Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/6EAE50E8EBFA11EEA937307AC4F9AE02.roa
File:                     6EAE50E8EBFA11EEA937307AC4F9AE02.roa (raw, json)
Hash identifier:          n4jE/JU888DErTDFi7j6yPAf5IRm3HLfX3pJFCp7TIY=
Subject key identifier:   92:BA:44:20:60:9D:97:12:2F:06:9C:EF:4F:CB:1F:0C:66:AE:A1:60
Certificate issuer:       /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial:       88
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/6EAE50E8EBFA11EEA937307AC4F9AE02.roa
Signing time:             Tue 03 Dec 2024 05:09:40 +0000
ROA not before:           Tue 03 Dec 2024 05:09:40 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     142636
IP address blocks:        36.50.59.0/24 maxlen: 24
                          36.50.59.0/25 maxlen: 25
                          36.50.59.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
                          rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 05:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913318E
        Validity
            Not Before: Dec  3 05:09:40 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=674e9294-f776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:14:d0:d1:19:86:48:b4:90:54:81:75:8c:
                    b7:3b:03:73:8b:0d:e7:8e:f7:ce:d9:f3:56:17:37:
                    a0:3f:79:f9:aa:3f:5b:e5:44:51:47:87:9c:68:e8:
                    74:fc:70:56:1e:10:49:26:56:ad:4d:60:56:b9:57:
                    04:00:ea:25:44:e9:54:ae:8a:59:75:84:cd:8e:ae:
                    ad:08:19:18:95:3e:e9:aa:8b:87:18:58:3b:b9:00:
                    08:12:26:d8:c9:be:81:cd:39:cf:3c:81:5f:e1:62:
                    58:3d:ae:ac:97:24:54:e9:0f:2d:ee:3b:a8:ae:85:
                    5d:43:a9:39:50:39:db:c9:58:4a:97:ce:df:9d:4f:
                    71:21:a0:40:fb:31:2b:d4:fc:50:49:8f:f2:f5:d2:
                    f2:67:c0:0c:da:8f:be:e7:51:a9:57:d4:41:36:b9:
                    21:35:5d:bb:66:f2:ff:ea:81:ec:2e:bf:32:c3:22:
                    c9:1e:4f:45:c3:76:04:6e:ac:e3:72:52:be:9c:36:
                    2b:d0:05:a7:d2:1f:8e:2e:3b:f0:01:1b:de:c8:ce:
                    3b:dd:eb:43:25:66:2a:12:40:9c:bb:a9:dd:50:fa:
                    5a:24:2a:67:fa:81:5a:bc:10:67:20:33:ff:c5:ad:
                    d4:3b:10:46:04:79:c3:34:87:f1:c2:c9:c3:cb:92:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BA:44:20:60:9D:97:12:2F:06:9C:EF:4F:CB:1F:0C:66:AE:A1:60
            X509v3 Authority Key Identifier:
                keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/6EAE50E8EBFA11EEA937307AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:a7:35:b2:92:b4:0f:a2:a8:60:0e:fe:11:5d:64:9c:27:98:
         23:60:e5:eb:f9:fc:27:f7:a7:9d:7f:b2:e3:01:96:8a:94:86:
         25:60:0b:e2:c5:fd:76:fe:26:a3:b5:0b:1f:7a:2c:ee:75:4a:
         92:68:5d:da:4f:45:98:93:c9:fd:b7:a9:8a:71:49:87:4e:10:
         bd:59:1d:59:1b:e4:5e:35:17:cc:48:a5:02:e6:14:4f:b8:ab:
         1d:b2:f5:a9:87:33:2a:5d:24:7d:c5:1d:01:4d:0a:a4:55:d4:
         02:de:6c:7e:98:25:e5:91:1a:98:29:53:c0:65:8a:86:be:3c:
         b4:ec:9f:3f:b8:4f:55:97:6a:35:76:b0:e2:66:29:e6:fc:25:
         32:ce:32:12:7c:6b:0e:91:18:c4:f9:c9:48:a7:c9:21:f9:ca:
         22:80:c8:a1:fb:9f:58:4b:bc:51:4d:57:f2:63:b1:68:06:66:
         54:4f:ed:80:52:4f:48:35:08:b5:b5:8d:84:6c:29:81:7d:e8:
         b2:dd:90:12:ef:38:30:72:bd:87:4c:9b:c0:0d:73:4f:f4:c1:
         d2:82:a5:d9:6b:11:01:3d:c9:f4:a9:14:b8:8d:9d:24:23:f4:
         4c:4b:30:d4:e3:f2:cf:b5:f4:d9:71:2b:55:f2:48:c0:f9:c8:
         6a:50:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:27 2025 by rpki-client