Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/E727A05600FD11EB9286115AC4F9AE02.roa
File:                     E727A05600FD11EB9286115AC4F9AE02.roa (raw, json)
Hash identifier:          HzScpJwJYs5VvrtmugkRETvjlrU+NB2MP0TJ9Ogw/c4=
Subject key identifier:   7A:8C:B3:99:7D:64:11:B0:07:B9:04:9F:E8:0F:9E:37:64:1A:3C:81
Certificate issuer:       /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Certificate serial:       0BD4
Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/E727A05600FD11EB9286115AC4F9AE02.roa
Signing time:             Mon 18 Sep 2023 18:56:24 +0000
ROA not before:           Mon 18 Sep 2023 18:56:24 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     24341
IP address blocks:        180.178.120.0/24 maxlen: 24
                          180.178.121.0/24 maxlen: 24
                          180.178.122.0/24 maxlen: 24
                          180.178.123.0/24 maxlen: 24
                          2401:8180::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl
                          rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 18:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3028 (0xbd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
        Validity
            Not Before: Sep 18 18:56:24 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65089d57-8383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ee:5d:a1:31:4e:ac:13:a5:3c:fb:33:56:4f:
                    b5:67:28:cd:9a:78:36:5b:9e:d2:15:71:1b:75:68:
                    95:e9:b8:6e:a8:88:79:1b:66:3c:60:4f:d8:cb:da:
                    5d:e8:b1:16:8a:c6:5e:40:e1:b0:e2:d2:55:45:7c:
                    a6:3f:52:7c:65:2f:c3:3d:bd:6d:81:47:74:82:f1:
                    32:3e:58:47:51:8b:84:fd:8b:fa:ac:fa:93:55:75:
                    d2:be:d5:1d:66:2e:4f:b6:35:c3:2a:06:6b:16:94:
                    14:d5:16:7f:99:c8:46:1c:8a:a6:40:fd:a2:78:4a:
                    ef:8b:2c:66:81:6b:7c:76:bb:5f:c7:5c:fd:43:a2:
                    ae:87:ac:1a:be:2f:6c:2a:ff:38:a8:23:3e:72:0f:
                    33:47:17:a2:e4:d1:e4:7c:7e:04:4f:6d:74:9f:1d:
                    1a:96:b5:00:0f:b9:88:8a:3f:61:4e:f4:11:bb:c9:
                    cf:8d:3d:6f:ad:7d:af:81:82:27:bf:b9:28:53:e3:
                    10:2f:18:7d:64:53:3f:49:01:ea:18:3b:95:d5:83:
                    73:b2:a7:16:ff:86:7b:3e:df:82:7c:d7:7b:f6:8b:
                    40:5b:b4:a2:ac:b1:3a:81:45:9e:f9:3f:b1:41:aa:
                    b7:4b:45:68:8b:df:45:0f:c1:fe:ee:35:68:35:b6:
                    6b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8C:B3:99:7D:64:11:B0:07:B9:04:9F:E8:0F:9E:37:64:1A:3C:81
            X509v3 Authority Key Identifier:
                keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/E727A05600FD11EB9286115AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.120.0/22
                IPv6:
                  2401:8180::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:2e:68:02:ee:26:3b:8a:7b:58:14:28:46:3b:68:6b:a1:
         e4:8c:05:b9:5b:e7:ba:06:22:fa:52:86:e6:90:f4:59:3b:b1:
         95:01:b7:d9:52:f0:b8:e4:f2:a0:04:a9:4c:39:7d:c4:10:bc:
         51:99:ce:4d:f9:c0:11:05:40:7d:77:91:20:01:06:ea:ba:d3:
         c2:d7:59:5c:2d:1f:6f:0a:2b:93:26:5a:16:52:1c:0c:bb:65:
         46:0f:51:70:be:57:c2:6b:ed:82:cc:da:89:4d:e3:a9:34:ec:
         22:b0:d3:83:0c:be:15:6f:32:d6:87:0c:24:6c:4b:2f:eb:98:
         0c:3f:1f:89:da:bc:0d:34:41:c9:ec:c8:fb:a2:b0:8d:28:33:
         00:f5:b3:6a:40:69:c6:16:33:84:50:56:17:34:86:5f:ac:a3:
         46:87:5b:63:d3:1d:66:30:97:81:14:61:3a:1d:ef:f5:c8:b0:
         30:11:42:ff:ec:4d:b9:db:f8:8b:19:6c:08:05:02:ea:44:d9:
         60:e4:7e:34:41:16:a9:7f:a0:bb:bc:50:08:39:05:65:fb:40:
         88:3c:91:6c:ca:79:61:2d:dd:3f:56:8e:23:84:7f:d0:68:b0:
         10:2e:9c:7d:0d:01:d2:0a:30:b2:58:f4:7b:d7:02:e2:cb:a4:
         3c:81:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:09:09 2024 by rpki-client on console-ams.rpki-client.org