Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F55175EA8C5611E792848B4AC4F9AE02.roa
File:                     F55175EA8C5611E792848B4AC4F9AE02.roa (raw, json)
Hash identifier:          t3XBKJTQSBYqiGHST30gvx8Sv6Y9Vi19doDF/V8I5SA=
Subject key identifier:   96:88:A7:4F:31:E4:6C:E4:26:8C:B2:BF:9E:E4:E8:25:0F:3B:1A:48
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       26AB
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F55175EA8C5611E792848B4AC4F9AE02.roa
Signing time:             Wed 10 Apr 2024 16:24:00 +0000
ROA not before:           Wed 10 Apr 2024 16:24:00 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     36776
IP address blocks:        58.69.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9899 (0x26ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr 10 16:24:00 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6616bd20-adae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:56:5b:69:8d:29:6b:51:85:b9:4e:32:7a:
                    80:2d:16:bf:19:46:36:4a:9b:5b:05:2a:46:00:75:
                    d8:b0:5c:ee:1c:40:20:58:8f:02:81:b3:1e:bc:4d:
                    3a:72:2f:05:89:02:6b:f7:22:2e:c2:69:69:84:19:
                    dd:3c:f2:9f:8e:eb:c4:15:9d:7d:74:ed:ea:45:45:
                    53:ba:46:44:fa:df:e0:83:89:11:ff:b2:98:08:ff:
                    47:9a:b5:a5:6e:6f:54:4e:3f:84:0b:a4:24:eb:cb:
                    8f:60:b2:1a:b7:76:52:e5:16:af:2a:71:3a:28:6b:
                    2c:ce:f5:b5:1c:96:9a:c0:cf:eb:46:45:b6:03:c1:
                    07:b0:ba:3e:92:68:06:53:d5:e3:cf:eb:a0:12:78:
                    3e:cc:99:d5:c6:73:0f:13:34:28:d1:78:14:32:17:
                    80:82:78:ab:7b:af:ea:d3:45:7e:85:89:ad:6a:1a:
                    80:b2:17:1d:ed:59:9b:75:01:ea:8e:10:eb:7e:dc:
                    ba:23:f9:4a:b1:a6:48:19:ef:bb:d1:15:59:bf:4e:
                    3a:d1:97:67:35:db:3d:af:2f:d5:6a:57:17:7b:36:
                    6b:59:b2:ea:a6:67:d2:9b:a7:66:52:38:ea:1e:fc:
                    a6:d3:eb:73:e9:16:9c:f4:3e:51:6c:bf:af:29:2e:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:88:A7:4F:31:E4:6C:E4:26:8C:B2:BF:9E:E4:E8:25:0F:3B:1A:48
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F55175EA8C5611E792848B4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.69.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:cb:6f:53:a2:07:41:a2:15:99:2c:e1:87:09:b8:61:3d:
         f9:e6:e0:5e:41:4a:f2:af:47:0a:a4:de:7d:43:26:16:ab:12:
         d1:97:0a:3e:f2:29:d5:00:22:2e:9f:cb:15:6b:b2:74:17:c3:
         7b:ee:a4:ef:ce:38:6e:21:80:34:81:b9:ce:6c:34:0a:e0:14:
         c8:39:1a:1f:e8:67:7a:67:19:9f:d1:08:55:13:c5:1b:9c:be:
         06:d2:b6:06:4c:57:18:15:32:f8:d4:8d:9d:2f:19:ec:8c:94:
         9f:87:f7:20:0d:35:dc:1c:ab:28:d9:71:dc:37:2a:58:34:da:
         c3:d2:b5:92:01:42:50:82:b1:bd:e2:b6:3a:a3:c1:d8:70:29:
         79:f0:82:b3:56:e3:39:89:ba:1d:c1:70:a3:2a:34:6c:ba:f8:
         d4:44:61:fb:d4:86:29:c1:51:0b:c2:70:6d:02:72:76:12:04:
         1c:aa:20:53:9b:21:45:df:bb:88:e7:0a:d1:3a:de:b7:b7:b2:
         f2:6d:45:ae:56:9b:b4:5d:e7:f5:66:6d:91:0d:55:66:35:13:
         ac:56:bb:46:b7:bf:15:d0:aa:b7:65:78:d2:6f:7c:28:60:a3:
         cc:42:f4:dc:f6:9b:87:eb:df:63:ad:46:d3:a7:d5:8c:56:fa:
         c4:37:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:45:06 2024 by rpki-client on console-fra.rpki-client.org