Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/8D6F0B06F14711EEB1D43D66C4F9AE02.roa
File:                     8D6F0B06F14711EEB1D43D66C4F9AE02.roa (raw, json)
Hash identifier:          JYbpzpLW52231ZAzTFSJa6h0jqk+nYAnIDRg3dToHsA=
Subject key identifier:   A4:23:F7:B3:F5:EE:77:E1:52:35:BA:74:7C:CB:84:C3:DD:3B:22:30
Certificate issuer:       /CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2
Certificate serial:       03
Authority key identifier: 65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/8D6F0B06F14711EEB1D43D66C4F9AE02.roa
Signing time:             Tue 02 Apr 2024 23:20:11 +0000
ROA not before:           Tue 02 Apr 2024 23:20:11 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     152171
IP address blocks:        36.50.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl
                          rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2
        Validity
            Not Before: Apr  2 23:20:11 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=660c92ab-d165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:01:c1:be:5f:98:4b:1c:07:48:5c:04:88:f8:
                    69:75:48:b5:43:2f:c6:03:a7:f1:0c:6b:21:6a:5d:
                    81:8e:cf:3d:eb:2b:f4:a6:32:c2:c4:4b:c1:c6:5e:
                    cf:bf:bf:ed:4e:96:a2:c6:8d:01:05:49:c5:8f:d0:
                    e5:fd:78:91:a5:f0:c1:91:8f:49:15:dc:bf:42:3f:
                    26:9e:17:0e:85:53:17:3f:55:17:85:79:d7:29:39:
                    1c:6b:05:0b:14:51:a4:85:71:43:66:2c:2b:83:2d:
                    bd:6a:5f:19:89:19:64:d0:17:60:14:a5:45:1e:e4:
                    56:72:42:f1:89:04:19:86:c9:da:ab:bd:20:51:03:
                    9e:d9:6d:ff:ec:a7:72:2b:41:e7:bd:d3:db:ed:5b:
                    ff:62:e0:2a:e1:82:b0:2e:9a:07:93:da:e9:b0:5f:
                    ce:bc:42:fb:84:e3:1d:d0:04:65:73:c4:b6:fc:fb:
                    42:5a:f7:33:c3:c0:6b:33:47:65:a7:91:e8:69:75:
                    d9:b0:96:f5:6b:a5:57:e8:2e:60:34:97:f0:de:ba:
                    46:23:73:58:4c:23:ad:1c:c8:61:d7:08:be:e0:e2:
                    cc:05:a7:65:56:bd:cb:fd:e5:1a:6f:5b:2e:73:ac:
                    de:7a:c3:e7:9f:82:96:64:dc:c4:67:31:fe:e2:41:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:23:F7:B3:F5:EE:77:E1:52:35:BA:74:7C:CB:84:C3:DD:3B:22:30
            X509v3 Authority Key Identifier:
                keyid:65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/8D6F0B06F14711EEB1D43D66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:b3:87:d7:86:0b:ff:5d:c4:0f:79:4a:13:97:a0:4a:a8:
         9b:37:64:e4:e6:11:32:43:da:45:fb:6a:c2:2b:04:5d:f1:c1:
         c9:96:d2:90:db:bb:e0:04:bd:8f:ed:b0:d1:26:ee:2d:df:a0:
         3f:2a:4c:3e:19:c9:89:1b:a6:97:46:81:25:c0:be:6c:bf:f5:
         c5:72:68:75:e1:41:f7:be:35:aa:1b:85:5b:a2:80:ff:51:2f:
         b8:c4:38:57:4a:f2:f5:e4:ee:4e:e3:b8:de:c2:95:65:14:a0:
         d0:b9:ee:0a:15:64:b8:c3:e3:bd:f8:e0:2a:83:61:1b:5d:89:
         7a:93:d0:96:8c:17:bc:a5:1c:45:c6:b8:4c:84:57:8b:6b:4d:
         a6:7a:ad:79:06:bb:49:93:34:89:af:96:26:a3:97:15:15:0a:
         f3:f2:c0:0d:50:82:c4:f3:88:3a:96:42:9e:6a:fc:44:7a:e3:
         75:50:be:8c:9a:ae:4e:f1:82:06:2e:75:1a:d5:61:65:94:ed:
         6c:55:2f:3a:2a:9f:8d:de:5c:b8:a8:8b:98:94:55:87:81:dc:
         50:a9:9e:03:d1:06:97:b6:98:a6:4c:b0:87:91:b4:41:2a:c2:
         bd:38:15:1e:3c:4a:b2:73:9e:cb:fb:ab:f7:13:b0:fe:a0:4b:
         ac:56:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org