Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
File:                     9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          cotJkdbyDdnoqnW03wwLgBND9x/lhPuMs/gJ3BCR7lI=
Subject key identifier:   E9:FE:1B:7A:7E:C4:79:91:72:3B:BA:C6:82:E7:FB:33:EF:48:F7:D1
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       03A1
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:07 +0000
ROA not before:           Wed 31 Jul 2024 02:33:07 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     137977
IP address blocks:        147.50.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Jul 31 02:33:07 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a263-637c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f9:ac:80:2e:e4:07:37:da:7c:67:14:50:6a:
                    f3:38:9f:d5:8e:16:7d:98:6a:2e:81:ab:28:21:d6:
                    7a:83:55:a2:34:54:ca:66:c7:bf:38:b0:f4:61:bf:
                    84:cb:0d:1b:de:fc:92:ad:ab:cb:f6:d2:24:5d:11:
                    9c:59:11:44:da:05:a7:9e:1e:9c:b1:61:5a:9f:6b:
                    a7:3f:95:db:c8:6b:95:6c:d9:61:1b:ad:fe:33:31:
                    c7:fd:04:96:f2:ca:1d:02:8f:2d:13:cf:27:7e:44:
                    a8:46:51:d3:8c:8e:cb:69:6d:e8:55:a2:5c:30:18:
                    05:73:fc:a4:40:c7:91:9e:57:02:5e:f9:10:5d:30:
                    ed:17:6c:47:f8:51:97:32:5e:43:6d:e0:df:fc:bc:
                    60:29:15:f5:45:58:e3:77:63:1a:0e:a7:fa:a3:e0:
                    72:09:e2:1c:8c:0d:36:68:83:b1:fc:e4:4f:ba:06:
                    70:8b:e1:8b:4c:64:7d:50:60:91:87:66:2b:89:08:
                    4a:56:e2:46:2a:10:49:b1:d4:b2:74:40:49:70:a4:
                    0a:ad:00:af:67:0a:3b:99:23:40:1d:93:c0:2c:2b:
                    b2:cc:dc:f7:a4:54:a2:69:e6:d5:69:b9:96:8d:73:
                    a4:6e:62:77:61:7a:fa:0f:ac:c8:1f:0f:f2:24:6b:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:1B:7A:7E:C4:79:91:72:3B:BA:C6:82:E7:FB:33:EF:48:F7:D1
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a0:59:20:2b:41:f3:33:f3:90:f9:c1:65:66:fc:ca:58:ce:
         9d:98:bf:c2:d6:ac:b1:1e:8e:83:56:50:32:98:32:45:a4:6d:
         9a:5a:82:07:fe:f6:bc:33:e8:99:21:9d:9e:f6:c9:7e:f1:7e:
         0b:83:15:a2:df:ad:55:cc:f2:53:c6:b2:5f:e0:69:b3:80:60:
         cb:c2:17:2e:83:66:32:14:84:06:2b:e7:86:3c:b5:8b:55:92:
         df:ba:4a:bf:3e:93:ea:33:d4:e4:b3:8d:d8:96:ef:a4:f2:33:
         b5:d3:76:31:72:1b:8f:5b:e8:2a:f8:f2:b1:86:93:94:cd:0a:
         3a:b5:92:fd:3a:e0:33:76:55:d7:f9:c0:17:02:bb:61:cb:c8:
         5a:dd:e1:32:96:45:17:d0:0a:c5:c5:8f:ef:c6:29:7a:0d:ea:
         95:e9:d0:98:13:8a:c7:43:89:4a:07:c8:06:fa:7a:f7:2b:19:
         b4:56:b6:39:4e:28:08:be:d3:18:f5:5e:16:f2:7a:f4:81:0c:
         5c:66:f7:f7:26:6c:ec:fe:44:b0:12:6f:dc:03:43:c9:11:2f:
         a3:40:92:0b:3a:e7:33:45:03:a6:93:81:4a:d6:6c:1d:44:a1:
         4f:cb:49:f0:35:a8:e0:62:cb:8c:9e:a5:c0:b2:20:e7:64:66:
         bb:09:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org