Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa
File:                     A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          NQHfqGV9nzmqD0Z+5y3As3/7yKq5UJhzAqztCFjKb3E=
Subject key identifier:   3A:E1:45:3C:E5:34:F0:C5:3D:BB:F7:EC:3C:2A:74:8E:22:8D:96:09
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       02C1
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:03:31 +0000
ROA not before:           Thu 27 Jul 2023 02:03:31 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     140326
IP address blocks:        147.50.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Jul 27 02:03:31 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d073-3665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:d9:ea:0b:8f:56:f1:47:5d:60:03:bd:31:
                    a3:6f:3a:7e:bf:8a:71:7d:9f:68:a2:d0:7f:0a:d9:
                    96:b7:f4:33:92:b8:07:7f:72:f3:c1:08:b9:4a:6e:
                    0e:bd:3a:b1:f3:bb:99:b1:21:3b:a0:cb:77:ff:42:
                    c2:1b:4e:c5:da:ad:ee:ad:8f:45:9e:c4:7f:ec:a0:
                    b0:e2:0e:0d:ad:ee:7f:0a:17:8c:44:e4:be:cd:3a:
                    48:55:f0:4c:a7:46:1e:79:b6:22:f4:d5:42:14:97:
                    4d:a4:ee:2d:99:4a:dc:97:ac:2d:a6:87:67:f7:1a:
                    68:38:74:62:00:96:53:a3:58:18:0b:d4:a9:33:3e:
                    af:d9:76:38:9f:d9:04:97:87:94:db:e4:e0:76:0a:
                    67:17:7a:88:5d:d7:e0:85:fb:03:4e:f6:e4:12:99:
                    b3:c3:25:9d:09:e6:8f:38:7d:f5:e8:22:93:60:41:
                    86:45:46:43:18:e7:26:63:90:b0:4c:f7:a2:f3:1e:
                    3a:b5:2f:30:59:de:a6:12:b7:87:f4:25:d7:b2:e0:
                    fe:7c:c0:05:15:bf:d4:2e:e7:51:fb:fc:35:6f:19:
                    7b:9e:34:91:4f:10:fb:62:7f:41:22:76:39:3a:56:
                    3c:a3:20:64:05:42:a7:4d:f5:b2:e2:83:74:5e:7a:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E1:45:3C:E5:34:F0:C5:3D:BB:F7:EC:3C:2A:74:8E:22:8D:96:09
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:08:8f:16:5e:bb:3d:29:5b:36:7b:da:8d:e9:48:0a:aa:
         d6:ad:4b:b8:89:9a:79:0e:26:be:0f:03:e6:43:2b:24:e9:33:
         fc:d0:b4:8f:6b:25:e2:fa:bc:6e:c7:43:18:8b:ac:bb:b4:6e:
         17:aa:3b:99:e4:48:35:39:cb:2c:39:b3:97:d4:92:6a:f4:92:
         b9:f9:f2:71:a8:7e:b2:35:24:b0:51:10:1d:52:12:f6:c4:f0:
         25:0f:e6:aa:49:06:65:fc:a9:e1:50:10:17:a9:db:2f:84:a9:
         5c:65:13:a3:1f:89:f5:13:17:4f:24:71:69:46:4f:d1:7b:ab:
         19:37:06:b0:ae:db:bc:7e:23:99:de:8e:3f:5d:9a:a8:93:96:
         a7:ad:63:e3:6d:7d:d8:d3:91:57:81:83:fd:2f:5f:fd:f2:b2:
         7e:93:03:be:e4:14:d0:5b:ff:e9:e8:24:75:04:8c:49:2e:53:
         14:bb:9c:35:e8:21:e6:c6:93:0b:8c:95:81:d8:81:ea:2f:cd:
         fe:35:7a:13:da:53:31:79:ee:28:8f:23:39:72:7d:fe:c0:7e:
         96:b4:3b:c2:5f:ec:25:a7:2e:ae:30:8b:d8:7a:bb:6d:eb:c3:
         d6:fe:76:09:48:9d:48:cd:7b:54:53:e3:64:27:8b:6a:1b:42:
         e5:b2:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:00 2024 by rpki-client on console-fra.rpki-client.org