Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa
File:                     9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          BczitAlbCQvjk6wnUERPJgdefO0W2XIU7kagZ/uo8Uo=
Subject key identifier:   EF:B0:1A:B5:0A:C7:3C:39:19:9B:67:D4:11:F6:28:02:FE:B7:CA:02
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       039F
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:06 +0000
ROA not before:           Wed 31 Jul 2024 02:33:06 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     137545
IP address blocks:        147.50.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Jul 31 02:33:06 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a261-9c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:14:9f:79:eb:b5:2b:b6:ca:86:05:f8:3b:16:
                    63:4e:9a:5e:ab:88:52:b2:98:25:43:60:ef:e1:5a:
                    f5:6c:c5:7c:8b:53:59:39:04:66:d7:cd:26:89:4e:
                    47:c7:c2:dd:88:be:b3:89:7d:04:91:ec:fa:19:4e:
                    7c:81:ee:c4:13:2d:76:e8:b4:4b:69:3d:c4:63:68:
                    54:ed:43:56:3c:27:47:c7:8d:f4:b3:07:12:01:4a:
                    64:5a:74:47:35:58:af:1a:1d:99:7e:dd:e7:10:05:
                    7a:ef:25:ed:ee:b7:b6:a0:59:65:f7:48:c5:cf:ec:
                    0a:18:2b:a8:66:6c:a8:6f:0a:10:e6:e2:19:32:14:
                    d9:7d:b5:07:7c:2f:76:c5:5d:7f:e3:14:13:0d:a0:
                    6a:38:3c:f5:56:bc:49:1c:7d:37:f9:78:34:b6:7a:
                    99:a2:67:00:7c:d3:c8:b6:85:af:58:a7:91:a9:9e:
                    20:07:33:33:1f:7a:c1:7e:e2:e3:1d:af:7a:b5:6c:
                    32:74:28:2e:a3:a2:f9:98:e8:e8:18:4c:bb:30:09:
                    40:af:e9:1a:5c:50:04:c4:b1:4a:7d:ba:4f:0a:c5:
                    3c:77:05:22:2a:9c:55:20:2e:ff:8d:1d:e8:2b:2a:
                    64:95:b4:cb:da:8e:ae:a6:c1:a6:ab:ba:d9:63:77:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B0:1A:B5:0A:C7:3C:39:19:9B:67:D4:11:F6:28:02:FE:B7:CA:02
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:83:be:79:0f:9a:ec:6d:a8:0c:7c:db:fe:58:31:36:b2:bb:
         19:3c:c9:3b:e6:d7:c5:80:8b:e1:c1:56:c1:13:d8:e7:7e:fb:
         e7:1c:7e:fb:d2:0b:cf:f2:82:ac:4c:18:f3:22:21:18:db:b1:
         59:d8:4f:04:f5:de:44:9c:6d:fe:2e:db:40:e6:b0:07:22:59:
         f2:dd:41:76:fb:3f:9b:f2:0f:2b:d6:ae:e3:f5:a3:81:5e:18:
         b0:a8:9b:d6:d3:ff:e0:08:00:c1:60:e5:c4:98:ee:16:12:80:
         68:0c:1b:bd:e8:91:cf:b8:5d:a9:ed:3a:1c:65:55:12:f0:01:
         e7:e7:00:7f:12:00:5d:56:55:3e:73:69:56:d2:33:e4:c8:54:
         76:88:45:ba:42:f3:0d:94:9b:52:0b:f0:cd:28:01:3f:fc:4b:
         ee:4c:d9:59:ad:3b:d1:ee:12:b5:2c:2d:f1:76:f5:0b:25:e1:
         bf:dd:f0:ee:1b:4b:ac:7c:b1:3f:26:95:92:fb:4e:75:f0:0e:
         7f:54:43:4b:66:12:7f:b4:e1:04:0c:c2:8a:ef:3d:a1:ca:d2:
         22:f7:78:4d:84:bf:08:3d:97:7a:9a:e2:03:42:6d:88:de:2d:
         01:b1:4f:94:05:9f:c0:c7:9a:41:29:a3:a4:ed:28:67:b7:c4:
         19:cc:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org