Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/50A7914A5B9011EE82A2243AC4F9AE02.roa
File:                     50A7914A5B9011EE82A2243AC4F9AE02.roa (raw, json)
Hash identifier:          l2ohcd93Jna0nv/Pa5DANRoNmPIzd1dg7MYWz4MSOWw=
Subject key identifier:   37:6E:DB:9C:48:53:CE:FA:D3:51:40:B4:DE:95:97:2E:25:0C:8D:10
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       240A
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/50A7914A5B9011EE82A2243AC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:40 +0000
ROA not before:           Thu 28 Dec 2023 16:03:40 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     151808
IP address blocks:        147.50.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 15:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9226 (0x240a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Dec 28 16:03:40 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c5c-5e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:84:d8:32:e6:56:e0:f0:32:07:04:a2:f1:
                    5b:53:83:6a:58:7b:23:35:d2:34:55:2a:66:dc:8b:
                    46:e1:c8:10:17:a3:67:24:eb:f6:fa:59:61:9d:5c:
                    c2:c5:9a:49:c3:f5:3b:aa:91:55:9d:4e:71:f3:7a:
                    b9:96:15:00:b5:7a:16:95:5f:26:f6:85:19:bd:39:
                    15:07:23:80:82:ec:3e:76:1a:b8:57:55:de:d5:f7:
                    4c:69:aa:c7:a4:a8:db:f8:5c:e1:7a:df:2f:f2:6d:
                    15:89:4c:92:65:79:97:b1:2a:5b:2e:a9:a3:ee:64:
                    10:6b:1a:2a:bf:33:31:04:d2:f2:26:a6:44:3b:93:
                    f7:c4:40:1a:25:cc:76:d3:75:ab:2b:f2:08:d4:ff:
                    06:f0:82:b2:91:53:72:7f:21:ad:86:a0:23:00:75:
                    53:74:db:20:91:bf:a8:8c:ec:1a:6d:78:2e:51:4a:
                    2a:78:d8:08:02:b2:ea:b8:cc:22:4f:13:7b:40:9f:
                    13:19:8e:37:27:91:c8:d6:64:a4:9b:a1:f5:8d:23:
                    a4:e3:ab:7e:09:92:73:36:06:af:d0:9c:4f:c6:f3:
                    11:c5:d4:16:d4:32:a0:33:c3:c4:c8:29:b7:ba:99:
                    89:65:a3:b0:ef:40:74:d4:b9:1d:7f:86:f6:be:82:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6E:DB:9C:48:53:CE:FA:D3:51:40:B4:DE:95:97:2E:25:0C:8D:10
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/50A7914A5B9011EE82A2243AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:82:48:3b:92:3a:32:6f:3a:5e:0b:e2:cd:05:71:11:9e:b9:
         8c:14:36:ca:74:58:2d:7a:88:83:18:94:7d:af:87:1a:89:9a:
         e6:50:bb:0d:fe:08:7b:07:82:6c:99:36:13:08:f7:73:f2:54:
         c3:83:0f:7a:c4:e3:f5:f4:0a:f7:11:ef:07:f8:fe:df:8e:43:
         32:08:e6:63:6a:c5:cc:a0:a6:92:c9:85:e1:85:ad:67:dc:4e:
         59:45:17:d4:40:4f:8c:ba:61:39:b7:e2:16:a8:94:54:ce:25:
         c7:fe:0d:8d:bf:55:8e:77:03:fe:e5:4f:b5:3c:42:40:38:33:
         18:d2:57:99:4c:81:39:19:16:81:77:98:99:30:ae:c9:3a:31:
         42:a9:27:ec:cf:ad:fa:00:37:aa:f1:14:24:d9:39:27:ed:88:
         0a:3a:c0:ba:1d:0c:fa:cd:1e:74:fa:0c:6c:b9:31:cb:a9:35:
         0e:65:43:74:73:c5:39:e4:21:1c:ac:97:9d:5e:ce:40:1f:7c:
         ea:ef:07:81:e2:ba:eb:e7:d0:48:57:a5:29:9f:fc:55:a8:10:
         88:62:ff:19:d6:85:41:dd:1a:bd:23:e6:5c:69:54:cd:af:0f:
         f1:8b:ae:71:b3:d6:79:aa:a7:7f:7c:81:04:c6:f2:80:a4:06:
         18:f4:1c:b4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjMxMjI4MTYwMzQwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NThkOWM1Yy01ZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtCSE2DLmVuDwMgcEovFbU4NqWHsjNdI0VSpm3ItG4cgQF6NnJOv2+llhnVzC
xZpJw/U7qpFVnU5x83q5lhUAtXoWlV8m9oUZvTkVByOAguw+dhq4V1Xe1fdMaarH
pKjb+Fzhet8v8m0ViUySZXmXsSpbLqmj7mQQaxoqvzMxBNLyJqZEO5P3xEAaJcx2
03WrK/II1P8G8IKykVNyfyGthqAjAHVTdNsgkb+ojOwabXguUUoqeNgIArLquMwi
TxN7QJ8TGY43J5HI1mSkm6H1jSOk46t+CZJzNgav0JxPxvMRxdQW1DKgM8PEyCm3
upmJZaOw70B01Lkdf4b2voJm9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDdu25xI
U87601FAtN6Vly4lDI0QMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvNTBBNzkxNEE1
QjkwMTFFRTgyQTIyNDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACTMsIwDQYJKoZIhvcNAQELBQADggEBAG2CSDuSOjJvOl4L
4s0FcRGeuYwUNsp0WC16iIMYlH2vhxqJmuZQuw3+CHsHgmyZNhMI93PyVMODD3rE
4/X0CvcR7wf4/t+OQzII5mNqxcygppLJheGFrWfcTllFF9RAT4y6YTm34haolFTO
Jcf+DY2/VY53A/7lT7U8QkA4MxjSV5lMgTkZFoF3mJkwrsk6MUKpJ+zPrfoAN6rx
FCTZOSftiAo6wLodDPrNHnT6DGy5McupNQ5lQ3RzxTnkIRysl51ezkAffOrvB4Hi
uuvn0EhXpSmf/FWoEIhi/xnWhUHdGr0j5lxpVM2vD/GLrnGz1nmqp398gQTG8oCk
Bhj0HLQ=
-----END CERTIFICATE-----
Generated at Mon May 6 17:42:38 2024 by rpki-client on console-ams.rpki-client.org