Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/B59362A28D5C11EEADDC522EC4F9AE02.roa
File:                     B59362A28D5C11EEADDC522EC4F9AE02.roa (raw, json)
Hash identifier:          sPbI4s6oqdRUOiNi18Y1/q6iWjlYMVf5hdTw+xVFaMo=
Subject key identifier:   A1:EB:38:CA:0F:29:4E:65:76:2D:F7:DC:1F:B3:34:90:D8:F0:77:2D
Certificate issuer:       /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4
Certificate serial:       D9
Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/B59362A28D5C11EEADDC522EC4F9AE02.roa
Signing time:             Fri 17 Jan 2025 03:57:11 +0000
ROA not before:           Fri 17 Jan 2025 03:57:11 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     152117
IP address blocks:        36.50.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F28
        Validity
            Not Before: Jan 17 03:57:11 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6789d516-2752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:6b:61:31:1c:d6:7a:bd:08:be:cd:c0:1c:
                    75:b0:9b:7a:ec:81:5c:41:80:18:0f:05:d8:c7:b5:
                    ac:00:05:d1:3d:c6:3a:2d:14:43:0d:90:d9:ae:04:
                    e4:37:5f:2d:b1:da:22:41:9f:49:07:d7:21:89:da:
                    36:21:c3:23:c6:55:d8:0f:d2:f1:3b:a4:b6:8c:c8:
                    2c:43:ef:9a:be:b6:5c:c6:42:4f:44:c3:fd:6e:8c:
                    28:8a:a5:0a:f1:22:c4:22:9e:ae:fe:2b:85:a4:72:
                    3b:9b:cf:68:72:45:2d:29:62:6a:86:29:d6:a6:f0:
                    ec:4f:a3:9e:44:30:72:ab:30:9a:a9:21:1b:6f:db:
                    b6:cd:7a:d2:6f:4e:6a:bf:81:7d:6b:a1:dd:57:f0:
                    a3:d2:f1:ba:82:33:bb:3f:8b:8d:16:a1:4c:fb:94:
                    1d:37:f2:8c:de:c0:77:d7:0d:53:6c:b4:5c:b5:e8:
                    9e:dd:5c:1d:ce:80:da:12:0f:cc:ef:ec:f4:f4:56:
                    e6:1f:3f:a2:33:a3:1a:6b:b4:c2:ae:d0:c1:5f:db:
                    87:46:1d:32:bd:b6:b1:e3:37:ae:21:54:11:6a:43:
                    23:38:9e:ce:cb:46:c2:b3:b3:fe:86:9b:fc:32:e4:
                    23:20:95:9b:d8:55:6d:32:ed:2f:04:5f:a9:3c:57:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EB:38:CA:0F:29:4E:65:76:2D:F7:DC:1F:B3:34:90:D8:F0:77:2D
            X509v3 Authority Key Identifier:
                keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/B59362A28D5C11EEADDC522EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:f5:96:ca:0c:14:9e:48:56:bb:ef:1e:b2:db:b1:ce:c7:
         4b:f5:62:00:4f:6a:98:af:c1:88:6b:ce:4b:42:9a:c8:b2:2c:
         73:82:e7:b9:02:b4:1c:5b:62:a2:f5:5c:3f:61:96:ed:e4:c7:
         89:0a:1a:9e:c7:98:4e:a7:64:b1:2f:75:65:5c:dc:36:88:f8:
         f8:27:b2:00:c2:89:db:10:a9:37:ec:7f:70:5c:e5:17:6b:da:
         f9:1a:b5:49:11:95:f5:d3:9b:9e:51:b5:0e:69:dc:47:61:63:
         52:36:93:ee:13:08:dd:ff:4b:ef:04:92:d4:a4:75:be:24:6f:
         a5:f3:f6:1f:12:05:72:26:77:96:f2:5c:9a:db:42:22:36:98:
         2f:a0:05:a0:c8:d6:5a:b0:24:f2:c5:d5:9c:40:84:bd:28:10:
         0f:03:10:ea:e1:30:ec:56:aa:71:ef:1e:fe:23:2a:11:86:e6:
         e2:45:9f:6a:e4:77:69:5b:89:46:26:b8:5b:60:a6:63:ae:de:
         88:c8:81:af:b9:a3:a9:60:0b:63:19:4f:eb:f6:3c:de:52:bb:
         3c:85:d4:a9:52:c1:18:dd:28:11:1d:9d:bf:d2:ad:68:7f:e0:
         aa:d5:e9:ec:71:41:cb:fc:2f:1f:48:7b:50:b2:67:6d:31:5b:
         ad:58:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:37 2025 by rpki-client