Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/C2219930AED411EB92E7A470C4F9AE02.roa
File:                     C2219930AED411EB92E7A470C4F9AE02.roa (raw, json)
Hash identifier:          f99oNJTMU1zGhqBGO4nYW75zk397Fa58POfhJKOSX2g=
Subject key identifier:   88:4B:EF:4B:CA:C6:5F:FF:A0:2A:69:0F:FD:21:FA:E8:F0:7F:BD:7A
Certificate issuer:       /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682
Certificate serial:       0662
Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/C2219930AED411EB92E7A470C4F9AE02.roa
Signing time:             Mon 01 Apr 2024 00:32:21 +0000
ROA not before:           Mon 01 Apr 2024 00:32:21 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     396073
IP address blocks:        36.255.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl
                          rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682
        Validity
            Not Before: Apr  1 00:32:21 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660a0095-edc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:41:31:27:b1:81:88:75:57:4a:5f:4e:68:
                    2b:42:d1:f5:30:1c:7b:3b:2d:fd:a9:63:8c:f4:4b:
                    c8:c6:c6:30:ec:66:65:6a:2c:99:d2:28:ce:e5:03:
                    3a:b7:33:76:e6:71:f0:f3:3c:20:08:23:5d:99:b7:
                    79:f7:91:c0:d1:18:31:ae:04:e1:5b:33:3f:22:93:
                    90:60:90:a3:43:56:5a:7b:a6:09:56:49:da:0f:54:
                    c8:69:66:ba:bf:c4:d9:56:d1:b6:64:b5:a4:a1:09:
                    32:2f:d6:3b:b8:5d:49:e6:7f:77:ed:b1:2c:3a:36:
                    d0:1c:59:28:3c:9a:4d:83:39:92:fa:aa:02:61:61:
                    b1:74:91:2d:9c:c1:f4:b5:c8:b2:f6:b6:5b:8f:54:
                    1f:aa:88:91:c4:f4:98:e3:4c:71:14:04:ba:21:1e:
                    5f:84:29:52:ee:4e:21:1b:39:e0:5d:ae:dc:95:fb:
                    24:c7:f6:fd:13:4a:cc:26:cd:b4:38:11:7a:96:73:
                    72:a5:16:b9:60:f3:bb:3d:54:79:d2:fa:c9:61:f2:
                    df:1a:21:59:e7:94:3e:b6:0d:5a:ff:af:ab:ec:83:
                    dd:01:f3:85:7a:d2:95:c2:16:b6:d7:4c:24:8b:14:
                    c9:55:a7:96:aa:10:08:b1:06:fe:77:63:2f:03:41:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4B:EF:4B:CA:C6:5F:FF:A0:2A:69:0F:FD:21:FA:E8:F0:7F:BD:7A
            X509v3 Authority Key Identifier:
                keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/C2219930AED411EB92E7A470C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b0:fe:a3:49:33:98:d1:d8:54:af:7d:23:a0:50:de:fc:55:
         b9:d3:db:bb:6e:6f:7f:bf:39:5a:96:68:63:38:75:f7:45:da:
         16:00:df:b2:1d:86:b7:3a:8c:5f:bd:87:47:78:7f:17:61:b1:
         48:e7:3f:52:a7:02:83:95:30:a5:c7:02:92:91:99:5f:0b:d5:
         91:88:92:09:21:3a:57:aa:a7:f8:46:6b:98:dc:31:73:e4:9c:
         cb:f7:a6:87:71:f6:6e:82:db:73:1c:c7:94:9c:96:ed:cf:2d:
         1f:54:62:a7:ad:70:bd:e1:26:b4:05:18:86:45:fb:1b:9d:4a:
         52:44:ab:24:a6:d7:5b:59:43:06:72:76:c6:f3:46:be:22:77:
         18:e0:7b:b1:bb:0f:20:8b:48:84:e6:7c:42:ca:1e:25:75:63:
         a8:f2:d7:3a:92:d3:85:ab:f8:ad:b0:b8:87:9b:ae:b7:42:89:
         ce:75:ea:13:54:eb:59:29:c9:72:bc:3d:d8:1e:e5:c6:ce:2d:
         1a:a8:dd:9d:62:a4:a4:ae:17:d0:aa:9d:6f:d9:90:45:f0:d0:
         0b:76:bc:d4:a3:05:ed:c1:93:ec:d8:40:ef:2e:5d:02:cd:19:
         03:5d:8e:79:3c:d3:4e:19:5b:e9:f9:dc:60:28:50:a9:be:42:
         ac:80:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:52 2024 by rpki-client on console-ams.rpki-client.org