Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15F254A8090211EEA1C06509C4F9AE02.roa
File:                     15F254A8090211EEA1C06509C4F9AE02.roa (raw, json)
Hash identifier:          hlWFyRUgGW1LDPVT2fvGX7ZTjObEtG9lX8JYZedFnkg=
Subject key identifier:   0C:68:A2:0A:84:ED:99:C8:C9:81:E9:5B:01:CD:37:82:E9:68:3B:D4
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       062C
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15F254A8090211EEA1C06509C4F9AE02.roa
Signing time:             Wed 24 Jul 2024 23:41:43 +0000
ROA not before:           Wed 24 Jul 2024 23:41:43 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     4755
IP address blocks:        129.227.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 24 23:41:43 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a19137-b56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:a6:26:27:f2:60:be:9d:4f:0f:a8:80:3b:
                    95:72:cb:3c:15:66:5c:88:99:18:2f:bd:1f:42:7d:
                    d8:b2:65:bf:96:14:34:b5:ee:f9:11:62:32:f1:3b:
                    ab:81:bc:e1:08:d6:05:5c:6b:17:2e:d5:32:a4:cf:
                    d7:3a:0f:76:01:8c:77:68:73:fc:be:f0:d1:f7:a5:
                    29:4a:4d:fe:70:0f:a8:e3:28:7a:ca:c5:9d:b2:d2:
                    2c:38:cf:fd:db:34:d6:c6:ff:3a:03:50:79:4b:46:
                    74:a2:ca:a5:15:a5:fa:2e:d0:b2:bb:70:33:d9:37:
                    fc:c7:49:c1:e7:7b:14:7c:17:9b:34:dd:9a:c3:c9:
                    02:46:11:8e:fc:cf:97:ef:ff:77:8c:d7:46:5b:c6:
                    f5:4f:41:c4:d6:6b:46:78:13:a6:28:e5:cd:c6:f6:
                    45:dc:d5:14:e7:7f:ae:24:2d:23:7d:45:e0:f6:5d:
                    98:c6:cf:8a:95:99:69:31:e0:59:1f:6b:2b:77:74:
                    ca:05:17:24:61:da:dc:b8:6c:c8:ac:69:4e:28:82:
                    a7:5e:1d:fc:64:76:ee:17:a4:cc:2d:81:e6:5f:3a:
                    34:6f:d1:ae:ff:68:b8:67:bb:6d:d5:0f:85:68:60:
                    21:04:d8:6f:96:8e:05:f4:64:ed:80:39:d8:16:0f:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:68:A2:0A:84:ED:99:C8:C9:81:E9:5B:01:CD:37:82:E9:68:3B:D4
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15F254A8090211EEA1C06509C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:db:41:35:0f:7f:2e:7e:87:f5:cf:61:37:5d:28:5f:34:b9:
         34:12:02:52:ee:93:05:ad:b6:29:eb:5c:9b:1d:80:2e:ac:1b:
         80:c8:fe:ac:c6:a9:0a:f0:54:6d:d1:c5:fb:f0:a8:62:d2:b8:
         41:e4:64:a0:2b:e8:1e:7a:d5:e7:f0:d6:6c:c2:16:26:79:7d:
         49:f9:76:5c:44:b9:45:dc:e6:8c:2e:10:bc:f7:9b:25:a4:2a:
         48:75:48:d9:82:79:11:86:be:32:cc:20:c3:d0:15:6e:51:2a:
         75:f6:61:8d:33:ba:b1:9f:98:b5:81:c3:67:8a:41:c7:90:c4:
         68:b2:db:45:d9:5a:fc:95:3b:93:4a:58:ad:0b:3c:ef:37:ce:
         76:f3:03:9d:7e:f8:97:51:5a:23:db:10:7f:f3:27:69:67:6a:
         21:91:87:e5:d8:20:9c:7b:43:23:12:c8:79:8a:1f:2d:e3:37:
         b6:99:9d:ba:e8:d8:f7:aa:4e:ff:f2:9b:b2:85:fe:24:77:77:
         08:e6:5b:cb:4d:a4:ee:7b:c3:c2:6b:21:62:de:55:79:d5:f5:
         f2:5e:d1:52:63:2d:0d:a4:c2:01:ed:ea:6a:0f:f4:2f:a4:b2:
         d5:f5:54:83:3e:d2:d7:38:d4:96:21:80:49:62:4f:18:23:a2:
         67:32:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:50 2024 by rpki-client on console-fra.rpki-client.org