Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/CFD2FAA62A2811EF8313971CC4F9AE02.roa
File:                     CFD2FAA62A2811EF8313971CC4F9AE02.roa (raw, json)
Hash identifier:          e+okQTky3rxLnURNJYv8tMNd0/Aev94NgPH4sbrFFlI=
Subject key identifier:   B7:36:FC:C7:D3:4F:6D:70:31:11:F4:67:CF:CA:D8:32:D9:3C:F5:C2
Certificate issuer:       /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
Certificate serial:       03
Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/CFD2FAA62A2811EF8313971CC4F9AE02.roa
Signing time:             Fri 14 Jun 2024 08:33:44 +0000
ROA not before:           Fri 14 Jun 2024 08:33:44 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132583
IP address blocks:        36.50.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
        Validity
            Not Before: Jun 14 08:33:44 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=666c0068-d7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:49:8a:c0:fe:11:79:4a:46:18:33:30:da:
                    5e:e2:dc:2d:4b:c7:c1:a7:65:ee:8b:b7:80:68:89:
                    ff:6e:f4:f0:aa:d9:59:a0:c8:c0:c5:7d:fb:d1:7d:
                    aa:1d:19:ee:7e:63:2d:72:ae:36:02:66:d1:fe:12:
                    83:67:8c:d3:db:24:63:d1:cf:85:3d:2c:4a:e7:a5:
                    c8:15:a0:5d:ce:1e:e4:8d:fe:f6:5e:96:e7:2b:b6:
                    5e:4e:60:4b:a0:c5:83:00:90:64:87:e1:67:b1:aa:
                    35:2b:c4:8d:f1:1e:c4:82:6a:41:fc:6f:f4:54:8e:
                    8b:1e:a5:af:22:b7:4d:a5:01:db:d6:9e:57:21:c7:
                    21:8c:cd:b0:96:fc:a8:8d:13:48:f4:db:c2:91:75:
                    52:11:05:9a:56:ab:77:4c:1e:3f:05:83:c9:24:f5:
                    bc:c3:6d:71:e0:36:29:c6:0d:b8:ba:c6:c6:4d:b2:
                    51:2c:bc:0f:71:9a:3f:aa:59:4a:af:40:8e:be:11:
                    9f:dd:20:c2:8c:46:30:84:e3:85:75:15:0b:14:6d:
                    c3:af:46:d1:0d:47:b8:88:e7:a2:ca:d2:7c:63:43:
                    67:e8:38:12:07:df:ba:1a:b9:25:aa:1c:d7:ac:13:
                    3c:93:8e:47:6f:6e:75:8d:14:02:b4:a6:07:f7:f0:
                    c4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:36:FC:C7:D3:4F:6D:70:31:11:F4:67:CF:CA:D8:32:D9:3C:F5:C2
            X509v3 Authority Key Identifier:
                keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/CFD2FAA62A2811EF8313971CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:5d:18:82:ac:3e:1c:9e:98:0c:29:67:ed:03:b9:74:e4:f6:
         a7:c1:1d:88:cc:20:74:b4:78:68:ac:f7:54:9c:57:0f:cf:27:
         7a:37:68:47:33:38:12:5c:26:83:28:50:fa:f1:f3:18:7a:00:
         c2:b9:ca:fd:19:6a:d1:33:c2:79:f5:7d:12:16:d7:70:53:fd:
         16:88:da:6c:4d:69:d8:dd:df:61:09:ba:65:2a:16:36:e8:96:
         54:be:cc:99:7c:16:f5:ad:fe:f0:2e:13:f2:9e:c5:a4:c5:a6:
         24:65:1d:e9:6b:8a:5f:f9:7b:0e:bf:4a:a1:d0:8f:c2:da:8c:
         56:aa:c7:2b:d6:3f:ad:b7:1f:cc:5d:d8:2a:3f:73:d0:4d:c2:
         03:f9:4a:1b:77:fe:e5:dd:fb:fd:35:ef:9b:40:66:02:67:f5:
         9d:a2:41:7d:bf:1b:51:3d:3b:fd:dc:2a:6d:96:b4:9e:ff:8f:
         83:94:de:bd:07:a8:10:50:d0:ea:11:20:37:50:a7:44:85:25:
         b0:58:c0:06:27:78:34:9e:aa:d6:7a:53:9b:1d:a1:28:29:72:
         5e:d0:49:c0:f5:4c:41:4b:3e:1a:86:79:36:2d:98:98:33:69:
         7d:3a:7b:28:e8:11:43:1a:93:e4:d2:cd:39:b2:79:73:9f:81:
         ec:02:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org