d7:8e:05:f1:
                    55:c8:a8:15:b6:a5:e5:56:30:c9:ea:1a:d5:b0:82:
                    2d:2d:3a:1e:0c:d5:65:cf:cd:04:8e:74:1e:60:d7:
                    fd:3a:6d:37:a6:51:dc:5b:ab:bb:d7:4a:9a:f4:9f:
                    74:db:1f:98:8e:95:31:9b:55:b4:fd:44:db:ed:ba:
                    60:a3:07:66:c1:22:09:af:19:0a:db:7e:bc:f3:1a:
                    23:f3:c9:f2:28:0e:d8:ce:2c:93:26:be:83:f8:be:
                    e5:1d:02:f5:63:99:a9:44:50:49:f8:4d:16:b4:8c:
                    9d:50:b0:d1:3d:5f:05:b4:01:bc:5e:37:52:71:9e:
                    b6:3e:33:d3:de:35:d7:7e:1b:92:fb:26:e2:66:0e:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:81:A9:14:BC:91:57:0E:1A:5B:34:6D:E9:00:DE:2B:95:EC:69
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/54098620A37B11EFAC4F8E3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.93.0/24
                  123.253.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:5c:62:ae:ae:b3:00:6b:37:93:36:e4:61:83:c6:5c:aa:10:
         19:29:55:7f:e4:0e:26:78:33:7d:e7:2c:19:d9:55:e9:c0:45:
         e0:46:5b:d0:2f:08:87:36:45:85:ba:04:13:44:e0:ff:e8:6d:
         ae:c5:bc:24:e8:73:3d:a1:53:dd:38:ae:44:a9:c4:6d:0f:53:
         c4:71:1f:26:40:23:37:42:42:05:7f:38:03:ff:cd:03:a1:da:
         00:aa:fb:82:84:78:85:bb:42:0e:d7:8c:16:1d:41:67:bf:bc:
         1d:c3:87:0c:9c:81:ff:c8:e4:d2:27:01:4d:ee:e9:53:9c:26:
         31:ae:64:c3:68:e0:a7:dc:bc:c1:9b:fe:11:97:79:e8:09:5f:
         86:31:ff:0b:1c:c9:7a:fc:f2:26:a8:28:a8:07:43:c3:c7:e6:
         6a:ce:82:38:e2:2f:80:6d:44:24:56:5d:9e:75:c6:3e:f6:ed:
         98:ce:f1:d9:21:53:f6:01:97:77:89:3e:3d:67:7e:14:4a:0f:
         08:fd:5c:c9:96:28:b5:49:85:c3:fb:5c:9d:cf:4d:66:cc:89:
         9c:89:e9:7e:a5:bf:aa:5e:e1:fc:a5:af:d3:3a:de:cd:83:14:
         83:ef:04:ce:98:aa:62:8c:74:5c:eb:3c:80:68:81:5f:cc:b1:
         55:20:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org