Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/43C5BAA282F411EE99AAAB12C4F9AE02.roa
File:                     43C5BAA282F411EE99AAAB12C4F9AE02.roa (raw, json)
Hash identifier:          N3pngW2F3xkXcHjMPhnn8/90mI3hL53wBBuSYsPJujA=
Subject key identifier:   0C:7D:A8:80:5C:F8:E6:2F:D0:7F:54:35:0F:62:6D:BA:A7:C6:2B:29
Certificate issuer:       /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Certificate serial:       12
Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/43C5BAA282F411EE99AAAB12C4F9AE02.roa
Signing time:             Tue 12 Dec 2023 17:17:30 +0000
ROA not before:           Tue 12 Dec 2023 17:17:30 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     152098
IP address blocks:        36.50.40.0/24 maxlen: 24
                          36.50.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
                          rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
        Validity
            Not Before: Dec 12 17:17:30 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=657895aa-12c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:2a:8a:6d:ec:d0:49:04:a0:84:86:97:5a:
                    b3:f6:7e:6d:62:74:4d:7c:c2:62:44:b7:77:fa:76:
                    72:4e:a3:8f:e9:94:f2:36:dd:87:46:08:59:8b:c0:
                    c5:dc:91:04:07:e5:66:0b:0b:59:90:59:53:fb:d5:
                    18:ed:72:e5:f6:72:89:f7:e8:47:b2:5e:27:ab:76:
                    1d:03:67:21:dc:5b:2a:d2:cf:ca:37:2b:1b:8e:18:
                    6f:f7:7f:7c:40:ce:ab:6c:35:92:c4:0f:c6:5a:28:
                    4e:38:e5:6d:e5:1c:6d:36:d9:31:75:51:16:10:7c:
                    81:05:c5:41:1d:fe:99:94:4c:7c:25:49:4e:f7:7d:
                    fb:81:91:7b:35:25:3e:66:89:f0:3c:e0:a2:30:bf:
                    d8:b2:d9:e6:e1:d4:1e:45:3c:19:07:3a:b4:48:59:
                    80:b2:39:b7:d8:63:c3:a5:0a:e2:36:67:83:14:17:
                    84:7b:2e:f4:0e:8b:f7:15:39:56:02:be:f7:46:f3:
                    6f:b5:a0:e4:02:1c:46:4b:5d:78:f9:18:3d:6a:ed:
                    ca:f2:ca:bb:69:07:a0:2a:3c:a5:05:e6:11:e5:f4:
                    5f:ef:20:d6:5c:0c:ed:9f:8a:f9:38:08:da:46:27:
                    0f:48:f8:84:d9:83:9b:41:c6:ca:3b:d0:42:b4:47:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7D:A8:80:5C:F8:E6:2F:D0:7F:54:35:0F:62:6D:BA:A7:C6:2B:29
            X509v3 Authority Key Identifier:
                keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/43C5BAA282F411EE99AAAB12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:59:35:ce:3a:46:c3:ef:52:29:24:a9:b5:5e:a5:01:8f:df:
         5b:8b:de:cb:87:bd:a3:3a:e8:1d:2d:89:3b:0c:4d:f7:6a:32:
         10:dc:c4:9d:3f:d3:46:f6:6d:3c:de:64:ff:55:a2:04:75:3e:
         e6:62:37:82:05:06:f0:96:e2:8f:de:08:88:b7:8a:ff:5b:ae:
         e3:21:bc:a4:0d:f4:cb:c6:c0:4d:6b:23:63:7c:d2:8b:a9:74:
         2e:2b:53:db:6d:1b:f5:6c:99:56:d1:c2:8c:b8:11:3e:d2:07:
         08:37:0a:f3:a5:0c:36:1c:23:71:e6:45:e9:b4:25:c9:4d:bc:
         c4:61:23:7c:5a:30:82:31:0e:b4:01:37:41:18:98:04:a8:f5:
         ea:01:e3:f3:97:38:97:05:57:65:0b:1e:a0:ce:ec:80:9c:1f:
         9d:ca:fe:a2:82:94:68:57:5e:6f:e2:6f:71:2e:cb:a4:5f:6b:
         9b:06:79:5e:41:b9:eb:00:26:4e:d5:77:9c:95:72:92:01:0d:
         57:cf:9f:f8:46:ee:39:ae:d5:a8:b6:87:11:d1:bf:a0:c5:35:
         d9:6a:7d:80:9b:04:49:48:00:5a:6f:98:83:2f:04:15:f9:3d:
         b0:c3:8d:90:ff:0c:81:8a:f6:df:70:39:de:0a:13:7a:ef:ea:
         71:9a:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org