Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/37241BF4757911EFB0F87073C4F9AE02.roa
File:                     37241BF4757911EFB0F87073C4F9AE02.roa (raw, json)
Hash identifier:          MQ2LjF9njI2UrTrv78xw08blIqm2Tevfn5BFGasmulM=
Subject key identifier:   BB:05:94:CE:11:6D:83:52:97:44:EA:4D:6A:0C:D1:47:F7:EE:2B:CE
Certificate issuer:       /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Certificate serial:       45
Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/37241BF4757911EFB0F87073C4F9AE02.roa
Signing time:             Wed 18 Sep 2024 04:48:15 +0000
ROA not before:           Wed 18 Sep 2024 04:48:15 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     132200
IP address blocks:        49.50.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
        Validity
            Not Before: Sep 18 04:48:15 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=66ea5b8f-818c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:f9:51:cc:58:39:cc:a3:21:d2:1f:ee:a6:
                    5c:2c:89:7a:d4:95:4c:cb:b2:cb:aa:18:b1:8c:c7:
                    7f:25:c8:66:2a:ba:b0:ef:09:a3:6e:e8:43:ec:03:
                    a2:6c:48:7b:66:96:37:2e:87:9c:30:70:27:5c:41:
                    5c:83:dc:b9:ef:b0:16:be:53:56:43:ab:fd:63:57:
                    dd:54:6d:d6:e2:ef:d0:98:e4:c4:35:50:53:84:bd:
                    35:31:6f:9f:78:37:66:88:bc:a6:d0:b1:6a:fd:c2:
                    96:b1:ea:2a:e1:21:ab:79:31:50:a9:48:4a:d1:78:
                    63:12:41:ee:42:17:43:18:62:c6:ac:89:63:12:04:
                    4e:ed:1c:d3:cc:5d:1f:d7:c8:3e:6e:1b:92:88:a7:
                    b3:78:19:37:2e:2e:50:1c:0a:87:86:75:ae:38:84:
                    f6:29:70:63:3e:23:0d:ed:73:3a:43:1f:79:6b:33:
                    f7:26:1a:51:ac:7d:ef:ae:ac:61:81:2e:3d:77:5f:
                    0c:6f:a6:73:ac:58:f3:fc:bd:3a:ef:11:04:4a:5f:
                    52:67:f7:2f:7f:ef:20:5d:1f:9d:0b:10:98:b6:2c:
                    77:3c:46:71:26:44:b4:2f:82:b5:3b:5c:9a:d7:e8:
                    ee:49:6d:56:56:ff:3d:69:b1:27:0a:e3:6d:11:72:
                    f6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:05:94:CE:11:6D:83:52:97:44:EA:4D:6A:0C:D1:47:F7:EE:2B:CE
            X509v3 Authority Key Identifier:
                keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/37241BF4757911EFB0F87073C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.50.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b0:6b:ec:96:73:2e:f6:96:52:ea:e9:8f:85:52:26:b5:a9:
         c1:54:55:28:0f:7d:0e:97:f3:ea:a1:65:55:5d:df:57:64:a4:
         d1:89:f6:47:61:41:d7:14:45:b2:b1:f5:6e:49:f7:09:47:61:
         65:8b:b3:65:20:a0:b0:e3:9b:1d:63:7b:7a:ca:96:04:82:5e:
         bd:33:88:cf:ae:c9:71:6a:71:60:39:69:f1:45:04:9b:d8:ab:
         e6:5b:66:fe:64:a8:c5:43:11:cd:29:4d:e3:9e:de:62:17:d5:
         07:b1:68:d2:a0:e1:51:88:08:40:3d:f5:0f:c6:e4:f7:95:b6:
         8d:69:13:1d:89:a7:16:ba:7e:4c:31:76:c7:03:2e:42:24:bb:
         63:88:18:56:01:86:4a:75:94:52:ca:37:7b:f2:d1:ba:7e:85:
         02:4a:a9:a8:2a:1d:88:af:55:0c:9f:7c:35:8b:d9:04:6d:d7:
         49:d6:79:bb:e0:16:c4:27:e8:23:34:5c:0b:42:99:dd:b6:c3:
         ae:45:0e:8e:86:57:dc:e8:c6:d1:c3:df:b7:8f:91:ce:18:dd:
         f0:8e:e8:68:59:31:75:9f:38:93:8e:1f:02:57:23:d2:cd:14:
         5a:36:57:0d:bb:d5:ee:72:0f:97:df:e6:a6:14:f5:4d:ea:e2:
         9f:40:62:d3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QTBBQjExMC8GA1UEBRMoMjY1NzAzRDg1OTMzRjQ1RDlCMDREQUI3NzIzNzU4NEZD
OTJEOUQ0NDAeFw0yNDA5MTgwNDQ4MTVaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZWE1YjhmLTgxOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDG/PlRzFg5zKMh0h/uplwsiXrUlUzLssuqGLGMx38lyGYqurDvCaNu6EPsA6Js
SHtmljcuh5wwcCdcQVyD3LnvsBa+U1ZDq/1jV91Ubdbi79CY5MQ1UFOEvTUxb594
N2aIvKbQsWr9wpax6irhIat5MVCpSErReGMSQe5CF0MYYsasiWMSBE7tHNPMXR/X
yD5uG5KIp7N4GTcuLlAcCoeGda44hPYpcGM+Iw3tczpDH3lrM/cmGlGsfe+urGGB
Lj13XwxvpnOsWPP8vTrvEQRKX1Jn9y9/7yBdH50LEJi2LHc8RnEmRLQvgrU7XJrX
6O5JbVZW/z1psScK420RcvZFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUuwWUzhFt
g1KXROpNagzRR/fuK84wHwYDVR0jBBgwFoAUJlcD2Fkz9F2bBNq3cjdYT8ktnUQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBMEFCLzc0NDUyNkY2MEZB
MTExRUZBNjc4ODg4NkM0RjlBRTAyL0psY0QyRmt6OUYyYkJOcTNjamRZVDhrdG5V
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSmxjRDJGa3o5RjJiQk5xM2NqZFlUOGt0blVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTBBQi83NDQ1MjZGNjBGQTExMUVGQTY3ODg4ODZDNEY5QUUwMi8zNzI0MUJGNDc1
NzkxMUVGQjBGODcwNzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEADEyCzANBgkqhkiG9w0BAQsFAAOCAQEAhLBr7JZzLvaWUurp
j4VSJrWpwVRVKA99Dpfz6qFlVV3fV2Sk0Yn2R2FB1xRFsrH1bkn3CUdhZYuzZSCg
sOObHWN7esqWBIJevTOIz67JcWpxYDlp8UUEm9ir5ltm/mSoxUMRzSlN457eYhfV
B7Fo0qDhUYgIQD31D8bk95W2jWkTHYmnFrp+TDF2xwMuQiS7Y4gYVgGGSnWUUso3
e/LRun6FAkqpqCodiK9VDJ98NYvZBG3XSdZ5u+AWxCfoIzRcC0KZ3bbDrkUOjoZX
3OjG0cPft4+Rzhjd8I7oaFkxdZ84k44fAlcj0s0UWjZXDbvV7nIPl9/mphT1Teri
n0Bi0w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org