Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/E42B360468D011EE8509F75CC4F9AE02.roa
File:                     E42B360468D011EE8509F75CC4F9AE02.roa (raw, json)
Hash identifier:          3NF/WOhgj9HD4AOf9A4AyqHhiWaUzMkr0bQxzyCSlus=
Subject key identifier:   3E:C8:BB:90:35:8C:41:89:15:18:C9:1B:BC:1B:73:17:F4:AF:1E:13
Certificate issuer:       /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Certificate serial:       DC
Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/E42B360468D011EE8509F75CC4F9AE02.roa
Signing time:             Tue 19 Nov 2024 03:57:45 +0000
ROA not before:           Tue 19 Nov 2024 03:57:45 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     132849
IP address blocks:        36.50.38.0/23 maxlen: 23
                          36.50.38.0/24 maxlen: 24
                          36.50.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
                          rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC24F
        Validity
            Not Before: Nov 19 03:57:45 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=673c0cb8-21ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:63:b2:50:f7:3d:2f:3c:be:75:9b:80:67:bd:
                    0f:67:9a:80:7a:2d:82:e1:45:8a:f8:07:ce:c2:d1:
                    8b:34:42:47:fc:fc:19:bd:59:cc:ac:e0:be:e8:5c:
                    84:50:2e:a3:b9:32:c9:91:4d:93:c3:b3:52:f7:cf:
                    07:6b:31:35:6e:3f:61:12:86:c3:b3:3c:48:35:2f:
                    0f:9d:3b:2d:6d:62:3b:9d:fa:f4:17:b5:1a:89:a4:
                    9f:95:31:d1:bd:f5:61:f6:13:a9:9d:dc:3b:6a:59:
                    7c:5c:ee:3a:64:84:e5:61:dc:ce:21:59:50:04:85:
                    3c:3e:f8:d3:80:f8:4a:d2:f2:28:a9:b7:dc:7a:3a:
                    84:b8:de:b7:d8:eb:5a:76:ee:7a:11:c3:4e:f8:7a:
                    d6:43:3b:ad:61:fd:5b:18:f2:7c:62:d7:b1:e8:24:
                    91:47:60:25:80:d0:36:06:4c:56:41:98:a3:56:03:
                    af:3c:2d:7b:4f:ec:8e:fb:b7:bc:e3:69:98:e4:70:
                    76:00:87:b4:a5:5f:af:6c:68:ec:df:af:41:9c:32:
                    2d:7e:e8:67:46:1a:4c:2a:6c:4f:af:e0:87:ae:e4:
                    80:de:95:41:26:61:ad:77:73:34:c5:7b:81:68:70:
                    8f:00:b4:e7:d3:92:5e:36:da:8d:35:d9:f3:ce:bf:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C8:BB:90:35:8C:41:89:15:18:C9:1B:BC:1B:73:17:F4:AF:1E:13
            X509v3 Authority Key Identifier:
                keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/E42B360468D011EE8509F75CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:72:36:1c:5f:d2:51:30:46:c0:ee:39:32:93:ce:cd:6b:7b:
         43:a3:1e:97:5f:03:8a:5c:ea:14:0d:21:88:c5:eb:26:63:be:
         6b:1f:3a:60:3e:23:d5:28:50:24:53:ae:a0:80:77:b5:45:2e:
         59:93:eb:7e:c1:8c:50:1e:10:cd:99:1e:f9:9b:bf:a1:6d:d0:
         88:82:22:85:4e:17:73:9f:dc:6f:4d:36:35:74:9c:90:cc:66:
         bc:fc:89:ec:83:d6:5c:28:9c:d9:6a:d6:6f:2e:ca:af:36:68:
         2b:79:cf:d8:b5:3e:33:c5:82:80:ec:c0:9a:45:4a:8c:34:53:
         a4:ca:a6:af:b4:1b:45:81:6d:64:ae:01:62:18:e6:d2:13:37:
         10:ca:71:d3:2f:cc:1d:3e:55:3d:a5:52:ae:b6:d4:b4:35:27:
         78:1f:eb:0d:13:9b:c2:0a:7e:e3:bc:3a:52:0c:ee:62:e8:ab:
         cd:8c:ee:f1:9d:4e:90:09:65:d1:e1:00:a8:38:0e:57:5d:ac:
         1c:2c:79:18:d9:75:7f:d3:ef:76:a9:bc:f7:2c:7a:e7:29:03:
         68:37:1a:d4:97:c0:34:06:4f:54:b7:3b:06:4a:a8:20:37:7d:
         c4:bf:24:e7:ff:a7:d7:ef:03:d0:4e:a2:7e:96:53:8f:35:20:
         e9:af:b3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:06 2025 by rpki-client