Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/50D3184C84A711EABF754420C4F9AE02.roa
File:                     50D3184C84A711EABF754420C4F9AE02.roa (raw, json)
Hash identifier:          REmnGVrzk8ihXOgxqG+2CeEr7BrhT11Aif1OS3yAUvE=
Subject key identifier:   79:FD:67:2E:9C:C0:98:C4:23:40:87:9F:2A:DE:46:C4:B2:68:C5:98
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       283E
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/50D3184C84A711EABF754420C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:31 +0000
ROA not before:           Thu 28 Dec 2023 16:03:31 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     58930
IP address blocks:        58.64.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10302 (0x283e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:03:31 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c53-5472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:aa:df:7c:c7:81:16:18:67:e2:dd:b9:ed:
                    e8:10:ac:0d:01:da:75:47:6d:44:96:b1:3d:94:56:
                    91:ce:53:e5:b6:ea:4b:88:42:66:ee:72:56:c6:95:
                    9d:cf:eb:ae:03:16:60:23:96:3e:91:0a:1a:57:f9:
                    71:ce:42:4f:db:24:5d:ff:bd:a6:bb:9c:ec:5a:c2:
                    bf:7c:60:75:37:c8:06:24:48:19:4d:6b:43:bf:51:
                    25:c2:73:fe:74:ca:62:6d:06:7b:68:6e:d4:ab:52:
                    51:ca:8a:fc:5f:e9:6a:ff:6f:f3:6e:59:03:c2:31:
                    32:de:59:0c:dd:11:2a:3a:5c:a8:30:04:18:41:cc:
                    7b:ff:26:30:13:57:c6:83:e0:48:f7:b2:32:ca:52:
                    ec:22:20:2c:5b:38:2a:49:84:9e:b0:6a:8c:1f:51:
                    09:4c:92:5b:c7:79:39:b1:fe:49:d7:91:f2:9a:6f:
                    50:6f:a8:cc:22:f7:37:9a:9d:0a:5e:a1:ae:2c:4d:
                    a3:aa:97:47:e6:5a:22:dc:25:e0:df:00:9e:b8:89:
                    87:43:60:07:c5:7a:d7:3f:d8:4d:cb:fd:d1:3e:72:
                    fa:99:4e:a8:c9:c8:ce:d8:dd:52:25:fc:66:5b:00:
                    81:fa:c8:f2:b5:82:4b:19:67:50:7d:c5:98:66:d1:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FD:67:2E:9C:C0:98:C4:23:40:87:9F:2A:DE:46:C4:B2:68:C5:98
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/50D3184C84A711EABF754420C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.64.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:1b:f8:ad:9d:ff:5a:e6:0c:27:17:56:71:52:60:ec:7a:98:
         ab:d5:41:46:6b:ee:4b:cd:eb:77:30:4c:f9:c2:63:ff:f9:82:
         61:dd:d0:c0:33:5d:ac:36:dc:07:b9:13:b3:8f:3c:01:8b:ac:
         82:a8:08:de:e2:1c:c8:8a:7e:24:c8:92:89:83:06:c9:ea:d5:
         d0:45:fb:76:87:10:5d:87:f0:65:16:c4:66:3d:77:69:d5:42:
         35:8f:b1:6b:a3:7b:45:67:e2:ba:e6:f8:52:27:6b:55:f4:c1:
         ce:ab:e1:68:71:7d:3e:82:89:bd:7e:f1:d3:0c:b1:2c:87:bc:
         4f:e4:8c:68:04:3d:43:52:83:bc:31:39:aa:94:3a:b4:55:03:
         23:98:49:a2:4e:82:2e:66:77:b9:f4:74:3d:e3:7d:d1:d5:95:
         3c:68:72:a8:7c:df:ee:e7:54:36:3f:42:87:eb:89:ea:37:12:
         f7:5c:36:cf:75:32:57:e5:a4:c2:7b:12:7a:5a:cc:8d:bc:1a:
         01:bb:4b:c9:bb:fc:e4:46:49:95:dd:ab:51:57:e7:aa:42:32:
         5d:f4:40:90:1e:fc:d6:04:c8:73:a9:20:75:04:88:da:80:30:
         44:62:68:f0:2e:d7:9f:53:20:25:cc:be:80:39:e8:f8:6a:67:
         41:7a:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:11 2024 by rpki-client on console-ams.rpki-client.org