Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/44CA7E22F0D811EEA8D08633C4F9AE02.roa
File:                     44CA7E22F0D811EEA8D08633C4F9AE02.roa (raw, json)
Hash identifier:          BgGoHCl2iTsuBLT+ayqXCo0W6SSb3rjCMeP23JW82+A=
Subject key identifier:   CE:5B:35:5C:9C:0A:B8:1C:56:5A:A5:4E:A0:EE:9D:C4:80:C4:4C:A4
Certificate issuer:       /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
Certificate serial:       16
Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/44CA7E22F0D811EEA8D08633C4F9AE02.roa
Signing time:             Tue 02 Apr 2024 10:03:35 +0000
ROA not before:           Tue 02 Apr 2024 10:03:35 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     152183
IP address blocks:        36.50.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl
                          rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 04:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
        Validity
            Not Before: Apr  2 10:03:35 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=660bd7f7-086f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b2:70:73:f9:79:1a:d5:d4:fb:68:79:34:1c:
                    4f:d4:d3:dc:41:35:b0:e2:c7:da:5c:43:c4:45:5c:
                    73:cc:1d:3a:d3:d4:0f:cd:fe:d9:79:fd:82:67:64:
                    1a:37:3d:b2:9f:f3:8d:8b:af:42:ec:8b:1c:84:33:
                    79:6e:24:bd:6b:6b:0e:1c:05:ea:d4:a2:4e:3a:0e:
                    10:4f:de:39:8d:98:2a:16:be:30:c1:e4:73:e1:be:
                    be:85:c6:0c:5a:99:a4:2a:1c:e2:3d:09:76:6a:f9:
                    12:ea:7e:68:40:fd:be:43:58:b4:37:ea:f0:f8:7e:
                    85:b6:b6:31:fd:62:20:d9:0b:cf:61:f5:a3:63:ea:
                    cc:89:8a:91:32:ff:3b:12:72:f7:56:e8:cf:8c:16:
                    37:71:40:b6:9c:28:83:fb:82:cf:1f:3e:27:f5:07:
                    cd:31:8a:65:8b:35:a0:59:77:b6:5d:87:56:4d:f4:
                    c0:3a:90:4e:55:b0:e7:c8:16:d0:4c:e9:8f:b3:0b:
                    f4:b4:2f:fa:e6:3b:3f:4d:93:0e:06:bd:58:78:67:
                    f4:3f:3a:44:36:fc:b3:8d:a9:a7:19:55:0c:62:e4:
                    cf:ca:fb:fb:dd:d4:35:71:a7:39:32:cf:a2:a1:ab:
                    b8:89:97:4c:0f:9e:11:ec:10:cd:ec:76:54:d6:13:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5B:35:5C:9C:0A:B8:1C:56:5A:A5:4E:A0:EE:9D:C4:80:C4:4C:A4
            X509v3 Authority Key Identifier:
                keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/44CA7E22F0D811EEA8D08633C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:de:e1:e2:af:89:04:84:4a:e9:c2:26:8d:f0:2a:2f:49:d7:
         5a:b1:e4:b4:a2:d7:ab:73:04:2a:97:e6:f7:7b:70:68:5d:5e:
         a8:07:48:a7:de:62:5a:43:00:a0:2c:a2:76:2b:6c:b9:63:99:
         a6:aa:a7:ff:80:b9:a4:d0:e0:bd:48:3e:0b:c3:20:a7:28:20:
         9a:b7:cf:3b:14:75:b0:de:e6:08:31:a1:ab:b9:97:f9:e4:e7:
         34:6c:65:3c:83:54:f1:f3:a7:54:c0:68:03:90:81:44:bf:cf:
         4d:e2:ef:e6:f8:6c:62:c1:86:5a:b7:07:76:6b:dc:e6:38:13:
         fe:d0:ae:11:00:4d:f1:57:bd:b7:df:44:a6:c6:86:7a:d8:bd:
         69:c3:35:69:98:be:97:dc:a0:1b:3f:73:a2:d2:5e:4e:d5:b2:
         d1:3c:6c:cf:17:e1:3f:2a:33:a6:e9:6d:2f:9e:10:41:c0:5f:
         b2:93:96:86:5c:09:7a:57:c6:d6:5d:f4:0d:41:73:f9:9d:c9:
         62:f7:65:aa:78:c1:79:8e:d2:86:39:06:e3:d2:76:6c:d6:e0:
         e3:5c:d9:1c:59:6e:d3:7c:08:91:ba:5b:4b:ae:60:1f:63:fd:
         55:73:13:82:e7:6d:fe:92:36:0d:74:d9:74:f3:44:c9:ef:b5:
         23:f6:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 05:56:25 2024 by rpki-client on console-fra.rpki-client.org