Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/7135F534A05E11EDAC005F21C4F9AE02.roa
File:                     7135F534A05E11EDAC005F21C4F9AE02.roa (raw, json)
Hash identifier:          5H4HxYZ6gOM9gixxXCuRxErTHGKTT5vkvqEovL8hCmg=
Subject key identifier:   A5:A2:09:46:BC:75:E8:75:80:E1:EC:3E:CD:95:C0:D6:F4:C0:9F:0B
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2409
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/7135F534A05E11EDAC005F21C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:39 +0000
ROA not before:           Thu 28 Dec 2023 16:03:39 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150686
IP address blocks:        147.50.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9225 (0x2409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Dec 28 16:03:39 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c5b-a859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:46:d3:e5:5c:69:06:a9:5e:e4:1c:50:75:2d:
                    4e:0d:3a:22:85:bd:60:03:46:b2:39:be:04:c9:90:
                    d9:40:e2:2a:f8:0c:9c:e5:5f:c8:0d:3f:5e:19:08:
                    b6:b9:97:13:f4:6f:c9:06:8e:5c:f9:53:a6:fd:2a:
                    dc:8e:aa:c6:71:73:e3:3d:26:6e:dc:d9:f2:b3:66:
                    1a:42:17:8e:51:ee:ef:e9:63:3b:2b:9b:e8:bb:10:
                    9d:29:c2:c1:bb:b3:d9:76:11:95:28:34:01:da:95:
                    e4:24:8e:5c:5f:16:86:74:4c:78:5a:ac:32:0e:79:
                    2d:30:62:4c:21:4a:6b:37:e0:df:a7:4f:42:7f:4a:
                    cc:97:e7:11:0e:b3:51:2f:9f:42:39:fd:25:98:94:
                    5f:e3:ec:3f:c6:e0:d3:e4:5a:7c:cc:34:0c:7f:67:
                    e9:54:70:c6:fa:35:81:2e:cd:15:15:d9:8c:10:27:
                    2c:01:83:0b:95:cf:19:02:66:13:aa:c5:21:4c:27:
                    d9:2a:00:08:84:16:f7:e8:5c:9a:3d:de:eb:35:75:
                    e6:0c:d2:8f:b4:35:89:5b:f4:8a:ee:b0:fe:6c:cb:
                    dd:31:99:45:dc:c4:e8:c2:37:94:ac:2e:82:fa:a3:
                    9e:4b:81:4c:d6:33:9e:0c:eb:9e:b9:2d:0c:2e:a3:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A2:09:46:BC:75:E8:75:80:E1:EC:3E:CD:95:C0:D6:F4:C0:9F:0B
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/7135F534A05E11EDAC005F21C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:bf:40:f6:e3:39:cb:70:75:0f:02:af:c4:5f:74:33:08:
         88:4c:6d:86:fe:53:2e:ea:2d:14:6e:af:f2:c1:89:06:66:f8:
         11:67:96:a7:ea:4a:9b:5b:f6:f9:44:c6:f9:0e:4f:7c:0d:fb:
         ce:0c:e5:a7:fd:63:01:49:6e:5a:df:e5:6a:ef:43:19:02:15:
         fb:61:aa:cd:9b:c8:8c:05:88:ad:1b:1e:9c:cc:73:ba:56:0b:
         73:98:2e:de:40:55:68:d1:6a:5c:70:4e:ce:c5:bd:b4:b0:08:
         ee:93:f7:c1:93:74:7e:a5:1a:89:da:89:7c:c1:92:ba:f9:ab:
         0f:f5:43:e8:27:9c:71:c4:e8:e9:ca:b1:92:90:21:de:5c:5c:
         56:da:6e:c4:db:c7:25:cb:08:89:a8:c1:f5:f3:f9:ca:e4:f6:
         f9:bc:8d:55:70:6a:cd:96:3f:1c:9e:9c:a5:2a:a2:b7:a0:4b:
         c0:29:4b:7e:c7:fb:fc:ac:d7:62:1b:ac:4b:2d:64:18:8f:8c:
         96:c5:00:51:82:b1:72:5b:77:49:1e:74:d1:9c:c5:37:d0:64:
         00:27:26:36:37:e7:2b:57:91:6d:9a:c2:ce:67:12:cd:ff:b0:
         78:13:7a:8d:ad:60:71:4b:79:b8:e8:70:3f:84:01:02:1e:ff:
         e3:01:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:19:57 2024 by rpki-client on console-fra.rpki-client.org