Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6A4C0AE89B1111EEADD68539C4F9AE02.roa
File:                     6A4C0AE89B1111EEADD68539C4F9AE02.roa (raw, json)
Hash identifier:          Ez/PaSdgtjQw0FOVprB7ZQvQsV7UFC/yAhl1d8YZdH8=
Subject key identifier:   0C:61:14:23:C3:3B:A9:47:00:34:13:13:82:36:45:98:A9:FB:AD:D2
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2410
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6A4C0AE89B1111EEADD68539C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:45 +0000
ROA not before:           Thu 28 Dec 2023 16:03:45 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     55932
IP address blocks:        147.50.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9232 (0x2410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Dec 28 16:03:45 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c61-8298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:14:b3:e9:fe:d6:ef:c4:6b:ff:04:48:e7:
                    d1:cf:93:53:cd:f2:1d:69:1c:a5:3a:63:9b:78:68:
                    93:9a:d9:9e:61:90:b5:15:ba:d3:f5:c4:84:02:2c:
                    e3:58:38:ab:ee:83:8a:29:e9:ab:c6:35:cb:78:98:
                    a5:e2:c7:42:1a:93:bb:75:ce:60:f6:7c:8d:f5:87:
                    0b:42:e6:00:cc:c6:36:03:24:ad:eb:2f:3d:38:eb:
                    82:2f:9f:c9:8a:c0:ee:27:4b:8f:9d:8b:0d:08:15:
                    5a:af:6f:50:e5:b5:c5:d2:6a:13:11:74:69:fd:0c:
                    3e:4f:be:e5:91:5b:c5:1f:d1:6f:78:d0:87:b4:bb:
                    7f:3c:04:fb:48:74:fd:3c:7a:24:d0:3e:e0:87:58:
                    0b:23:59:87:05:ad:29:61:c2:09:d7:17:cb:7c:09:
                    2b:96:9c:07:13:d7:7e:2e:0b:2b:3a:84:b5:0f:3b:
                    b4:22:5d:ce:79:01:fa:db:29:c2:08:ef:f5:68:16:
                    9a:47:1f:c9:3d:b1:8c:48:6a:a1:03:8e:b3:f5:5c:
                    08:ec:9b:92:5d:2a:29:97:aa:d5:b4:0c:96:18:9a:
                    99:69:25:9c:6d:73:66:7e:39:09:85:0f:fd:ff:f4:
                    85:3d:c1:5d:13:24:05:bb:c2:e1:f1:17:1a:fd:0f:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:61:14:23:C3:3B:A9:47:00:34:13:13:82:36:45:98:A9:FB:AD:D2
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6A4C0AE89B1111EEADD68539C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:d0:f0:11:cb:7d:42:98:a9:8e:25:b9:cd:bb:ce:b3:66:d9:
         fd:87:13:63:00:75:03:9e:8b:f7:0c:6a:f9:0c:c8:74:d9:f4:
         e5:1c:ef:81:75:5e:47:26:de:a4:26:f9:9f:9a:a3:8c:b2:ac:
         8d:1d:a2:05:e2:5f:7e:eb:8e:14:7d:1d:86:96:59:65:ee:c1:
         a0:e1:6a:0b:1b:f6:ff:e1:4b:8e:2a:3b:99:27:5b:0d:9c:ce:
         31:5a:ea:15:e5:67:4c:ef:e1:10:2e:98:f5:7c:0b:7a:9a:2f:
         2c:52:8d:eb:f2:d9:79:98:fe:12:c1:ff:92:91:cd:a0:f2:8f:
         b5:96:6a:f2:fa:4f:77:89:a0:bd:7e:08:1c:e6:37:81:73:c4:
         ae:87:a5:a4:d5:c6:1e:1f:61:d8:28:90:e1:3f:75:18:0d:cc:
         5e:2c:d3:34:35:0a:41:2b:af:44:7d:c0:32:fd:b6:43:31:2a:
         bd:d8:b7:f2:4e:17:3e:cc:83:ee:2c:5b:eb:e9:1f:5e:bd:04:
         21:ec:74:f9:03:5d:e8:6c:45:1f:b9:59:ff:23:01:13:d2:85:
         05:74:b8:28:f5:42:74:aa:c6:d4:aa:62:c4:2e:13:d2:f3:4c:
         bd:55:f1:12:80:42:2e:30:94:f2:48:4f:fb:4c:b1:e7:cc:27:
         43:b0:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:46:58 2024 by rpki-client on console-ams.rpki-client.org