Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F563D916248D11EF93237035C4F9AE02.roa
File:                     F563D916248D11EF93237035C4F9AE02.roa (raw, json)
Hash identifier:          B9+ujxo3UgWLMG+B0g5KGVMUgAJmIzvebILB++raaNc=
Subject key identifier:   6B:80:BE:E0:CE:5C:05:51:6E:F6:A2:DA:F9:5A:D7:25:C1:5B:FD:08
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       03A8
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F563D916248D11EF93237035C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:13 +0000
ROA not before:           Wed 31 Jul 2024 02:33:13 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     59374
IP address blocks:        147.50.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936 (0x3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Jul 31 02:33:13 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a268-0148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:83:a3:f8:83:ef:8a:8d:8f:57:ea:b4:9d:
                    74:c7:03:40:de:d7:1b:0a:0f:8a:d8:d8:2a:78:86:
                    9d:f5:6d:4c:7a:4e:16:73:d5:d8:82:68:72:15:7b:
                    09:c8:c8:a7:76:2a:40:49:f5:35:76:8c:1b:c8:97:
                    d1:09:68:4c:cd:32:26:c8:b9:fb:b0:43:d3:39:93:
                    c3:ce:3e:40:72:39:f4:2a:08:ea:4c:fa:57:20:a8:
                    57:5b:b8:db:8d:aa:1c:04:8b:58:f4:09:d2:0a:ba:
                    e0:80:97:58:4d:26:eb:c7:63:fe:53:f9:fa:0c:4b:
                    ee:18:e7:bf:9b:a7:79:1a:7f:55:27:a8:fe:37:fc:
                    3f:65:85:22:32:e2:39:1e:f0:00:58:2f:43:4c:55:
                    65:ec:18:3b:04:39:13:d3:57:a2:5c:52:ed:a3:90:
                    c2:3e:73:72:5a:5d:45:e3:16:63:52:f2:db:99:f0:
                    15:8c:f0:cf:b1:2a:9d:e2:ed:e4:b5:6a:62:3c:c3:
                    60:34:95:c4:a2:3c:05:1f:0f:f7:4e:44:12:42:9e:
                    fb:98:37:4f:b9:87:2c:0f:e9:b1:c8:c1:32:95:09:
                    41:d9:82:1c:dd:e6:f2:85:ee:50:ac:ed:e7:8c:ab:
                    44:95:87:42:b7:dc:8a:74:8b:a2:b9:52:cf:4a:7f:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:80:BE:E0:CE:5C:05:51:6E:F6:A2:DA:F9:5A:D7:25:C1:5B:FD:08
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F563D916248D11EF93237035C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:c8:7f:92:d1:ea:ae:68:22:af:54:10:5c:d2:dd:dd:d9:
         ab:a8:9e:a8:7b:e2:83:f7:95:43:0d:95:87:5b:5e:82:d8:86:
         23:d2:e1:95:37:11:a7:64:43:21:ba:4f:b5:e1:c3:ef:0e:87:
         31:24:55:e2:f9:39:7a:de:fa:3d:48:13:63:01:70:c5:f0:77:
         28:a5:50:bf:9a:7c:f9:97:78:49:86:23:9f:2f:c4:f9:91:10:
         55:39:b3:d9:ea:8f:4a:f5:9d:8a:94:76:95:b6:cc:8c:e4:ee:
         f5:30:aa:c8:8b:2c:1d:ef:eb:cb:85:7c:bf:77:57:d5:1d:20:
         6c:72:29:e4:b8:02:38:e7:f4:a8:7d:65:ee:7a:d1:7c:77:34:
         16:85:99:a3:c9:04:27:fa:b0:15:9d:b6:79:79:c7:e1:42:48:
         10:4a:e3:17:82:6a:2d:ed:da:e1:ce:d1:88:2b:dc:d5:3e:2a:
         6a:e1:6a:a2:d7:70:73:a8:7c:b6:dc:60:4e:1b:c1:fc:5e:f5:
         40:61:06:45:45:89:1f:82:4e:2e:cd:88:9b:2d:1d:60:2e:cd:
         1d:70:9f:72:d2:ee:87:7d:23:94:6c:8c:8b:13:fa:29:d2:20:
         80:9a:48:07:b1:43:21:65:43:db:d6:5d:10:1d:6d:86:a5:3e:
         88:ac:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org