Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa
File:                     8659FCFEB12811EE98786F82C4F9AE02.roa (raw, json)
Hash identifier:          9JmYlt1c9E/j/NU+NicyDsO+kRDpgNSabN6w1iwtd7w=
Subject key identifier:   A1:0A:AA:69:C5:D8:A0:DB:98:8D:8E:A2:4D:DE:3C:4D:F8:3C:C9:F1
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2419
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa
Signing time:             Fri 12 Jan 2024 08:56:51 +0000
ROA not before:           Fri 12 Jan 2024 08:56:51 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     133848
IP address blocks:        147.50.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9241 (0x2419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan 12 08:56:51 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65a0fed2-b368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:4c:1a:23:a8:25:69:c3:3a:67:35:74:6a:
                    f5:4b:af:56:e1:94:ab:49:25:4d:6e:41:1e:50:fc:
                    11:ab:b2:b9:0d:04:1f:0a:bd:3a:b1:5a:5d:29:ff:
                    b8:2e:66:01:37:77:8d:f7:81:39:58:47:b0:26:22:
                    46:62:27:b9:a4:07:6e:0a:09:27:6c:4b:42:0b:27:
                    83:e1:99:8f:62:82:46:99:7c:6c:5e:d1:61:26:a3:
                    f0:42:23:f7:a4:a4:b8:ef:36:ab:ae:e5:d5:ca:db:
                    cb:a9:c5:f2:63:ff:64:28:04:a0:dd:58:ad:52:10:
                    7f:20:5f:16:71:1b:e1:d0:98:02:ce:ef:0a:fc:17:
                    a2:c3:04:a4:96:29:c2:02:09:08:26:d3:df:81:64:
                    32:14:1e:24:b1:5d:99:04:17:2e:8d:d9:9a:77:a2:
                    2c:14:72:a9:a4:69:46:31:86:ce:ca:20:4e:07:5e:
                    d4:0e:27:49:91:22:d9:63:6b:a9:55:bc:e1:53:1d:
                    fb:bf:54:b9:2f:e5:8c:d4:3b:ff:11:a0:33:d3:91:
                    00:8d:56:6e:c2:35:e2:7f:2f:d2:a4:c3:58:ba:f5:
                    fb:26:92:19:a6:a7:f6:bb:33:82:03:b3:f9:3c:ef:
                    3d:54:80:36:82:46:8e:ea:51:8e:d2:5e:f2:9a:ee:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0A:AA:69:C5:D8:A0:DB:98:8D:8E:A2:4D:DE:3C:4D:F8:3C:C9:F1
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:20:49:13:51:4a:93:1e:dc:a9:90:a9:94:70:bd:eb:7b:d8:
         97:1a:5a:3d:77:59:ef:69:78:0e:68:08:e0:84:0a:97:95:3c:
         b7:7f:17:a0:88:5a:0c:a8:ee:dc:b6:6b:af:de:87:9a:ff:a8:
         69:49:78:23:37:3a:01:18:d7:98:86:14:0e:89:5c:21:a9:95:
         ed:0b:e3:45:88:34:e2:02:42:b9:7f:4c:16:81:da:1f:16:1d:
         48:42:23:8a:79:a4:27:63:0b:b0:17:54:76:41:95:eb:33:fa:
         ae:74:e3:d7:cb:a5:a5:a8:34:70:a9:e7:76:98:5a:5e:8b:41:
         c0:5c:e8:2d:ee:d3:1a:2d:96:55:32:64:08:ae:30:a0:7c:20:
         01:78:e7:4d:dd:32:fd:6f:a8:0e:27:b7:9e:3d:9a:bd:ee:19:
         21:66:9c:82:10:13:b7:a5:56:af:00:19:5f:ba:7c:2a:0c:d4:
         91:c8:e1:8d:eb:1a:b9:d1:ce:27:d7:af:17:a0:d6:d5:ca:d8:
         bc:77:6c:c9:91:4c:b4:a4:25:ed:9d:ca:d0:c3:60:93:ad:61:
         07:d4:2a:62:de:43:70:59:a5:b5:ea:d1:06:f3:3f:b2:46:9c:
         b1:3a:df:88:a6:be:71:73:cf:ec:29:15:f4:3c:45:b8:67:46:
         ad:ea:be:7f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjQwMTEyMDg1NjUxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWEwZmVkMi1iMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwi9MGiOoJWnDOmc1dGr1S69W4ZSrSSVNbkEeUPwRq7K5DQQfCr06sVpdKf+4
LmYBN3eN94E5WEewJiJGYie5pAduCgknbEtCCyeD4ZmPYoJGmXxsXtFhJqPwQiP3
pKS47zarruXVytvLqcXyY/9kKASg3VitUhB/IF8WcRvh0JgCzu8K/BeiwwSklinC
AgkIJtPfgWQyFB4ksV2ZBBcujdmad6IsFHKppGlGMYbOyiBOB17UDidJkSLZY2up
VbzhUx37v1S5L+WM1Dv/EaAz05EAjVZuwjXify/SpMNYuvX7JpIZpqf2uzOCA7P5
PO89VIA2gkaO6lGO0l7ymu7G7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKEKqmnF
2KDbmI2Ook3ePE34PMnxMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvODY1OUZDRkVC
MTI4MTFFRTk4Nzg2RjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACTMmIwDQYJKoZIhvcNAQELBQADggEBAHwgSRNRSpMe3KmQ
qZRwvet72JcaWj13We9peA5oCOCECpeVPLd/F6CIWgyo7ty2a6/eh5r/qGlJeCM3
OgEY15iGFA6JXCGple0L40WINOICQrl/TBaB2h8WHUhCI4p5pCdjC7AXVHZBlesz
+q5049fLpaWoNHCp53aYWl6LQcBc6C3u0xotllUyZAiuMKB8IAF4503dMv1vqA4n
t549mr3uGSFmnIIQE7elVq8AGV+6fCoM1JHI4Y3rGrnRzifXrxeg1tXK2Lx3bMmR
TLSkJe2dytDDYJOtYQfUKmLeQ3BZpbXq0QbzP7JGnLE634imvnFzz+wpFfQ8Rbhn
Rq3qvn8=
-----END CERTIFICATE-----
Generated at Wed May 8 18:13:52 2024 by rpki-client on console-fra.rpki-client.org