Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/37D72D7CC17C11EE8391A218C4F9AE02.roa
File:                     37D72D7CC17C11EE8391A218C4F9AE02.roa (raw, json)
Hash identifier:          8WbiXS8+ZFODz9G5sLTWbcDZvIsuRKDlPl9hBYHN3xY=
Subject key identifier:   BD:1F:3E:E5:C1:34:F5:00:50:92:09:17:A2:2B:85:3A:A9:B7:91:D2
Certificate issuer:       /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
Certificate serial:       05
Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/37D72D7CC17C11EE8391A218C4F9AE02.roa
Signing time:             Fri 02 Feb 2024 03:36:15 +0000
ROA not before:           Fri 02 Feb 2024 03:36:15 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     141746
IP address blocks:        36.50.196.0/24 maxlen: 24
                          2001:df3:4e40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl
                          rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
        Validity
            Not Before: Feb  2 03:36:15 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bc632f-6c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:d8:83:f8:8f:85:87:0e:53:92:4a:fe:a3:
                    be:0c:8b:93:99:b2:58:0d:f4:37:bf:0d:ef:34:be:
                    aa:ea:04:e8:d4:c3:38:d2:0c:90:06:bb:a9:f8:33:
                    a0:e4:64:ca:db:d5:61:95:21:f9:82:b0:b9:05:65:
                    49:a3:a1:2d:66:68:4b:f4:e2:fb:ed:cc:58:65:89:
                    29:58:41:c9:f4:d4:26:97:56:d0:02:3a:c3:02:ac:
                    b4:22:d0:e5:d5:bf:b2:0a:8a:cf:e5:e6:32:4a:d2:
                    6e:be:40:9a:57:8a:68:e7:3b:58:a8:bb:f0:d1:3f:
                    76:a0:04:fc:6f:90:53:dd:d8:26:a8:e5:ca:db:21:
                    f8:0c:11:76:b2:5d:2a:d2:0a:2c:74:b2:52:c6:32:
                    05:97:0a:02:0a:e8:15:b7:a2:fe:04:85:0e:5c:e3:
                    e3:35:06:87:a6:6d:9d:12:6b:af:2b:74:0e:86:e5:
                    49:eb:e4:f7:ac:33:b7:c5:5b:0d:8d:01:79:73:58:
                    17:82:2c:c3:97:dc:93:92:93:7e:ff:fb:26:e8:ce:
                    16:85:51:a8:26:f1:3e:62:b1:f3:cc:15:92:97:4e:
                    ad:1e:d3:3f:b5:d5:0c:ce:a2:19:24:6c:a5:f1:b3:
                    23:82:d1:23:29:ea:40:fa:b4:db:35:c1:06:98:4c:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1F:3E:E5:C1:34:F5:00:50:92:09:17:A2:2B:85:3A:A9:B7:91:D2
            X509v3 Authority Key Identifier:
                keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/37D72D7CC17C11EE8391A218C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.196.0/24
                IPv6:
                  2001:df3:4e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:75:8e:10:19:5a:2a:20:d6:1b:d8:ef:07:b8:3c:2c:35:
         c6:f4:e8:2c:a5:3e:1a:a3:6e:1d:aa:4b:fc:98:5e:59:bf:8e:
         e2:89:67:be:ad:17:b1:5e:43:a6:62:3d:5a:cc:30:ec:f9:ca:
         57:1c:25:53:5a:f3:5e:e9:e5:ca:ee:d4:cd:20:7a:0e:b1:f3:
         be:cb:10:31:2f:56:6a:9c:68:be:c9:9f:a1:de:60:e1:35:6d:
         df:e9:50:92:5a:48:3b:8e:1c:b4:06:68:1a:ea:dc:c7:bf:db:
         71:0c:1e:ea:b7:f8:1d:d7:7b:2f:ee:bb:ea:20:69:81:80:e3:
         1d:00:a0:d7:ad:02:13:a9:10:e6:8d:41:e2:f2:34:cd:e0:9b:
         94:64:12:75:cb:18:34:41:e5:2c:91:9b:19:42:91:00:ab:f8:
         39:4d:5f:28:c9:9b:87:4f:2d:8b:6a:17:02:95:09:8c:09:30:
         5f:a8:58:37:87:40:10:71:d3:f0:21:a7:1a:e5:ad:f4:ff:e6:
         f9:72:7c:f6:22:ba:a0:98:12:40:df:3a:c2:cd:48:04:34:d5:
         c4:c3:94:69:2a:a2:50:45:3b:8a:91:62:21:4d:5d:a0:77:bc:
         77:6b:bd:88:8a:9a:3c:df:ac:12:15:ed:b3:72:d6:68:4f:e5:
         23:34:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org