Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B6B65E76852411EFA67F8144C4F9AE02.roa
File:                     B6B65E76852411EFA67F8144C4F9AE02.roa (raw, json)
Hash identifier:          ow7tCMOc/Qhqt2p4v5oWaTHmmy55LIY894o2pNH8N74=
Subject key identifier:   0A:2E:C6:93:68:EB:A5:64:2B:01:44:E5:8A:8E:39:E6:CE:AA:8D:71
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       24B8
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B6B65E76852411EFA67F8144C4F9AE02.roa
Signing time:             Tue 08 Oct 2024 03:23:40 +0000
ROA not before:           Tue 08 Oct 2024 03:23:40 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     45430
IP address blocks:        147.50.207.0/24 maxlen: 24
                          184.82.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 23:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9400 (0x24b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Oct  8 03:23:40 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6704a5bc-91c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:4b:8d:ad:a4:bc:6f:8a:d0:2f:6e:52:7b:
                    f5:d4:3b:3d:0f:76:44:27:0d:ce:6c:84:69:9c:ca:
                    55:0c:05:7c:b5:60:1c:9e:e7:d6:97:43:bd:29:bb:
                    e7:1e:bf:a0:40:76:20:86:24:64:70:8e:d3:c6:48:
                    db:66:56:d5:89:03:27:4c:c6:d1:a0:b1:36:14:f5:
                    58:33:76:3b:f0:d2:84:8b:5d:a8:79:a3:51:51:f4:
                    f4:fa:97:26:95:55:18:aa:50:bc:22:38:39:b3:6b:
                    a8:54:aa:89:54:be:78:5d:cd:3d:02:d6:0f:bf:9a:
                    be:6c:d6:17:08:30:a6:00:cd:87:4b:8c:34:aa:70:
                    47:de:01:2b:0a:72:4a:8f:8f:d5:5f:b1:18:2b:af:
                    4d:bc:64:1a:b7:64:38:b4:49:d0:ca:11:c5:2a:c8:
                    e4:e4:fa:6d:68:4e:cf:e5:d9:c8:d6:95:73:7b:6d:
                    d5:4e:34:0d:3a:48:8f:c4:9a:10:28:fc:1a:81:1a:
                    d9:7d:15:dc:69:3c:78:1c:65:4b:18:4e:55:cb:90:
                    61:11:99:eb:d7:37:9c:75:61:75:ff:51:89:24:e0:
                    b0:83:bb:97:82:bf:bf:fb:cb:f1:0c:04:17:07:b0:
                    7d:c4:db:d2:34:fb:ce:07:39:5d:50:fe:03:95:ad:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2E:C6:93:68:EB:A5:64:2B:01:44:E5:8A:8E:39:E6:CE:AA:8D:71
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B6B65E76852411EFA67F8144C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.207.0/24
                  184.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:08:12:6a:5a:62:ea:14:54:45:8d:9e:44:8b:1f:75:9a:3d:
         03:f9:57:1b:dd:12:28:a7:01:7b:ee:92:b6:f9:e1:a1:86:50:
         84:a8:c3:d6:dc:0c:b9:a2:76:6b:4d:49:1b:32:29:f4:46:a4:
         2d:b6:90:b3:df:80:59:73:b8:2b:24:3b:20:a5:2f:d8:a8:75:
         dd:df:12:cc:0c:77:21:f1:1c:b5:0a:ec:f9:c7:b7:de:30:7d:
         8d:a6:6f:f8:3f:07:a9:fe:2f:07:48:96:f9:45:c9:3f:da:a1:
         1b:3d:da:25:8c:ae:b0:0a:a8:b5:78:b0:11:b1:ec:53:44:91:
         ce:7a:d0:df:c8:ee:6a:e8:33:96:91:15:d2:d9:9c:0d:d5:25:
         fc:4d:9a:d3:9b:4f:32:90:75:e7:48:bc:9a:12:1d:7c:22:e9:
         9a:0f:de:85:99:6a:f3:48:d6:89:fd:92:43:41:9d:e0:75:38:
         a3:e1:e4:44:bd:f8:db:31:af:2c:2d:0e:d1:a5:d5:d5:fd:a5:
         60:2f:09:c9:e2:4c:0d:65:fb:da:b0:b7:a6:a8:d8:f4:8d:d7:
         13:bb:0d:d7:8d:80:b4:9e:cd:33:22:f3:b2:9c:af:72:9f:bf:
         ab:d2:6a:8b:46:0c:28:86:9a:10:e1:36:14:1a:27:aa:d4:39:
         e3:3e:07:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:31:16 2024 by rpki-client on console-ams.rpki-client.org