Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/407F0056629711EEB706DD75C4F9AE02.roa
File:                     407F0056629711EEB706DD75C4F9AE02.roa (raw, json)
Hash identifier:          +AXnC0BrM7UgnnX4bYv1bsmfgMrEkS9sqNlXbbVawFU=
Subject key identifier:   D6:42:4D:1B:CA:E9:C5:25:F7:EC:AD:17:11:A1:95:F2:A7:A4:F5:1C
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       240E
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/407F0056629711EEB706DD75C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:44 +0000
ROA not before:           Thu 28 Dec 2023 16:03:44 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     45806
IP address blocks:        147.50.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9230 (0x240e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Dec 28 16:03:44 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c60-bf6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2a:20:12:76:c9:3d:8b:1a:2b:64:42:07:4f:
                    a0:94:c5:8e:aa:42:b9:e8:77:4b:dd:22:85:37:44:
                    cb:cd:78:89:f7:56:d1:5c:7b:ad:46:04:07:19:0c:
                    28:7a:30:9f:ae:43:ca:10:1a:4f:6c:b6:3d:ae:96:
                    19:02:76:29:65:ff:cc:9c:b9:86:29:1a:da:2c:35:
                    48:ce:4c:53:c8:33:63:19:d1:b2:18:88:ec:32:80:
                    53:ba:86:64:a6:b4:4c:34:bd:a9:1f:95:47:6e:93:
                    dd:b2:7b:ca:62:63:00:7a:46:4d:e3:32:96:96:fd:
                    77:ae:5f:1c:b6:e9:fe:c2:5d:30:e7:b1:f0:86:39:
                    64:cd:84:fe:58:26:2c:de:ac:ec:ad:4f:88:5c:81:
                    88:16:59:93:f4:fb:b5:1e:cf:d8:8e:7a:36:13:6a:
                    4f:d1:4b:b5:f0:a4:09:7d:29:f4:2d:6e:a0:68:56:
                    ac:4f:a0:8f:5f:de:4a:58:c9:41:27:88:a3:7a:7f:
                    0f:b7:29:64:6d:c9:17:26:af:d8:0b:d6:84:f5:99:
                    c3:5e:ea:5b:ae:17:9c:98:c4:bf:23:9e:df:4e:43:
                    23:8a:5c:ba:63:cf:bf:c7:60:6e:06:47:5f:2b:5a:
                    4e:be:74:86:78:08:bc:0a:af:d1:3d:19:5e:fe:e4:
                    1d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:42:4D:1B:CA:E9:C5:25:F7:EC:AD:17:11:A1:95:F2:A7:A4:F5:1C
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/407F0056629711EEB706DD75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:7b:14:03:2d:c5:59:2f:ce:13:e5:4f:f5:2a:5e:30:5e:
         37:84:be:98:05:20:e0:8f:a4:13:58:3f:2b:70:4b:4d:dc:b6:
         08:87:7a:22:70:03:87:08:94:5e:7d:fa:20:23:5e:d9:4c:e5:
         1d:ad:10:ab:4a:5e:d4:fb:ba:de:ce:f2:55:f7:bd:a0:45:ee:
         19:47:22:18:7f:5a:87:19:37:b4:fd:48:73:a1:3f:a1:f7:18:
         ce:14:c9:29:bf:3a:f3:b9:a4:1a:63:ed:46:08:84:3d:c8:25:
         1a:bb:b4:ed:92:be:d3:b1:11:49:64:a6:de:ea:de:35:98:5e:
         b3:e2:35:64:55:75:35:60:f1:e4:15:ab:03:e9:47:55:50:2b:
         ff:85:b0:fb:e7:1d:20:c0:9c:69:bf:24:d4:5c:3e:37:9b:ad:
         3a:41:f5:32:cc:15:24:0f:86:d8:11:9b:97:91:c9:32:04:ca:
         94:fc:ee:75:55:1c:7c:44:c8:8f:6f:2c:02:61:41:35:ac:a3:
         ae:ee:28:3d:57:c4:b6:d8:ea:ee:4d:aa:a4:d7:14:6a:33:0f:
         82:c4:07:8c:f1:a6:5a:27:8d:f6:89:16:ba:2d:35:ce:7e:0a:
         23:e3:74:75:d2:0f:d1:38:5c:46:2e:94:cb:53:54:5d:33:ba:
         5d:67:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:13:52 2024 by rpki-client on console-fra.rpki-client.org