Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15F254A8090211EEA1C06509C4F9AE02.roa
File:                     15F254A8090211EEA1C06509C4F9AE02.roa (raw, json)
Hash identifier:          Xj3W3vC3tZ2C23+Q4QBkFhYn/OX69N8Kzh3+wsZNfOg=
Subject key identifier:   9C:54:6F:41:2B:B4:2D:01:AB:85:0A:AC:71:4A:B5:E7:78:0F:6D:B7
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0555
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15F254A8090211EEA1C06509C4F9AE02.roa
Signing time:             Tue 04 Jul 2023 23:29:57 +0000
ROA not before:           Tue 04 Jul 2023 23:29:57 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     4755
IP address blocks:        129.227.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 23:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365 (0x555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul  4 23:29:57 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a4ab75-f2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:d8:5b:89:11:d9:fd:c6:e8:52:3c:87:86:
                    e3:81:be:81:77:39:c7:00:33:b6:6c:84:be:c9:cc:
                    4e:6d:d6:79:8d:a2:c6:29:3a:bf:29:a5:30:8c:9e:
                    a6:b7:ec:9c:bf:84:13:30:f6:2d:63:d8:1e:a3:ef:
                    38:04:98:69:c3:a1:3c:73:f6:81:8a:d2:bb:84:36:
                    07:c8:6a:b7:2f:c6:26:8f:dd:22:57:67:1f:fd:f4:
                    d0:8b:04:1e:b5:38:ec:ed:6f:16:58:6c:aa:c7:cd:
                    87:f9:0a:79:71:27:31:69:60:b5:5a:5a:01:ca:c7:
                    ac:6b:16:77:c5:5f:85:fb:9a:4f:1d:c6:1a:9b:33:
                    5a:d9:4d:31:2f:9c:36:17:10:ae:1c:9e:d3:10:d7:
                    a4:49:c4:11:1f:0a:2b:f4:81:0f:18:69:25:5d:8e:
                    0c:2d:72:86:9f:73:e9:dd:e5:00:0b:d5:a9:f2:13:
                    da:18:ea:15:3a:d7:17:e8:d0:17:77:4b:6b:07:bf:
                    0f:fc:44:82:f2:db:c9:4f:90:65:8f:fa:74:30:52:
                    c2:d4:ad:f5:ae:86:35:eb:29:17:7f:2d:f7:89:1f:
                    29:87:bc:3b:99:ef:7a:03:d7:2e:e2:fd:f6:82:67:
                    40:7c:4c:d6:91:f3:da:90:e5:b4:4e:1c:63:b3:9e:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:54:6F:41:2B:B4:2D:01:AB:85:0A:AC:71:4A:B5:E7:78:0F:6D:B7
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15F254A8090211EEA1C06509C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:42:3e:ed:b8:32:0f:a6:6a:73:21:3b:bb:be:58:2f:8b:65:
         ae:93:b7:fd:27:7c:49:83:f8:59:42:8f:09:03:81:2a:29:26:
         96:8b:bf:ce:78:78:3f:70:b2:2e:57:c3:39:80:1f:e8:ff:d3:
         06:46:f5:f8:60:a6:bb:9b:a4:77:1d:1a:30:8c:5b:07:af:1e:
         fd:9c:0a:5c:b8:7f:19:81:b6:15:7c:2d:d6:96:a7:aa:54:63:
         70:b2:fe:21:60:dc:04:47:9c:c6:2d:9d:00:09:33:8e:3d:59:
         67:0e:cd:6a:f6:03:02:e1:1a:57:c2:9e:20:c1:7e:c9:05:da:
         52:78:c2:55:d8:a3:06:d5:4e:b5:a4:35:b8:5e:4c:e6:9d:2c:
         5d:67:54:02:37:b5:10:13:b2:1c:46:40:10:df:cd:6b:a1:e4:
         e7:69:e5:5b:2e:77:a7:5d:2e:49:10:cf:77:ee:15:c4:4b:51:
         71:97:26:fa:d2:91:47:aa:ce:c0:19:00:f9:c4:70:12:82:d3:
         cc:c2:1c:52:33:d4:ef:2b:89:a6:bd:5c:3f:f3:88:11:1f:88:
         cd:0e:4e:f9:ec:ba:b5:e1:4f:ab:99:b6:f3:ab:97:f8:6b:c4:
         01:74:41:2c:45:8b:d1:62:2a:08:f3:ce:ca:8a:45:4b:b8:96:
         02:66:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:07:00 2024 by rpki-client on console-fra.rpki-client.org