Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/539B27DEF87611EF8366B718C4F9AE02.roa
File:                     539B27DEF87611EF8366B718C4F9AE02.roa (raw, json)
Hash identifier:          1nDM0peqDWmAV340563WsURkfernH1Bm63lk2+LpiqE=
Subject key identifier:   73:7B:B9:BA:23:66:1A:23:67:68:D6:5C:D0:D1:F9:53:78:5D:E9:21
Certificate issuer:       /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682
Certificate serial:       0723
Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/539B27DEF87611EF8366B718C4F9AE02.roa
Signing time:             Mon 31 Mar 2025 22:22:57 +0000
ROA not before:           Mon 31 Mar 2025 22:22:57 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     26042
IP address blocks:        36.255.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl
                          rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827 (0x723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682
        Validity
            Not Before: Mar 31 22:22:57 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67eb15c1-54ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:36:2b:3a:a5:51:f0:80:b7:fd:6d:26:c3:
                    8b:fe:c0:d4:82:eb:6a:9e:3a:ca:07:be:d0:d3:b5:
                    76:4f:74:31:07:ff:47:ff:2c:d0:32:3f:61:b5:f7:
                    69:78:fa:00:7b:17:f7:81:1c:91:ac:8a:d5:f3:9c:
                    1c:ce:54:3f:fc:a9:60:74:ed:e5:c7:9d:20:d9:41:
                    f5:e5:99:9e:ce:b0:b2:f2:c4:98:40:08:bf:ab:a0:
                    d0:f2:e3:11:60:fb:99:ae:e5:55:eb:30:08:99:3d:
                    86:60:c6:91:78:16:a4:91:43:17:9a:af:c3:5d:fa:
                    58:5c:e7:8f:00:ea:3d:99:d2:15:fd:f0:db:a6:51:
                    83:77:36:ac:df:c7:62:a4:e4:7e:2c:04:be:8a:73:
                    00:89:9a:ce:55:23:af:1a:48:6c:96:0e:1e:95:ca:
                    87:0b:7d:04:3b:21:db:3b:69:0b:b3:97:47:dd:64:
                    b0:00:04:ca:34:fb:35:d3:37:44:5d:8f:92:8a:0f:
                    f5:67:28:53:9d:b4:e0:ab:f4:29:19:1b:ad:2b:d3:
                    3f:49:cf:ee:e9:1c:9a:d6:f1:b3:2e:11:6e:5a:1e:
                    37:b3:81:3d:e2:e5:7f:2e:97:2d:d4:1a:7f:f9:b8:
                    8c:0d:6f:45:63:df:b1:23:19:c1:e6:11:83:a3:bf:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7B:B9:BA:23:66:1A:23:67:68:D6:5C:D0:D1:F9:53:78:5D:E9:21
            X509v3 Authority Key Identifier:
                keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/539B27DEF87611EF8366B718C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:06:25:a4:e2:72:58:05:ff:9c:78:0f:fc:0e:4d:08:e1:70:
         25:69:8e:60:94:44:46:47:cc:32:df:df:35:28:11:05:3e:96:
         90:72:b2:be:1a:fd:5d:e8:88:bf:db:5d:c8:f6:25:04:d3:24:
         36:30:d6:5e:a3:f7:a5:c5:62:76:24:bf:d4:5b:0c:7c:98:90:
         29:af:45:ae:8d:b9:66:b4:f3:aa:76:1f:84:97:a0:8f:f8:6e:
         0b:76:b7:f1:64:68:59:ef:22:d2:52:2b:57:a9:78:17:d8:22:
         6f:be:37:36:e8:ca:2b:a0:2c:64:2e:0d:28:6c:16:c1:67:86:
         8c:de:62:9f:33:a9:58:19:2a:3f:1a:98:a4:8b:75:a1:df:84:
         97:42:94:37:4c:b1:e7:2d:a9:90:fe:36:53:eb:18:1a:aa:2d:
         b3:64:d9:e0:57:8f:3e:7f:3b:40:5f:92:e9:fe:c6:f9:68:e5:
         f8:03:fc:84:a4:48:38:63:9e:9f:af:3a:13:1c:95:df:4e:5b:
         cc:09:8a:0a:58:ed:e2:a2:12:c4:64:da:0a:b5:02:1e:f6:a0:
         99:01:32:a4:b0:49:4a:96:c2:d4:ae:f5:1b:8c:0c:56:03:10:
         a1:2b:e9:f0:df:b7:ad:51:ce:69:8c:53:fe:90:10:1b:88:ad:
         21:62:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:08 2025 by rpki-client on console.sobornost.net