Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/ABE3468CBB5611EE936F4785C4F9AE02.roa
File:                     ABE3468CBB5611EE936F4785C4F9AE02.roa (raw, json)
Hash identifier:          lI6Q78HbL3QUhYUlhhzatCtrWosSdu79FdgEdqfNWdI=
Subject key identifier:   CE:95:D5:B6:15:D5:39:4B:3F:D2:FA:DA:5F:ED:85:CA:F5:3E:93:54
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0329
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/ABE3468CBB5611EE936F4785C4F9AE02.roa
Signing time:             Thu 25 Jan 2024 07:52:22 +0000
ROA not before:           Thu 25 Jan 2024 07:52:22 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     152190
IP address blocks:        147.50.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Jan 25 07:52:22 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65b21336-762a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:b8:1f:e8:b4:55:58:d2:40:fb:ba:73:95:
                    91:49:96:ee:84:a1:b2:e7:71:c1:c9:03:60:12:65:
                    8b:21:4f:af:f7:07:f4:59:70:85:65:d9:74:b0:90:
                    6b:97:fc:b3:58:15:a0:64:1e:2b:56:37:21:b1:c9:
                    f9:fa:b1:d3:e3:94:0e:34:b2:69:85:7d:83:bf:b1:
                    e8:87:9c:ce:d8:a6:bf:60:74:64:0a:6f:2e:d3:71:
                    8d:1c:93:c7:c6:85:1c:78:9c:9a:ea:bf:b4:4a:c7:
                    9f:d1:e7:14:3e:78:97:c2:87:d3:ad:ba:10:19:e9:
                    97:ae:91:fc:dd:79:c7:69:32:bc:11:78:7b:38:0e:
                    6f:75:6d:02:7a:c1:02:9e:d1:30:07:17:a4:37:c1:
                    85:92:91:e1:28:c0:51:49:24:2d:cd:cc:1a:aa:ee:
                    76:fd:71:b9:96:90:a8:8c:71:bb:76:70:bb:bb:17:
                    b6:0a:66:27:e3:fa:c5:1a:bc:ba:12:af:11:2d:c5:
                    0a:e2:fb:d7:7b:40:6f:f1:d8:93:56:5e:c3:26:07:
                    4f:74:79:4f:38:ec:6e:20:37:43:b7:07:7a:73:f7:
                    59:7b:84:78:94:3d:e2:56:e1:be:7f:e6:6c:92:f7:
                    d4:83:34:d6:26:61:a6:0b:91:8e:9e:ba:46:7a:b4:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:95:D5:B6:15:D5:39:4B:3F:D2:FA:DA:5F:ED:85:CA:F5:3E:93:54
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/ABE3468CBB5611EE936F4785C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:7e:1f:ba:dc:42:a9:0d:1b:37:35:cd:06:80:6d:5f:25:b2:
         42:32:36:eb:3e:f4:31:70:0a:3d:48:4c:8a:b9:90:21:d5:80:
         35:8a:4f:e2:79:f8:f1:01:dc:eb:a5:8d:c2:b9:27:04:ff:f5:
         e1:fa:86:c9:67:3f:43:5c:76:48:f3:d7:5c:33:dc:85:52:f5:
         19:8a:83:bb:65:cd:22:53:83:3a:4f:9e:e2:d6:47:e5:00:87:
         47:63:ac:8c:c9:55:83:8d:3e:f6:7b:c2:e0:ae:35:fb:d1:df:
         cf:88:17:5c:f3:05:0b:44:77:5e:e9:8f:cd:87:fa:fe:52:b4:
         ef:49:d4:30:b0:16:6e:e8:be:3d:bf:a0:94:59:8a:ca:a1:cd:
         7a:50:1d:be:f6:a1:92:ae:2b:a1:8b:86:b7:ef:36:fe:df:1f:
         1d:1a:34:85:10:0e:d2:ef:d9:dd:7c:a8:55:ba:a8:c5:ac:8e:
         38:4b:b4:0c:6d:a6:26:79:4d:59:dd:b6:95:dd:8f:88:3d:16:
         c2:85:b3:59:b8:a8:c2:03:bf:72:78:1c:81:01:39:c1:18:b2:
         83:19:1b:ab:dd:fc:77:79:5c:13:8e:66:b3:e9:fc:61:ad:d0:
         d8:dd:89:34:8a:ae:03:97:fd:ce:3d:05:87:7e:1c:da:88:d3:
         b4:e1:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:11 2024 by rpki-client on console-ams.rpki-client.org