Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/AB501A702CDE11EFBC062E74C4F9AE02.roa
File:                     AB501A702CDE11EFBC062E74C4F9AE02.roa (raw, json)
Hash identifier:          niEiV/dOP3LvscxMVHjzWM7i/yCkin3RXFNbZK7C7rU=
Subject key identifier:   1C:AC:D6:04:39:81:1E:BA:ED:D2:12:92:68:35:6F:93:DE:57:E8:01
Certificate issuer:       /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Certificate serial:       62
Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/AB501A702CDE11EFBC062E74C4F9AE02.roa
Signing time:             Mon 17 Jun 2024 19:20:34 +0000
ROA not before:           Mon 17 Jun 2024 19:20:34 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        36.50.238.0/24 maxlen: 24
                          36.50.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
                          rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
        Validity
            Not Before: Jun 17 19:20:34 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66708c82-67cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:9d:25:75:a1:ac:d4:3e:d2:c9:b0:53:7e:
                    db:71:59:d9:61:13:d5:96:d7:18:6a:64:99:e6:7d:
                    ee:dc:54:69:06:1f:ae:d7:8c:e1:41:1e:bc:ce:25:
                    1a:c8:94:3f:8e:7b:4d:6e:55:2a:10:5f:e4:3c:69:
                    76:35:cb:f0:e7:99:b8:d1:75:76:42:e2:f0:41:df:
                    ef:d4:2b:d8:87:74:31:25:a4:3b:9d:80:11:4b:c3:
                    e7:5f:c5:7d:dc:70:4b:a7:46:2c:74:d5:69:35:6b:
                    ea:b5:dc:52:04:61:55:18:eb:49:4b:53:01:fe:9b:
                    1f:8f:b7:88:78:dc:cf:d5:f3:b0:7a:d6:ef:77:a7:
                    04:04:7a:d0:48:2e:c4:0a:09:bc:0e:e5:f2:1c:13:
                    bb:30:05:ef:43:82:ed:40:4e:4a:30:3d:02:67:d3:
                    6f:31:ac:65:32:6b:d8:37:a7:9f:d2:74:da:87:65:
                    df:6d:7f:b6:79:36:a7:2b:6d:1f:d0:dd:fc:00:05:
                    09:c5:2c:f9:45:d1:40:7d:8f:38:71:5f:5d:d4:b9:
                    70:6b:40:9a:18:f3:69:e9:a7:ac:37:47:44:62:3c:
                    d7:d6:7b:3d:8a:e4:33:97:30:40:bc:39:d5:93:cd:
                    f0:98:40:88:82:9b:98:48:23:94:ef:82:b8:f9:eb:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AC:D6:04:39:81:1E:BA:ED:D2:12:92:68:35:6F:93:DE:57:E8:01
            X509v3 Authority Key Identifier:
                keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/AB501A702CDE11EFBC062E74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:5f:c9:87:61:bc:df:c2:86:a6:c1:99:47:fd:0e:f9:e5:de:
         8f:39:25:87:f0:9e:71:3a:62:c6:9e:42:27:fc:c3:e4:95:99:
         32:09:be:51:bf:59:e3:81:1b:9f:11:59:af:33:27:1e:71:96:
         c7:5c:04:de:e2:20:46:5e:e4:9f:07:b3:2c:5b:c3:e2:ad:a3:
         7a:5f:d9:27:90:01:27:c6:90:72:77:08:57:d1:86:1a:71:b1:
         0f:b5:a8:24:77:e4:f9:89:73:b0:a6:94:c5:14:49:83:61:81:
         ff:bf:66:fd:ba:f6:f7:25:82:d2:82:ee:24:b6:53:b2:11:25:
         01:13:fb:05:95:a1:a1:a7:ba:a5:97:47:23:55:1c:42:3e:53:
         dd:74:f3:42:f2:66:6f:b4:c9:4a:7f:61:3d:04:19:f0:0f:8c:
         bc:4a:b9:6f:4d:5c:5e:1d:3b:87:af:8b:b9:50:22:d4:e0:c5:
         21:d5:6b:c5:9d:b4:c9:02:f7:dd:4a:4e:98:1b:1e:d5:fa:de:
         42:a0:de:bf:cc:9d:45:11:e7:84:a9:96:88:b6:a3:10:a9:50:
         5a:28:25:73:13:e6:9f:cc:25:0b:87:6b:fa:ea:55:1f:b9:40:
         77:15:13:e1:81:7a:82:c7:b4:c7:90:1c:b4:fe:3c:b7:66:03:
         9f:f1:8b:11
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NTU5RTExMC8GA1UEBRMoMDk0MDdGNzBGOTc3MTYwMEY0RkJBQTc1QzBGRTk2OTBE
OEM2NUEzMDAeFw0yNDA2MTcxOTIwMzRaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2NzA4YzgyLTY3Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuiZ0ldaGs1D7SybBTfttxWdlhE9WW1xhqZJnmfe7cVGkGH67XjOFBHrzOJRrI
lD+Oe01uVSoQX+Q8aXY1y/DnmbjRdXZC4vBB3+/UK9iHdDElpDudgBFLw+dfxX3c
cEunRix01Wk1a+q13FIEYVUY60lLUwH+mx+Pt4h43M/V87B61u93pwQEetBILsQK
CbwO5fIcE7swBe9Dgu1ATkowPQJn028xrGUya9g3p5/SdNqHZd9tf7Z5NqcrbR/Q
3fwABQnFLPlF0UB9jzhxX13UuXBrQJoY82npp6w3R0RiPNfWez2K5DOXMEC8OdWT
zfCYQIiCm5hII5Tvgrj56wFTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUHKzWBDmB
Hrrt0hKSaDVvk95X6AEwHwYDVR0jBBgwFoAUCUB/cPl3FgD0+6p1wP6WkNjGWjAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1NTlFLzM1MEFGRUJFQTQ3
MzExRUVCREZCQjc1OUM0RjlBRTAyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dq
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ1VCX2NQbDNGZ0QwLTZwMXdQNldrTmpHV2pBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9BQjUwMUE3MDJD
REUxMUVGQkMwNjJFNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEASQy7jANBgkqhkiG9w0BAQsFAAOCAQEAWF/Jh2G838KGpsGZ
R/0O+eXejzklh/CecTpixp5CJ/zD5JWZMgm+Ub9Z44EbnxFZrzMnHnGWx1wE3uIg
Rl7knwezLFvD4q2jel/ZJ5ABJ8aQcncIV9GGGnGxD7WoJHfk+YlzsKaUxRRJg2GB
/79m/br29yWC0oLuJLZTshElARP7BZWhoae6pZdHI1UcQj5T3XTzQvJmb7TJSn9h
PQQZ8A+MvEq5b01cXh07h6+LuVAi1ODFIdVrxZ20yQL33UpOmBse1freQqDev8yd
RRHnhKmWiLajEKlQWiglcxPmn8wlC4dr+upVH7lAdxUT4YF6gse0x5ActP48t2YD
n/GLEQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:54 2024 by rpki-client on console-fra.rpki-client.org