Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F6311004DD8E11EC8005001CC4F9AE02.roa
File:                     F6311004DD8E11EC8005001CC4F9AE02.roa (raw, json)
Hash identifier:          ZnXK3Se5RiC6TyMZXuhhqSGcILLb/GOoRSbMfMWY4KQ=
Subject key identifier:   53:1A:E5:73:4E:B6:85:65:9D:62:5B:0A:EC:81:2B:27:29:40:E6:E3
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       02C6
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F6311004DD8E11EC8005001CC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:03:35 +0000
ROA not before:           Thu 27 Jul 2023 02:03:35 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     59374
IP address blocks:        147.50.228.0/24 maxlen: 24
                          147.50.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Jul 27 02:03:35 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d077-e98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:b4:80:85:a1:5e:ef:52:5f:39:f8:92:25:
                    bc:b4:cd:bf:7a:d0:07:a3:aa:56:ca:20:b6:a0:a4:
                    d0:79:38:c6:4f:9a:74:f5:4e:62:e0:a1:d6:38:8d:
                    4c:48:b9:77:a5:22:ab:59:57:cb:1a:ed:b4:10:e1:
                    35:e6:a8:02:94:c8:2e:d8:d8:77:82:72:d7:03:1f:
                    8e:91:8a:c4:d2:23:06:2f:24:56:d9:55:95:1d:b4:
                    d3:32:61:2e:bd:5e:2b:65:05:ac:3d:68:ee:23:7b:
                    19:9b:10:05:3b:1e:e2:2b:51:80:9a:68:78:6b:c8:
                    ae:40:79:7b:e7:75:c9:d7:8c:cb:d7:0b:ba:69:1f:
                    91:e4:3c:e6:40:92:24:1e:ec:07:df:64:9d:ee:29:
                    0e:53:66:5b:f5:49:c1:f6:c6:35:87:ce:1c:89:6c:
                    2d:37:e2:4b:92:a3:e7:52:2c:2e:bc:83:bf:ed:a2:
                    0a:57:dd:5b:63:26:2b:17:12:49:59:63:6e:bc:f2:
                    84:76:42:f6:bf:4b:47:f7:33:f9:c1:80:4a:aa:c3:
                    21:9b:93:aa:2c:35:c0:c4:69:c4:39:73:72:92:6a:
                    f0:77:71:ed:02:50:54:24:6a:ab:e9:88:08:45:2d:
                    25:cb:dd:db:58:eb:55:84:52:9e:ba:7e:d1:fc:7a:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1A:E5:73:4E:B6:85:65:9D:62:5B:0A:EC:81:2B:27:29:40:E6:E3
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F6311004DD8E11EC8005001CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.228.0/24
                  147.50.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:be:f6:d7:75:b2:ea:42:3b:66:a2:b7:b6:5e:1c:d7:ef:a8:
         26:04:9b:28:34:18:0b:6b:93:fa:e0:75:ec:ad:c8:9e:c4:d5:
         02:af:8c:4f:7a:07:bc:b6:7e:77:fd:92:e5:24:af:58:a7:d5:
         ce:ac:05:92:5b:82:6d:a4:00:89:6d:ee:a9:a3:af:ab:1c:44:
         4f:a8:22:07:c3:90:e7:45:34:8b:2c:9d:32:c6:f0:94:c2:22:
         62:fa:b9:d0:76:6a:e3:5b:07:ff:fa:fb:8e:07:bb:25:89:7a:
         d2:4b:5a:e6:9a:fc:b0:4b:71:88:26:7e:ec:fa:94:ad:5d:d8:
         3d:ec:93:25:c9:8e:9f:59:62:e2:cc:e1:69:d2:8e:74:40:31:
         de:fe:70:eb:a9:16:d0:98:78:41:89:9b:ee:60:1e:e2:d2:a9:
         12:01:8c:b1:71:dc:7c:1a:2f:5e:38:90:c4:e4:de:49:b8:c0:
         da:89:c2:ad:18:70:d0:63:de:b1:d6:dd:13:29:d0:b1:ac:54:
         4e:e5:22:94:65:ca:f0:00:5a:3e:5a:2d:30:85:8d:cf:df:84:
         83:09:a9:67:99:fc:08:11:e6:c2:12:7a:67:39:ba:1f:99:b7:
         de:84:d6:f4:1c:05:fd:f9:8f:bf:e3:77:78:2e:f7:c0:b4:65:
         85:a7:35:47
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF
NjdCQTRCQTYwHhcNMjMwNzI3MDIwMzM1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGMxZDA3Ny1lOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyoq0gIWhXu9SXzn4kiW8tM2/etAHo6pWyiC2oKTQeTjGT5p09U5i4KHWOI1M
SLl3pSKrWVfLGu20EOE15qgClMgu2Nh3gnLXAx+OkYrE0iMGLyRW2VWVHbTTMmEu
vV4rZQWsPWjuI3sZmxAFOx7iK1GAmmh4a8iuQHl753XJ14zL1wu6aR+R5DzmQJIk
HuwH32Sd7ikOU2Zb9UnB9sY1h84ciWwtN+JLkqPnUiwuvIO/7aIKV91bYyYrFxJJ
WWNuvPKEdkL2v0tH9zP5wYBKqsMhm5OqLDXAxGnEOXNykmrwd3HtAlBUJGqr6YgI
RS0ly93bWOtVhFKeun7R/HoGoQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFMa5XNO
toVlnWJbCuyBKycpQObjMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvRjYzMTEwMDRE
RDhFMTFFQzgwMDUwMDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBACTMuQDBACTMvEwDQYJKoZIhvcNAQELBQADggEBACO+9td1
supCO2ait7ZeHNfvqCYEmyg0GAtrk/rgdeytyJ7E1QKvjE96B7y2fnf9kuUkr1in
1c6sBZJbgm2kAIlt7qmjr6scRE+oIgfDkOdFNIssnTLG8JTCImL6udB2auNbB//6
+44HuyWJetJLWuaa/LBLcYgmfuz6lK1d2D3skyXJjp9ZYuLM4WnSjnRAMd7+cOup
FtCYeEGJm+5gHuLSqRIBjLFx3HwaL144kMTk3km4wNqJwq0YcNBj3rHW3RMp0LGs
VE7lIpRlyvAAWj5aLTCFjc/fhIMJqWeZ/AgR5sISemc5uh+Zt96E1vQcBf35j7/j
d3gu98C0ZYWnNUc=
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:11 2024 by rpki-client on console-ams.rpki-client.org