Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa
File:                     A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa (raw, json)
Hash identifier:          bQkUW47Omh2zud2h3jRyO8DuSrBukJKJFd0HuML8p2M=
Subject key identifier:   88:DB:4B:DC:03:1F:14:BA:F2:BE:D6:91:26:79:B4:01:FB:3C:4F:66
Certificate issuer:       /CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3
Certificate serial:       27
Authority key identifier: D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa
Signing time:             Fri 15 Mar 2024 07:40:58 +0000
ROA not before:           Fri 15 Mar 2024 07:40:58 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     44444
IP address blocks:        116.50.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl
                          rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 08:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3
        Validity
            Not Before: Mar 15 07:40:58 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f3fb8a-ddfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a4:07:78:06:76:fc:c5:9b:b4:14:ab:13:89:
                    7c:3e:34:a6:6c:62:08:06:ad:92:74:05:b1:2f:b7:
                    9a:cc:3d:18:06:fb:14:d6:0e:ff:db:d4:3c:3b:f5:
                    d3:99:7c:11:fb:f6:fb:f1:e1:82:84:36:66:71:3f:
                    36:90:a7:b0:72:54:e9:c5:9c:3c:00:68:6e:47:6e:
                    81:2c:b1:dd:50:43:ea:f1:28:b7:fa:d6:a2:27:0c:
                    de:d4:df:50:0f:9e:9c:57:03:99:56:78:13:09:6d:
                    d3:b0:64:4a:cc:a9:fd:d6:3e:34:1d:be:d0:98:c4:
                    38:33:a3:8a:d8:05:b5:cf:1b:09:19:36:95:e9:cc:
                    ca:3e:e1:74:a3:0d:39:8f:1e:ee:98:b2:ac:d6:4e:
                    30:1f:02:be:bf:0a:77:78:b4:c3:e3:be:f8:76:7a:
                    ab:57:28:19:da:5f:20:d0:f8:65:9b:43:11:4c:bb:
                    36:ea:c2:5c:66:c3:13:d9:24:46:61:8b:9b:f3:ab:
                    aa:38:02:a1:cd:17:57:d4:a2:1b:52:71:c9:a3:15:
                    df:4c:7d:54:37:f7:d1:e9:6b:20:bb:d3:21:e0:c5:
                    3d:ee:96:cc:b6:10:14:cf:5a:19:be:21:5b:39:63:
                    b8:9b:4a:3a:e3:37:e9:4e:1a:1d:0a:51:b9:0f:61:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DB:4B:DC:03:1F:14:BA:F2:BE:D6:91:26:79:B4:01:FB:3C:4F:66
            X509v3 Authority Key Identifier:
                keyid:D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.50.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:44:7e:e1:76:d3:ca:29:98:7c:20:f9:b7:11:a2:2d:ee:fe:
         8a:c6:a4:7d:df:2a:e4:a9:66:c2:96:fe:57:60:60:8d:dc:4b:
         ea:6e:46:2c:89:87:16:82:9c:0a:2d:58:7b:eb:a5:6e:03:37:
         cb:1f:48:1c:c7:d9:26:ee:fd:fd:47:79:0d:a5:60:8b:95:d3:
         fe:d1:02:1c:05:6d:80:8c:6d:e8:64:00:56:49:8b:3b:05:d9:
         89:a1:e2:40:15:51:e4:5d:3e:87:ea:10:2b:e1:0c:e1:fa:50:
         ec:7f:00:e1:f6:b1:c5:2a:95:0e:3b:a2:42:12:45:eb:f3:27:
         f4:cd:7e:5b:f0:aa:95:85:0d:e6:50:48:d9:49:1e:70:59:85:
         35:fa:af:e9:46:db:cf:e8:ae:99:9a:f0:48:0f:c7:35:33:f3:
         27:92:08:69:29:bb:c7:23:d5:35:9a:db:f9:dd:fc:6f:d3:07:
         67:e9:d8:2a:23:c4:d0:73:42:c9:7f:b7:a0:05:81:12:5e:27:
         52:fa:50:b6:7f:a3:a2:7c:a2:75:e5:2b:17:e5:83:e4:7d:24:
         44:d1:f5:aa:37:c7:10:f8:ac:5b:d6:64:49:cc:47:d6:8e:e7:
         83:38:24:50:3b:39:a7:b6:0a:3a:b6:8c:dd:d2:7d:30:e1:dd:
         a2:98:10:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:40:50 2024 by rpki-client on console-fra.rpki-client.org