Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/020CCB128E9011EEB7C5651BC4F9AE02.roa
File:                     020CCB128E9011EEB7C5651BC4F9AE02.roa (raw, json)
Hash identifier:          0Ob44GOJBXWRNVBDtlP4tdYlgSIbc4d/O98ayNaqbHw=
Subject key identifier:   35:7A:02:63:16:E4:1A:27:4B:27:DD:0E:71:05:DD:D6:C9:BE:88:65
Certificate issuer:       /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
Certificate serial:       07
Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/020CCB128E9011EEB7C5651BC4F9AE02.roa
Signing time:             Wed 29 Nov 2023 08:19:25 +0000
ROA not before:           Wed 29 Nov 2023 08:19:25 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     137967
IP address blocks:        36.50.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl
                          rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:07:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
        Validity
            Not Before: Nov 29 08:19:25 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6566f40d-b744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:38:67:3f:e4:5e:56:c4:8f:b1:ed:23:bc:3b:
                    8e:c7:60:2f:a6:b6:11:5c:5d:44:50:34:d2:61:12:
                    76:9c:6f:6e:f3:bf:2e:10:8d:3f:27:60:72:db:c1:
                    4d:a6:0d:38:e4:14:fa:c3:e9:99:f4:bc:3a:e5:03:
                    b2:ec:84:80:9f:e0:48:bf:96:a1:32:2f:d7:29:e4:
                    5a:a9:a5:c3:ee:7d:23:d7:4c:f8:10:ea:d2:07:d2:
                    cf:4f:6d:86:9c:68:e4:68:a2:4b:a6:cd:6d:2c:14:
                    cf:49:e5:98:57:ed:b1:26:f7:dd:86:6e:ba:4f:be:
                    11:79:09:b2:00:f5:b4:6e:fa:38:08:ca:a3:c3:60:
                    9b:36:64:4c:1d:5d:4e:22:bd:98:55:e6:53:1c:ba:
                    10:2b:d1:44:cd:c8:fe:d0:24:49:dd:70:43:e3:a7:
                    69:20:e9:d3:a6:de:ee:10:0e:d7:73:83:69:d3:61:
                    4a:25:55:60:1d:ed:b9:f2:50:cb:3f:ac:b7:de:7e:
                    2b:14:a9:1f:11:e6:23:11:11:af:08:00:f0:1a:27:
                    ce:28:25:9d:e5:84:dc:15:94:a2:7f:c0:a7:45:c5:
                    c5:6e:f9:0d:79:73:a8:30:9e:f1:13:6a:d7:05:77:
                    d9:23:5a:68:60:89:0b:cc:83:fa:7b:4f:e8:73:1e:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7A:02:63:16:E4:1A:27:4B:27:DD:0E:71:05:DD:D6:C9:BE:88:65
            X509v3 Authority Key Identifier:
                keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/020CCB128E9011EEB7C5651BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f4:18:00:ac:49:d4:5d:a4:77:69:fd:47:39:89:cb:e1:86:
         18:33:9a:b3:69:ef:34:10:0f:b2:bc:13:fe:bc:9c:19:86:72:
         4b:e4:f9:d6:dc:ed:e1:08:51:75:c5:a6:5b:b5:2c:48:ee:9c:
         a3:d5:84:5e:b2:cc:8a:74:81:13:b8:15:82:2d:fb:ac:d8:20:
         e9:d8:8b:fa:2d:3a:67:37:76:e7:21:99:a3:43:6e:2d:d7:53:
         95:ab:d5:96:88:74:1f:8f:1e:93:fb:d1:e0:c1:b3:d9:b1:a7:
         2d:1f:a2:1f:e9:85:ce:bc:d9:20:3c:81:ef:9b:ac:1c:26:e2:
         96:13:c9:1c:2e:5b:aa:0b:02:8b:0c:49:2b:37:d8:29:11:1c:
         ad:f3:60:e4:5b:07:b5:f2:91:cd:e8:50:04:ca:ca:07:5d:ec:
         69:ab:36:09:14:9a:7c:21:cc:fd:01:7e:70:e0:7a:3e:dd:9f:
         cb:99:86:20:f1:8e:a6:db:5d:bf:41:27:de:b8:39:04:00:44:
         7b:c5:00:d9:00:67:be:03:a1:df:7d:16:5d:2d:0a:30:1e:32:
         ba:47:05:64:88:78:e8:4c:7d:13:b6:8e:07:33:db:5a:14:e2:
         11:80:ab:bc:4e:62:7e:cf:dc:76:41:dd:1d:a5:5d:6e:79:77:
         e1:72:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org