Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/8BBDAB46651411EFBBCB6F31C4F9AE02.roa
File:                     8BBDAB46651411EFBBCB6F31C4F9AE02.roa (raw, json)
Hash identifier:          /I9CcLQXhCW4GEfreSLW1LTWj50i7vh8PtKD8gQU1UQ=
Subject key identifier:   19:2A:61:49:4F:62:2D:71:A5:70:04:86:0A:BD:ED:E2:D6:B4:77:5C
Certificate issuer:       /CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Certificate serial:       D5
Authority key identifier: 46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/8BBDAB46651411EFBBCB6F31C4F9AE02.roa
Signing time:             Sun 15 Dec 2024 04:18:48 +0000
ROA not before:           Sun 15 Dec 2024 04:18:48 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     58945
IP address blocks:        36.50.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
                          rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F006D
        Validity
            Not Before: Dec 15 04:18:48 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=675e58a8-9858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:d0:ff:84:a6:97:23:e4:01:4a:04:84:56:
                    48:65:8b:ac:22:cf:e7:7b:cc:c6:02:15:d3:0a:bd:
                    3b:89:81:5b:b2:e5:78:a7:f0:e4:e4:1f:1c:c3:72:
                    f2:71:11:da:ae:91:3b:8c:f9:4f:0b:b9:71:8a:35:
                    66:24:fc:0b:61:49:51:bb:d0:0e:d0:ef:ae:1c:f8:
                    63:81:12:c1:26:0b:54:9f:a7:e3:e7:24:3a:c4:bd:
                    68:75:e2:ef:76:2f:75:c2:bd:7f:b3:62:ad:69:97:
                    87:3c:23:77:8b:7f:de:8d:39:62:c7:63:f9:07:b0:
                    a5:05:01:72:a2:41:54:3f:71:76:20:73:89:8d:0e:
                    e9:6a:e1:8d:b5:1e:7e:cd:cf:87:53:1a:7d:c7:54:
                    56:80:2f:12:be:70:f8:08:99:13:17:a9:d0:ce:3c:
                    f1:d3:01:d6:59:a9:6e:55:87:e1:48:e1:d8:e5:65:
                    51:96:a4:b6:ed:25:e3:2f:95:5e:b4:23:33:ca:38:
                    4f:91:0d:26:9c:68:f6:d4:e4:1b:e4:55:2f:f2:25:
                    9b:2a:c1:5e:f4:31:fd:d8:76:2c:57:0e:48:4e:a8:
                    1d:70:01:c1:74:99:d0:ba:6b:34:ed:6d:13:b2:51:
                    a2:17:4c:c8:e8:71:62:fa:82:6d:ba:ca:f0:cc:ff:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2A:61:49:4F:62:2D:71:A5:70:04:86:0A:BD:ED:E2:D6:B4:77:5C
            X509v3 Authority Key Identifier:
                keyid:46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/8BBDAB46651411EFBBCB6F31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:a6:0d:d7:c5:de:6f:29:1e:47:19:e5:cb:23:24:62:53:
         85:c8:78:dc:da:44:05:b5:9c:54:0e:cc:4c:7d:15:d5:a3:e5:
         20:d4:33:f2:a8:dd:c5:9b:e1:fb:73:d5:02:cd:06:3f:86:b6:
         ae:a0:2f:7e:be:47:79:d0:28:fd:0d:08:5d:ed:28:62:0d:f8:
         2e:e9:f2:3c:91:0b:de:f4:2d:80:37:8d:59:62:0a:c4:1b:fb:
         1a:ce:47:01:d7:73:91:25:5e:ed:66:b6:b4:3e:24:b0:7e:c7:
         4c:f5:f8:a1:23:8b:fe:4f:36:07:df:5a:98:1a:fd:1d:12:6f:
         c8:2f:85:f3:b3:cc:be:35:05:d8:5c:3a:21:b3:77:d4:cf:a9:
         ef:34:34:35:76:aa:56:d9:8a:77:97:70:f1:28:bc:60:53:81:
         22:de:68:2b:72:02:df:c6:ac:4c:6d:e3:47:05:c7:55:48:ef:
         d1:ae:ca:14:30:39:79:8a:30:62:c6:01:62:f0:ea:8a:c1:0b:
         68:c4:5c:0c:81:5c:1d:63:4a:d4:8d:70:dd:f8:9d:c9:ab:1c:
         31:b0:30:e7:d0:5b:e3:d6:63:a9:f7:73:03:73:43:59:93:70:
         b6:33:1d:c0:db:c3:41:13:c9:e3:f4:8f:6b:24:69:b9:7f:58:
         62:c0:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:18 2025 by rpki-client