Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/D0C91A8A9D6F11EEB2E31781C4F9AE02.roa
File:                     D0C91A8A9D6F11EEB2E31781C4F9AE02.roa (raw, json)
Hash identifier:          P7e3Wr2FP0I0hn523nuNycF9N/dNvUjwNOxhQ0odjxo=
Subject key identifier:   35:71:DE:45:54:D7:C7:2C:33:B0:CF:C5:AE:2F:D9:C1:16:F9:13:DD
Certificate issuer:       /CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
Certificate serial:       0E
Authority key identifier: 5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/D0C91A8A9D6F11EEB2E31781C4F9AE02.roa
Signing time:             Wed 27 Dec 2023 14:38:58 +0000
ROA not before:           Wed 27 Dec 2023 14:38:58 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     152182
IP address blocks:        36.50.146.0/24 maxlen: 24
                          36.50.179.0/24 maxlen: 24
                          2401:5ba0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl
                          rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 06:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
        Validity
            Not Before: Dec 27 14:38:58 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=658c3702-5446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:7c:22:71:d1:40:74:6a:78:81:52:5f:5a:
                    22:a3:7a:d2:44:ec:13:36:b8:eb:0a:4b:ca:4f:ae:
                    c7:b3:9f:b8:da:d9:14:c5:64:1b:99:92:25:77:14:
                    63:b5:52:0b:28:d3:27:3e:3a:40:78:57:8f:36:70:
                    e6:6a:fd:be:09:43:c3:3f:17:8f:7d:84:fa:59:28:
                    26:b7:7e:c2:26:f3:07:13:cb:11:dc:40:e6:b3:66:
                    08:b2:ae:af:d8:4e:0d:82:e7:8e:c0:81:9f:b0:c5:
                    50:21:cb:ff:a0:06:28:88:12:6b:fc:68:09:12:3c:
                    5e:62:d9:f9:6c:71:58:7e:00:46:27:6f:2e:e5:f9:
                    02:cc:e1:32:f8:ec:6e:03:23:a1:1f:cf:d8:8d:3c:
                    0f:f4:31:5b:2d:56:2b:49:a8:cd:26:87:18:5b:00:
                    ad:31:eb:33:1f:5a:52:85:06:9f:af:ee:1e:f4:8e:
                    49:8f:05:1f:31:64:1f:0a:93:43:0f:d1:2e:39:d0:
                    9b:78:b1:d4:96:8e:3d:c1:8b:fe:79:68:7b:ad:ec:
                    f9:2d:cd:9c:23:dc:f7:09:e7:51:d1:7e:15:fe:93:
                    8a:bd:77:d5:a4:87:f1:82:96:e4:71:9b:5e:7e:f4:
                    8b:84:e6:19:97:42:78:93:c7:10:d1:f4:c0:25:54:
                    1c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:DE:45:54:D7:C7:2C:33:B0:CF:C5:AE:2F:D9:C1:16:F9:13:DD
            X509v3 Authority Key Identifier:
                keyid:5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/D0C91A8A9D6F11EEB2E31781C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.146.0/24
                  36.50.179.0/24
                IPv6:
                  2401:5ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:bc:51:e1:a8:40:36:5c:7c:15:12:5d:d3:ce:bb:6d:01:4b:
         87:75:d1:09:b1:b0:77:8e:12:f0:83:52:fe:fd:9d:c0:2d:5c:
         18:cd:55:08:b6:a9:cf:4f:ad:d5:a6:bf:96:1f:89:ae:84:cb:
         4d:b6:29:26:e3:90:3b:af:52:81:40:d5:21:56:00:4e:cc:f7:
         42:62:89:59:24:28:75:7e:82:ad:f5:44:fb:f3:12:60:86:89:
         c0:2c:d3:1d:a1:c1:1f:c4:2b:6c:f9:c9:2f:c6:4e:3e:ec:e4:
         47:91:6c:c8:f2:2f:d5:10:15:3c:3e:e3:97:ae:92:f3:f6:6c:
         a5:8a:24:b9:51:da:79:ef:e7:db:43:6d:b6:12:cd:fa:91:00:
         b3:26:27:36:8f:0e:58:4e:53:42:02:c5:b3:11:8a:52:bb:59:
         9d:a2:0b:ac:f1:a7:c7:d6:fa:61:99:b9:9a:89:1f:a4:c3:01:
         53:3e:12:10:4e:62:1b:2b:fd:00:86:29:ed:a6:40:7f:18:a2:
         90:ba:24:49:0a:ad:93:03:31:5f:15:d7:9f:1f:e2:00:85:31:
         c2:8d:30:65:68:c5:74:8a:8d:4c:d2:f6:3c:53:2e:96:0e:a8:
         0f:52:9b:10:bf:41:29:ba:8e:97:d9:c6:35:24:d5:b1:02:24:
         c1:c8:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:16:17 2024 by rpki-client on console-fra.rpki-client.org