Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A1FED136DF3E11EC83CCFE1EC4F9AE02.roa
File:                     A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          gOJa8cYlazWQ7UQ+EjuycM05p/sMIN86mUAHCGBMKow=
Subject key identifier:   D5:66:A4:F0:10:17:1E:4B:B9:78:70:F4:92:0B:B2:C8:DC:8D:29:FB
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       03A6
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A1FED136DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:11 +0000
ROA not before:           Wed 31 Jul 2024 02:33:11 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     45199
IP address blocks:        147.50.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Jul 31 02:33:11 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a267-6ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bd:66:6f:31:67:2d:2a:06:42:2b:bc:83:b1:
                    db:5c:a6:07:58:aa:5e:09:d1:60:c8:21:ad:fb:ff:
                    17:d3:75:f4:13:a9:42:4e:16:ab:f4:07:55:c9:3d:
                    18:a9:52:e8:60:b5:b0:5e:79:a6:f4:e5:a8:c0:c3:
                    6e:2d:b4:17:ae:cd:53:50:2e:46:13:6f:06:7f:e1:
                    f5:3d:de:05:f5:53:69:ad:03:89:53:21:c3:00:55:
                    77:d4:37:13:61:62:f8:68:17:5c:88:d8:0c:89:3f:
                    aa:49:ed:95:06:92:ff:41:cc:a1:4e:71:1b:7d:ec:
                    e3:fc:56:6e:7d:94:6e:9d:27:e5:28:3a:0c:b0:ea:
                    32:68:82:2c:64:eb:1f:71:97:c7:39:1b:ec:d7:ca:
                    6e:9a:77:de:52:2f:a5:9e:10:a3:4c:5f:97:98:0c:
                    e6:fb:e3:7a:60:e7:ef:99:3e:7a:f7:fa:3d:64:dd:
                    a3:9b:e9:00:d4:a6:1a:e5:e1:88:af:5d:44:09:cf:
                    40:e2:8b:9a:88:20:6f:3c:e6:7e:83:ab:fd:8d:57:
                    20:5f:85:02:2e:c2:bf:71:38:db:cc:10:26:63:81:
                    5e:8d:17:f4:74:e3:dd:61:21:4e:a3:92:b8:42:1f:
                    7e:92:4a:2b:f3:ab:bd:ec:4e:73:93:75:49:d7:c7:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:66:A4:F0:10:17:1E:4B:B9:78:70:F4:92:0B:B2:C8:DC:8D:29:FB
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A1FED136DF3E11EC83CCFE1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a9:91:12:2d:30:73:ce:e9:9a:55:2e:6e:c8:c6:48:86:2c:
         83:e2:88:27:c7:51:2c:16:76:c9:cc:91:d4:6d:14:a1:91:41:
         ca:f2:d0:2b:f4:af:2a:2b:99:56:3b:35:7f:27:35:c6:4f:4e:
         ec:b5:65:e2:91:78:91:5e:f6:97:4d:a0:65:05:a5:48:f2:65:
         e9:7f:da:16:b4:b6:9a:7c:4b:5b:e6:c3:3d:f1:6d:04:ce:c9:
         89:6e:6f:34:e2:51:02:c1:5b:21:78:db:6f:a4:01:2d:5f:38:
         80:55:1b:ac:33:47:75:2f:70:4d:02:2c:d7:11:d1:25:7e:94:
         b4:b6:6e:3e:79:70:43:6e:4a:b8:13:4a:96:69:ce:25:23:47:
         63:58:d5:24:4b:bd:4f:30:0c:d8:2d:5a:34:86:de:60:aa:f3:
         38:54:1f:9c:b0:2c:c1:e4:e1:61:10:99:07:d0:c6:cb:a7:5b:
         80:1d:4f:9a:1f:29:da:f2:b6:82:00:9a:4d:d9:85:a5:b0:f7:
         5a:3b:dd:4b:95:51:65:15:32:7a:fa:21:5c:3c:0d:b6:84:13:
         a8:51:b9:ca:ac:d9:87:30:b3:eb:43:93:aa:16:d7:ff:a3:f9:
         1b:4e:f1:ec:30:6a:7a:b1:49:08:1e:af:a8:22:6f:2f:b3:f6:
         ab:b5:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org