Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/50CD2AC8B3A411EF8B0CF846C4F9AE02.roa
File:                     50CD2AC8B3A411EF8B0CF846C4F9AE02.roa (raw, json)
Hash identifier:          EnPZYCt7RIWP20P5QCRlPNkAQkoLiEcDOv59f4WWQVE=
Subject key identifier:   DF:D7:F8:63:FC:16:FD:00:B5:D0:37:4F:B2:F8:78:42:08:BB:1A:05
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0495
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/50CD2AC8B3A411EF8B0CF846C4F9AE02.roa
Signing time:             Tue 10 Dec 2024 08:56:35 +0000
ROA not before:           Tue 10 Dec 2024 08:56:35 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     153416
IP address blocks:        160.191.242.0/23 maxlen: 23
                          160.191.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 14:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A
        Validity
            Not Before: Dec 10 08:56:35 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=67580243-93f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f2:82:12:bc:be:19:b3:64:2a:42:c1:e4:ea:
                    8d:4e:e5:ba:3a:e4:82:98:1a:5d:d0:52:03:a9:c4:
                    9f:cf:e3:88:83:cd:17:15:96:2a:83:19:fd:15:ae:
                    ee:52:75:8c:93:f9:10:1b:d0:32:d1:00:b0:60:96:
                    b7:7f:94:84:e0:03:f6:d2:82:e3:24:66:92:3c:e0:
                    2c:e4:ea:71:57:4c:97:ac:5e:11:3c:41:3e:6d:5b:
                    32:40:69:7a:1e:0f:d6:47:29:f5:b7:64:3a:34:de:
                    c3:b5:9a:52:f0:a2:83:0e:2a:3c:11:37:7a:cb:8d:
                    40:81:25:49:d7:84:d7:ef:2b:46:32:aa:3a:ff:f5:
                    78:03:22:a7:e6:aa:01:51:63:b8:49:5d:0c:26:6a:
                    9a:f5:f6:7b:9f:df:17:26:11:11:95:5b:21:c5:39:
                    d1:15:73:1e:c7:3e:68:67:54:36:88:0b:ca:ff:6e:
                    1f:13:41:1f:48:b5:44:c4:75:d0:d8:24:e2:e4:21:
                    91:b8:a7:e2:b1:51:ae:65:6c:ba:4b:58:50:8b:ba:
                    72:13:81:c5:2c:82:44:38:cc:f9:46:8c:79:51:6c:
                    7b:77:d3:d9:d7:65:4e:8b:6b:1b:1d:97:1c:e9:66:
                    ff:93:83:fd:7d:1f:2c:e7:18:a9:2f:44:0b:5e:a9:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D7:F8:63:FC:16:FD:00:B5:D0:37:4F:B2:F8:78:42:08:BB:1A:05
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/50CD2AC8B3A411EF8B0CF846C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.242.0-160.191.245.255

    Signature Algorithm: sha256WithRSAEncryption
         03:35:d2:aa:45:9f:53:4c:6c:57:1e:7f:c4:b4:67:af:10:48:
         49:90:5a:90:08:b7:39:e8:64:fe:39:6d:87:85:2c:9a:33:ad:
         05:9f:c8:fd:49:6b:c8:4c:85:88:6d:13:8d:72:c4:1b:9e:93:
         f7:38:b0:f3:09:72:74:49:6a:c3:c8:c6:d1:a1:06:62:0c:78:
         d2:04:b3:ea:1f:e0:5f:8a:d9:7e:cc:d3:ea:9e:d0:c3:39:a2:
         b1:d2:13:89:7f:1f:c0:d7:4a:54:e0:25:95:32:de:73:49:5a:
         0f:38:b0:d6:6d:f2:e5:7d:8e:e1:7a:a6:2c:1e:aa:34:a4:99:
         8a:3a:7b:f2:1c:8c:54:8f:53:2a:e5:3e:fc:60:67:26:32:4c:
         72:fa:32:0b:bc:81:2e:7c:ae:77:1c:a6:0d:0c:6d:32:06:49:
         3a:a2:a3:de:51:b7:e6:af:80:60:b8:0b:3f:3c:fe:24:a5:3a:
         fb:ce:fa:38:f0:b0:7f:c4:36:9f:76:5a:6f:3a:fe:a0:ce:93:
         65:8f:4f:f5:a9:21:cf:fb:1b:da:bd:4c:89:fc:00:99:43:05:
         52:eb:74:e9:0a:55:e9:bb:d5:a6:3e:f1:a1:29:10:62:3c:a2:
         d8:ba:96:3a:d1:c8:22:04:ac:1d:0d:3f:81:a7:75:6c:f2:92:
         a2:b5:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:33:27 2025 by rpki-client