Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/0A576F089A4C11EEBD557E12C4F9AE02.roa
File:                     0A576F089A4C11EEBD557E12C4F9AE02.roa (raw, json)
Hash identifier:          t+gLjWKuMmtai3i+isqz9fnXY+98bRxTkq694uOYDEM=
Subject key identifier:   97:30:F0:24:67:29:7B:36:F0:DD:92:32:CC:69:A4:02:B0:1E:CA:4C
Certificate issuer:       /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700
Certificate serial:       04
Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/0A576F089A4C11EEBD557E12C4F9AE02.roa
Signing time:             Thu 14 Dec 2023 06:43:25 +0000
ROA not before:           Thu 14 Dec 2023 06:43:25 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     152168
IP address blocks:        36.50.104.0/24 maxlen: 24
                          36.50.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl
                          rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700
        Validity
            Not Before: Dec 14 06:43:25 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=657aa40d-def6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:89:99:27:35:f1:43:d6:68:d6:85:c7:40:
                    65:6f:5a:30:28:e2:66:ff:4c:c8:6d:39:19:f2:b3:
                    1c:57:ee:d3:ae:4c:79:c5:33:ec:65:dc:1d:f1:26:
                    a8:b4:a4:06:90:ae:88:46:91:3d:52:cc:88:05:c5:
                    df:9c:6c:f0:cb:5f:31:8f:db:fe:7d:29:aa:15:63:
                    e0:f1:b2:b0:3a:3a:91:e4:8e:da:94:82:25:06:31:
                    23:c8:6c:4d:30:ec:cb:f7:e0:7d:3e:73:b7:ee:d1:
                    32:d7:3f:c1:53:c0:54:72:bc:bb:fb:76:8e:bc:ae:
                    d2:62:1d:b5:43:6c:24:c5:d3:60:f4:76:15:23:3a:
                    8f:72:db:88:43:a9:3e:d8:e6:c6:8d:02:d3:98:83:
                    10:15:87:2b:b5:a8:ae:09:c8:0b:75:23:24:2f:32:
                    6d:2e:c8:c4:ae:36:75:1e:06:1e:c6:72:b2:e1:28:
                    95:21:0e:de:df:f2:79:3e:fe:3c:57:1a:ff:d5:3f:
                    f5:39:38:ff:39:ac:d5:e1:03:35:80:4c:24:93:78:
                    bb:13:8f:48:dd:17:1e:17:63:33:42:76:40:22:13:
                    b0:3f:e8:d0:e4:e6:35:2b:a2:0b:ef:ef:88:a9:16:
                    e5:6d:f1:9d:c3:ed:b2:70:d4:9e:6f:aa:ff:ab:f5:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:F0:24:67:29:7B:36:F0:DD:92:32:CC:69:A4:02:B0:1E:CA:4C
            X509v3 Authority Key Identifier:
                keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/0A576F089A4C11EEBD557E12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:52:a2:ae:d0:38:16:bc:58:d3:bb:0e:ad:0f:bf:ff:ed:
         2c:d2:96:37:30:16:9f:c3:15:b6:3c:41:63:b5:ac:f6:db:3c:
         19:64:18:86:d1:24:6e:48:f6:48:cc:3c:c7:fc:9d:41:31:fe:
         90:c8:18:e4:c1:07:8b:e7:ad:10:56:94:89:b7:41:86:2b:9f:
         f0:40:d9:ab:d7:6e:2f:3d:d0:f4:40:0e:b0:24:2c:d9:78:7e:
         bb:e7:ae:8f:cd:58:2a:9d:8d:65:6d:23:aa:6f:3a:db:68:e5:
         82:ec:49:cd:cc:f3:9e:95:02:ca:88:e6:11:f8:51:b0:c0:e2:
         8f:dd:23:55:4b:2b:d1:14:63:92:94:85:26:e3:fb:c5:c0:e8:
         70:50:0b:7a:7f:dc:04:e1:48:a7:21:f7:00:9b:de:38:a6:52:
         54:90:73:ab:55:cb:85:c9:3d:b6:58:e4:fb:6e:ea:ec:92:81:
         8b:65:c3:82:79:67:2c:18:37:53:6c:16:75:a2:ec:6e:b9:9d:
         a0:f5:d2:6a:df:3c:61:8c:72:b9:d9:f1:33:21:82:4d:b3:98:
         c6:24:fd:88:c8:2c:27:72:6a:66:27:60:cc:85:19:cb:87:2a:
         2e:53:a8:b1:c6:b3:0c:2d:9e:3b:b5:72:e6:f3:c4:8f:4d:a9:
         04:51:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:24 2024 by rpki-client on console-ams.rpki-client.org