Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8D1689472E411ED833AE326C4F9AE02.roa
File:                     B8D1689472E411ED833AE326C4F9AE02.roa (raw, json)
Hash identifier:          3aUgrXp7CupXz9su0B0dRhTdHv7O9ZjKupP1E4BnrMs=
Subject key identifier:   0C:D9:BD:BD:C5:D4:7E:5D:DC:9B:44:2E:5F:21:59:EB:D3:87:88:85
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       0584
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8D1689472E411ED833AE326C4F9AE02.roa
Signing time:             Mon 14 Aug 2023 23:20:29 +0000
ROA not before:           Mon 14 Aug 2023 23:20:29 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     134176
IP address blocks:        121.54.188.0/24 maxlen: 24
                          121.54.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 00:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Aug 14 23:20:29 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64dab6bd-b199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:72:b9:e3:5a:ea:7a:21:b4:c2:4d:ec:3a:
                    17:df:fa:01:62:23:c2:8d:c8:81:00:5b:75:d9:6c:
                    b3:2b:5e:6d:cf:f6:2c:1f:19:4a:15:6a:8a:7d:49:
                    2d:c1:9a:b8:7c:8e:92:6e:87:fe:39:7d:f7:cc:73:
                    3a:53:1f:82:8f:30:37:66:02:77:99:98:d3:4a:ff:
                    58:b2:28:37:7c:72:3c:4a:86:d6:b4:e1:5e:a6:e8:
                    b4:e9:c5:ce:e6:86:fc:3c:c4:e2:e9:f0:eb:c3:b3:
                    17:cf:d7:11:8a:43:63:b4:ee:9b:6b:24:d8:9e:64:
                    3f:8b:cf:b2:31:fe:db:cc:ad:da:0d:01:aa:a9:0c:
                    c1:a0:85:3d:43:aa:1c:42:4e:b2:75:77:58:be:29:
                    eb:e9:01:f4:e0:2b:ab:54:1d:d9:db:1a:f3:d8:f0:
                    a5:c4:e3:4a:bb:4a:40:31:05:a4:17:b7:15:de:2f:
                    c7:f0:f8:a2:19:04:03:23:d2:3f:c9:f5:13:6b:8e:
                    66:fd:46:70:da:31:f8:14:0f:bf:5a:9e:56:18:ea:
                    f7:86:14:03:e0:14:ba:44:ee:ac:6b:0c:6a:4b:1e:
                    4a:ac:cc:5a:a2:7a:2e:9e:72:6e:27:1c:0d:8c:7c:
                    28:3c:6d:d7:b6:ec:23:3d:f0:1b:7e:67:f9:e9:7a:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D9:BD:BD:C5:D4:7E:5D:DC:9B:44:2E:5F:21:59:EB:D3:87:88:85
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8D1689472E411ED833AE326C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.54.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:b2:ff:cc:03:3d:0d:29:73:e7:95:38:b0:bf:a6:bf:fe:74:
         a1:52:2a:f3:af:05:1e:0c:e2:0a:b4:e5:d7:50:64:5f:81:7b:
         13:aa:54:9e:c9:24:7c:e0:62:b6:3a:14:4f:2f:a3:8a:fe:b3:
         70:0c:6c:a4:eb:24:5f:98:cc:f3:f5:e0:47:2c:60:a7:19:7d:
         a0:d1:ab:3f:4e:38:5e:c5:24:07:eb:2f:98:83:b2:c1:85:5b:
         5d:30:d6:76:f0:2c:59:b8:ba:ef:f3:75:85:37:d0:7f:a6:2c:
         32:04:70:a6:15:43:1e:5d:ab:d3:51:bb:a9:78:46:2d:49:7d:
         0c:ba:a1:66:9b:b6:db:62:96:b9:6a:b9:91:df:40:ed:ce:76:
         60:8e:2b:d1:4f:7b:5d:12:fb:b5:8a:d2:5c:a4:6f:cd:2b:40:
         43:ea:e3:00:0e:bf:f9:ab:3f:c2:fa:b4:05:c9:75:b6:92:52:
         1b:50:91:b9:df:98:08:07:9a:8a:e6:db:62:bd:5a:67:7f:a0:
         64:3b:ed:c5:e7:b7:f3:50:3b:3e:cd:ac:54:e4:df:ed:7d:1b:
         14:12:2d:d4:eb:d7:2a:30:5c:ca:b6:70:73:9a:43:74:b0:f2:
         41:ea:ff:82:5a:c4:ab:05:fc:b7:82:11:da:fd:f7:1d:97:c9:
         1f:09:f6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:27 2024 by rpki-client on console-fra.rpki-client.org