Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/F6EB41429F2811EE91032D2AC4F9AE02.roa
File:                     F6EB41429F2811EE91032D2AC4F9AE02.roa (raw, json)
Hash identifier:          yxO8Q4SCvnLCFfrQRy7nPNmvXi4dwi3Ipp3jxwvR68c=
Subject key identifier:   E0:97:A0:43:A7:F7:FD:74:2F:91:25:25:04:F3:B2:FB:4C:E4:5E:BD
Certificate issuer:       /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
Certificate serial:       02
Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/F6EB41429F2811EE91032D2AC4F9AE02.roa
Signing time:             Wed 20 Dec 2023 11:14:39 +0000
ROA not before:           Wed 20 Dec 2023 11:14:39 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     139672
IP address blocks:        36.50.8.0/23 maxlen: 23
                          36.50.8.0/24 maxlen: 24
                          36.50.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
        Validity
            Not Before: Dec 20 11:14:39 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6582cc9e-f593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:7e:31:c4:aa:d0:bc:88:8d:18:8c:12:ac:
                    d3:12:12:57:69:eb:30:a9:e3:12:43:02:bd:b9:e9:
                    02:13:36:fd:d1:f0:84:aa:9e:79:ba:50:06:97:65:
                    95:79:58:d7:9b:8b:2b:8f:4a:93:ff:36:0b:33:17:
                    eb:3c:fe:c3:67:da:17:52:2f:93:a2:06:21:8d:a5:
                    45:bf:51:c3:46:40:e5:69:a0:b9:f7:e9:a4:bc:e8:
                    57:f6:cc:b0:2c:6f:82:5a:6d:dd:3a:4f:94:3e:c0:
                    00:c2:4c:32:4e:b9:66:7e:0e:99:76:54:23:f3:7d:
                    28:b7:a6:1b:5c:9a:90:81:75:e6:52:07:5a:f8:4d:
                    d8:d8:d8:8b:32:03:6d:47:0c:f8:f4:c2:40:5a:bb:
                    b2:cf:eb:bc:e9:35:04:53:80:b7:f8:b8:9b:65:cf:
                    c2:d8:97:dd:71:2e:b0:9f:4d:0f:77:61:3d:56:0b:
                    0a:f1:be:7c:fe:d4:85:bb:61:8a:51:79:c4:1e:1f:
                    fb:89:92:08:7f:9e:b0:fa:5b:21:16:5e:c0:3a:24:
                    7f:a9:77:b2:7c:e3:8b:1e:4f:9d:2c:65:e7:03:8e:
                    87:c5:b0:9f:8d:87:79:95:dc:1b:97:41:53:b8:87:
                    00:88:9f:2b:c5:98:d8:da:d7:a9:13:b0:9a:e3:e6:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:97:A0:43:A7:F7:FD:74:2F:91:25:25:04:F3:B2:FB:4C:E4:5E:BD
            X509v3 Authority Key Identifier:
                keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/F6EB41429F2811EE91032D2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:60:35:15:68:83:0a:d8:15:f9:23:9d:98:db:84:93:47:79:
         90:e6:55:df:b7:22:db:5a:6c:6c:08:61:1a:94:d7:b8:93:ba:
         ac:57:a6:6a:a3:ce:e2:10:14:7b:59:8f:92:d8:a8:c7:12:62:
         2b:40:b3:9d:7d:fb:4e:b0:30:66:95:7e:fc:e0:18:54:d1:db:
         c9:6e:2f:13:8f:ea:fc:72:bf:fc:98:e5:01:d2:e7:c7:eb:db:
         c8:80:17:e2:33:9d:2a:da:3b:6b:5c:44:09:4f:83:ed:6b:ca:
         11:c9:65:f0:9c:34:3d:70:71:f4:3f:2f:1f:15:06:39:eb:c4:
         3c:fe:8e:ad:05:42:ef:20:f0:36:6b:1c:67:80:f8:21:12:12:
         b6:06:b8:36:64:77:48:8a:4b:8c:63:6c:6f:a7:04:7b:cf:f8:
         93:6c:3b:43:a5:f3:52:3f:ff:06:8d:c6:ad:c5:cc:8c:65:0f:
         65:1c:96:21:ca:79:e5:f1:11:e1:63:26:a4:6e:ad:b3:8f:67:
         b6:48:fc:f1:7d:a1:1f:49:33:91:13:a9:1e:0a:29:a5:d2:a8:
         12:b7:66:e8:81:9e:e5:06:10:7f:07:a1:9b:24:08:b1:c2:03:
         a2:6a:f6:0b:44:4d:39:bf:a9:ed:ea:eb:0b:14:c1:3d:7d:61:
         b4:1c:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:28 2024 by rpki-client on console-fra.rpki-client.org