Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa
File:                     15434774090211EEA1C06509C4F9AE02.roa (raw, json)
Hash identifier:          zYMvH0bozAXHYXp1gy3dgag6JI6cAqoQfJxD1+5vnXk=
Subject key identifier:   27:C2:B7:75:A8:BE:92:65:44:A6:71:85:2D:70:76:2B:C9:0C:C1:1C
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0628
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa
Signing time:             Wed 24 Jul 2024 23:41:40 +0000
ROA not before:           Wed 24 Jul 2024 23:41:40 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136166
IP address blocks:        129.227.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 24 23:41:40 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a19133-f72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:69:0c:1e:3a:44:85:17:5f:80:70:e5:7e:
                    38:b6:f9:6a:9b:1c:3e:34:0e:ee:be:4b:e6:a9:c4:
                    53:ae:cb:cc:f6:11:4e:7e:c0:d8:22:82:1a:0b:83:
                    0b:b7:eb:0d:54:7f:2d:d5:ec:dc:48:0a:b1:9d:c7:
                    39:c2:51:fc:61:53:83:7d:60:13:8f:6a:a0:1b:ce:
                    7a:a7:7b:33:41:00:64:ee:8c:66:5d:8b:ab:a6:82:
                    23:bf:d7:8f:7f:b0:0c:ea:f6:63:8d:95:81:5e:c9:
                    e9:7a:9e:35:25:9f:97:94:6a:bc:68:e1:dc:e9:a9:
                    e2:82:54:30:5e:dc:82:90:4c:c0:5c:df:88:0e:e0:
                    e0:91:db:ff:52:1f:ca:1b:5a:16:a2:0d:9a:f5:2f:
                    16:cb:d2:f2:3c:c6:32:ee:18:69:1f:f5:aa:16:c1:
                    5f:27:2d:e3:05:12:f9:94:dc:d7:61:5a:d2:07:22:
                    12:33:72:b4:de:38:33:53:5b:38:e8:d9:2a:31:ef:
                    ca:d5:e2:dd:9d:c8:90:48:55:9e:ed:bb:9f:40:04:
                    05:9d:3d:55:b5:53:14:40:ee:08:f7:17:63:5a:07:
                    8b:7b:94:8d:96:42:7b:ab:f3:e0:e5:e6:92:73:bf:
                    70:2a:79:bf:cf:dd:ea:c8:0e:1a:73:a0:4f:8c:fa:
                    c0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C2:B7:75:A8:BE:92:65:44:A6:71:85:2D:70:76:2B:C9:0C:C1:1C
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:3b:bc:2c:1b:a6:e2:ef:a9:1f:19:0e:8a:db:46:00:fa:
         17:5f:ba:58:f1:d7:02:2e:fe:2f:03:89:35:70:3f:94:c6:6b:
         88:d6:a5:b0:d6:ac:bb:1e:8c:0e:33:f2:a6:0e:93:4d:38:4f:
         50:c1:96:9c:fd:b2:2b:4e:d0:b9:b1:a0:0d:ca:68:42:86:fd:
         8f:4b:53:7e:99:4b:7e:6c:8e:01:01:d2:54:9c:05:33:b0:c5:
         a7:83:e1:e7:52:55:27:0a:28:40:5b:5f:68:d8:4e:17:f7:58:
         2c:23:e9:77:ef:06:aa:46:a6:db:1e:5a:46:4e:27:73:29:b1:
         e8:e2:98:87:a7:73:b5:6b:bb:20:19:e4:e2:0b:d7:48:b4:70:
         f0:1d:b8:98:4a:55:4d:ea:5c:65:af:2a:ce:96:2c:c4:9b:35:
         08:08:98:c9:cc:b6:64:16:33:43:0f:29:29:94:c5:6d:6d:a8:
         84:8a:63:df:fc:31:5d:64:c9:81:5a:13:d0:b9:ce:89:86:6a:
         0b:14:cf:02:0d:e9:f6:04:5f:d7:f1:dc:6c:6a:18:81:78:6d:
         57:27:a1:ec:b7:92:22:38:8b:4e:cd:66:5a:4b:95:d4:3c:00:
         2e:77:11:d0:66:b2:82:ae:ec:8a:3e:71:d4:2d:df:33:e2:4e:
         39:ce:73:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:56:02 2024 by rpki-client on console-ams.rpki-client.org