Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/79124A64AD5F11EE8824985BC4F9AE02.roa
File:                     79124A64AD5F11EE8824985BC4F9AE02.roa (raw, json)
Hash identifier:          wMz4YHecnoUe6lNOvLCIKTrJsjYktuBbQQe4ax28M00=
Subject key identifier:   A6:AE:D1:2E:5F:0B:5D:D1:A0:65:6D:E5:96:5F:F7:99:3F:FC:14:58
Certificate issuer:       /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial:       EF
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/79124A64AD5F11EE8824985BC4F9AE02.roa
Signing time:             Sat 01 Mar 2025 07:38:11 +0000
ROA not before:           Sat 01 Mar 2025 07:38:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     136765
IP address blocks:        36.50.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 04:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE972
        Validity
            Not Before: Mar  1 07:38:10 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67c2b962-d572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:6e:00:9a:3d:e8:02:0c:ca:aa:54:e4:c5:
                    d3:e8:ff:12:cb:af:8a:40:9b:86:d0:07:d4:0e:35:
                    36:53:b6:80:75:ef:0d:fc:97:74:d8:6f:62:ab:59:
                    ad:83:a2:e2:5c:fb:37:18:58:8c:d0:09:0d:3b:de:
                    a1:ab:e2:0a:47:6c:58:22:00:83:8b:19:e8:3f:8f:
                    86:8f:7d:75:4b:3c:3f:89:c4:3e:e9:8f:c0:c2:41:
                    22:0f:70:16:56:4d:bb:e1:8a:3d:2a:0a:7e:74:39:
                    7e:04:18:e7:7f:2b:7c:b3:4d:2a:47:6f:7f:b9:27:
                    58:fd:c1:82:9d:75:d8:c4:75:62:6a:bc:b7:3b:69:
                    4e:e8:a2:65:23:48:93:33:ee:28:9a:08:16:6f:54:
                    de:a8:5a:05:68:d0:a5:69:3a:91:9c:02:7e:76:32:
                    36:7f:7a:15:6e:2d:ad:17:be:7a:33:3a:ff:2c:af:
                    6a:ba:f6:0b:98:25:e6:4a:d1:92:fa:04:d5:b7:6f:
                    fe:49:95:be:6b:c7:f6:20:85:76:58:ac:52:7d:e5:
                    f4:a9:1a:89:5f:66:80:f7:bc:65:c2:a3:6a:46:c8:
                    44:c4:75:bb:06:9e:6c:03:e0:9f:b9:f7:39:92:0f:
                    d8:3e:2e:c8:89:c5:02:67:67:c1:cd:5c:75:86:c7:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AE:D1:2E:5F:0B:5D:D1:A0:65:6D:E5:96:5F:F7:99:3F:FC:14:58
            X509v3 Authority Key Identifier:
                keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/79124A64AD5F11EE8824985BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:ab:07:ce:9e:fa:99:45:79:24:20:2c:7d:37:5d:f0:0e:
         ca:49:07:c1:34:e6:b6:fd:65:cc:69:7d:be:97:4e:8d:3d:bf:
         13:06:a2:89:61:74:02:d0:27:21:4c:e0:67:3b:40:cb:62:62:
         06:31:39:c3:98:8c:25:22:e0:c0:c9:f8:dc:05:90:89:7d:19:
         47:23:b4:c5:dc:b6:e5:05:68:8d:da:96:80:77:d1:96:b1:46:
         70:89:b7:25:a6:47:c7:22:09:31:6f:76:cf:46:c0:a2:77:60:
         b9:35:cb:c5:d1:ac:b4:df:4d:bd:88:fe:b7:f0:eb:eb:b7:14:
         0e:a0:16:ca:13:d1:0f:09:09:53:ab:43:83:ea:79:ff:fe:eb:
         7d:aa:60:e1:de:bc:55:5e:52:67:07:d6:b2:9b:7b:03:19:dc:
         4c:fe:56:ce:45:6b:cd:4d:40:4d:08:cb:cf:28:f6:c3:2e:4b:
         3e:3b:d0:87:4f:99:49:fb:aa:59:35:05:d9:91:02:9f:40:59:
         2b:87:68:4f:21:22:e5:fe:e9:64:dc:ab:cd:e8:94:c1:32:ad:
         21:cf:56:ef:08:9f:02:6c:6c:cb:7d:6b:5c:d9:dc:7d:20:fc:
         ac:07:fb:14:85:d8:50:b8:2d:52:46:ac:c4:93:42:dc:2a:9c:
         f9:ed:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:57:22 2025 by rpki-client