Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/50A7914A5B9011EE82A2243AC4F9AE02.roa
File:                     50A7914A5B9011EE82A2243AC4F9AE02.roa (raw, json)
Hash identifier:          ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=
Subject key identifier:   FA:AF:58:30:90:A4:57:26:4D:33:29:6C:B0:23:A6:43:65:05:7D:6D
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       24FE
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/50A7914A5B9011EE82A2243AC4F9AE02.roa
Signing time:             Tue 31 Dec 2024 15:53:40 +0000
ROA not before:           Tue 31 Dec 2024 15:53:40 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     151808
IP address blocks:        147.50.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9470 (0x24fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54
        Validity
            Not Before: Dec 31 15:53:40 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67741384-557f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:bd:5f:0b:8c:ba:ec:73:37:b7:cb:6c:dd:
                    5d:5c:80:d8:48:12:44:e2:51:a6:d5:1f:bf:97:ef:
                    8a:19:bf:81:02:77:16:4c:79:bd:98:6d:64:1e:db:
                    ab:95:d1:6b:54:a2:1f:c9:28:2b:9b:78:0f:56:74:
                    39:a3:6c:63:e2:f1:09:51:aa:e5:7c:cc:10:c8:45:
                    e3:0c:e6:4a:94:67:aa:57:f5:90:c8:65:f2:e2:d7:
                    ec:22:e6:3d:d6:69:8a:c3:95:a4:b2:10:62:26:74:
                    44:12:46:7f:c1:2b:7e:89:95:9b:5b:36:a4:ce:29:
                    7e:17:c9:86:b9:e0:c3:cd:96:7c:7f:42:6d:53:95:
                    d8:00:f0:cb:7d:9f:0c:8a:b8:e2:0d:6b:e3:16:c7:
                    b2:9c:bf:35:84:cd:79:6f:26:2c:eb:70:ef:8f:23:
                    b3:9a:1b:62:b7:9e:e6:61:99:75:f4:e1:bf:07:e3:
                    02:b1:6f:a4:d9:d5:7a:40:d1:91:b0:28:8d:c2:dd:
                    36:69:62:b9:2b:dc:4f:2b:a6:9f:0f:8b:15:57:6f:
                    2f:8f:15:d2:f2:4e:9b:3d:9b:db:3d:55:22:c4:12:
                    54:5a:86:a5:6b:6f:a0:29:92:50:7b:0a:4e:1b:f0:
                    b1:b2:fe:5e:50:7b:53:d4:d1:c5:14:b5:54:bb:36:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AF:58:30:90:A4:57:26:4D:33:29:6C:B0:23:A6:43:65:05:7D:6D
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/50A7914A5B9011EE82A2243AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:02:15:d0:94:5e:e5:70:aa:e3:7e:1f:85:6d:1a:46:7c:89:
         fd:93:09:6c:d8:b2:6d:42:46:21:58:56:86:10:05:49:0e:27:
         e8:88:f1:83:63:e4:b5:58:8a:0a:17:c7:7e:b2:b0:22:af:d6:
         9d:6f:98:e8:9d:bf:1e:8b:0c:e5:7a:13:8a:eb:20:f7:12:6d:
         d9:2d:18:0a:47:f5:f8:ad:90:41:aa:49:fb:3b:98:8e:44:a9:
         7f:11:57:ce:52:ab:63:de:52:73:f3:46:52:bd:f9:ae:b8:b7:
         63:95:c1:bc:54:8f:9f:80:93:90:05:fa:ac:31:88:a7:52:ae:
         d9:d2:11:8d:05:81:f0:cc:a8:e5:38:bc:8d:5a:65:7f:16:bc:
         87:84:63:5e:95:61:57:09:51:75:e7:61:5b:33:d3:0b:01:d7:
         53:05:85:e3:56:35:cd:44:74:62:df:b7:84:7f:44:54:a5:44:
         ce:62:dd:ff:51:3b:81:72:b3:32:cd:6d:83:bb:58:e7:bd:b7:
         a5:aa:e1:03:7a:39:01:37:de:88:9c:0f:e8:fc:61:dd:d4:75:
         d7:d7:1c:b2:ba:4f:c6:98:4c:d2:a5:9b:db:28:38:bc:34:4f:
         1f:5c:e8:00:01:95:2d:89:91:8d:fe:01:e1:d0:87:7f:ca:46:
         30:54:71:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:46 2025 by rpki-client