Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/50DF588C5F1211EB92B3F220C4F9AE02.roa
File:                     50DF588C5F1211EB92B3F220C4F9AE02.roa (raw, json)
Hash identifier:          SLPQ9+YN77UbYKdBZDZ3kD9U83Us25JbVwinT+8F8Lw=
Subject key identifier:   22:A0:5C:27:4D:BA:91:ED:34:C4:5E:DB:10:61:94:B5:D1:8C:CB:29
Certificate issuer:       /CN=A9189099/serialNumber=6200B157ADBA2569FA7B88B7DA2FB5AE3FF6A3B6
Certificate serial:       058E
Authority key identifier: 62:00:B1:57:AD:BA:25:69:FA:7B:88:B7:DA:2F:B5:AE:3F:F6:A3:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgCxV626JWn6e4i32i-1rj_2o7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/50DF588C5F1211EB92B3F220C4F9AE02.roa
Signing time:             Thu 31 Aug 2023 23:30:39 +0000
ROA not before:           Thu 31 Aug 2023 23:30:39 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     38491
IP address blocks:        121.127.4.0/24 maxlen: 24
                          121.127.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/YgCxV626JWn6e4i32i-1rj_2o7Y.crl
                          rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/YgCxV626JWn6e4i32i-1rj_2o7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgCxV626JWn6e4i32i-1rj_2o7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 22:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189099/serialNumber=6200B157ADBA2569FA7B88B7DA2FB5AE3FF6A3B6
        Validity
            Not Before: Aug 31 23:30:39 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f1229f-d62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:5e:55:8b:58:60:19:5e:5c:93:e1:56:fb:
                    37:4f:06:eb:81:a3:6f:13:f5:f6:44:9a:46:21:a2:
                    40:4a:a0:68:40:4b:98:d3:d8:e9:ac:80:15:ed:f5:
                    36:f6:d1:30:8a:1f:d3:a2:0f:99:c8:c0:ba:4a:02:
                    7e:56:bc:c2:e2:f9:c7:94:cd:3e:ba:79:ba:67:b3:
                    10:d0:eb:73:76:c7:45:65:3b:8b:d9:4d:87:cb:b2:
                    4e:b9:7b:dc:2d:26:a4:bf:13:ad:91:4d:d6:87:4c:
                    cb:1b:45:6b:52:cc:cf:bb:b9:96:3c:d1:b3:a1:24:
                    e6:a3:6f:2a:72:20:1b:2d:2b:25:fb:1c:c2:71:ad:
                    f2:db:99:12:ee:b0:5b:21:ca:4a:6b:15:1a:10:1f:
                    f5:c7:07:86:49:1f:58:3c:45:4c:5c:32:cd:fa:80:
                    86:77:dc:9d:65:32:7d:fd:8b:09:bc:84:b1:f2:ec:
                    d1:a6:a4:58:29:4f:9c:57:c9:3b:b1:87:b8:4d:fa:
                    11:e0:7d:25:d6:9b:57:95:6c:dc:c7:0a:be:19:90:
                    3a:19:b5:45:f6:2a:14:f9:ba:b2:44:7e:b4:94:96:
                    a7:56:65:68:52:18:e5:25:46:d4:00:2a:f9:be:21:
                    a5:b4:c5:1a:33:db:2a:a5:ba:4d:b0:9b:46:92:c9:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A0:5C:27:4D:BA:91:ED:34:C4:5E:DB:10:61:94:B5:D1:8C:CB:29
            X509v3 Authority Key Identifier:
                keyid:62:00:B1:57:AD:BA:25:69:FA:7B:88:B7:DA:2F:B5:AE:3F:F6:A3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/YgCxV626JWn6e4i32i-1rj_2o7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgCxV626JWn6e4i32i-1rj_2o7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/50DF588C5F1211EB92B3F220C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.127.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:98:77:e5:7f:6e:2b:52:4d:0c:df:d2:a1:57:ab:bb:df:40:
         7c:36:66:24:fc:98:5c:fa:68:9e:4e:3c:db:08:21:ef:9b:7d:
         e3:d0:59:11:8d:13:5c:70:fa:05:f9:2d:e4:6d:26:c4:07:f8:
         b0:60:82:69:ac:6d:83:3a:e2:c2:88:ee:9f:cf:eb:8d:9f:2e:
         58:5a:c0:ef:a4:1b:ec:84:dd:74:87:dc:a1:82:1b:2c:d4:d2:
         65:db:56:f6:d2:58:f7:6e:78:ef:46:b9:da:80:13:e5:4e:13:
         e8:12:b7:d1:11:3a:c9:9f:09:89:63:45:09:33:a6:b5:a0:19:
         5c:f8:1b:50:ac:cc:76:40:b0:72:24:d5:d8:d1:56:3d:12:96:
         a6:7f:13:af:45:86:aa:58:24:49:43:09:3c:21:bc:06:77:8c:
         c5:81:e4:bf:27:3c:7c:92:ec:95:1e:2e:86:5a:cc:a0:6c:90:
         cd:63:2b:eb:7b:12:5a:39:1c:c6:8f:f1:27:f3:b3:10:71:e6:
         3a:6b:7e:d0:d1:24:41:bc:f8:1c:7f:7f:d3:50:65:7c:76:86:
         12:c7:f2:ef:6c:b6:52:ce:d8:65:ae:97:72:c5:53:31:83:7c:
         1b:8c:83:86:05:69:62:84:1b:fc:a9:64:01:ab:a2:dc:8c:11:
         40:ff:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 01:42:29 2024 by rpki-client on console-ams.rpki-client.org