Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/50CC42001E0111E9A590C837C4F9AE02.roa
File:                     50CC42001E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          pUr01Q6+0bieVZDBED5IDVaV2vlfiF2WTTp/R1a5Xh8=
Subject key identifier:   37:7A:13:37:D9:CD:7A:55:FC:C5:FB:05:09:D6:B9:3C:B2:C3:BA:B0
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       38BE
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/50CC42001E0111E9A590C837C4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:31:23 +0000
ROA not before:           Tue 16 Jul 2024 14:31:23 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     45958
IP address blocks:        210.86.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14526 (0x38be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:31:23 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6696843b-d492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:5f:8e:4d:c4:34:f7:ec:c9:76:ed:2b:f4:
                    b8:0f:82:a1:b0:14:39:a1:60:e6:4b:49:9c:5c:06:
                    29:9d:bf:f4:45:6d:87:9a:43:5e:f9:2f:20:cf:b4:
                    b6:32:25:9c:f0:f6:09:97:17:39:35:73:2e:09:cc:
                    db:1d:c2:db:25:78:a0:79:b3:58:57:31:27:60:2b:
                    54:6e:88:3c:5b:de:e6:9c:c5:ab:5a:b3:71:e6:2f:
                    8f:bc:de:50:fa:c4:27:4e:3b:21:0a:c4:32:c9:84:
                    b6:84:8d:3e:f4:85:32:60:da:c7:c5:21:0e:f4:20:
                    18:bb:91:d2:02:ed:26:3c:d8:7c:a5:6e:10:9c:37:
                    07:b6:d1:a6:93:e3:2c:d6:7f:da:aa:a2:b5:55:c1:
                    19:5b:87:32:a3:a9:03:26:44:01:49:be:d2:04:66:
                    15:e9:d3:d1:3a:39:d5:12:a6:fa:c4:dc:8e:a1:ea:
                    96:7f:68:06:ac:a5:a7:a8:a6:d0:6d:00:52:da:3e:
                    76:29:9b:a5:7c:88:d6:40:0d:06:72:4d:c3:8f:a7:
                    dc:5a:51:d8:67:46:ed:87:2e:ad:c1:28:a6:bb:bf:
                    90:bb:89:1c:03:14:a2:b3:57:5a:16:b8:a3:6d:45:
                    04:ee:28:5a:fe:93:84:63:28:02:c5:db:3f:73:35:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7A:13:37:D9:CD:7A:55:FC:C5:FB:05:09:D6:B9:3C:B2:C3:BA:B0
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/50CC42001E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.86.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:d4:6b:43:dc:47:11:26:75:c3:d4:6d:36:71:c0:be:11:6e:
         f9:53:e1:ec:bd:83:bd:e0:b8:85:ad:34:1b:bb:b2:78:70:8b:
         36:7f:94:d8:91:f9:f7:71:5b:b4:76:16:84:8a:64:5e:94:a9:
         3a:85:a7:88:2d:9c:52:a9:58:6c:bc:e9:65:a5:15:53:42:e0:
         73:35:04:e9:da:a9:6b:ac:9d:ac:36:69:3b:31:47:14:63:8c:
         99:ac:a3:b7:b5:77:78:d2:ba:16:05:29:dc:54:68:48:f2:45:
         96:2c:dc:c6:8b:39:29:f1:02:24:fb:9e:b0:ac:a1:c3:33:47:
         d2:fc:c6:77:3a:82:94:6a:26:49:3c:e2:d4:e2:a7:9e:1d:fe:
         0a:18:27:e0:99:c0:24:54:1e:c9:d4:e8:20:b0:c6:d8:bd:9b:
         11:1a:48:95:8f:ea:48:58:95:a7:bd:78:5f:36:bb:b9:ef:8b:
         8e:22:f3:a9:2f:43:27:28:f3:e7:66:52:e5:3a:b7:5f:0e:71:
         ae:23:52:7a:c2:58:11:9f:e8:98:67:98:84:ce:1d:78:05:f6:
         fb:24:44:83:12:99:fa:f6:23:48:cf:28:3e:f5:1d:60:b8:09:
         0b:f3:22:f4:ef:fe:8c:e3:c7:43:58:7f:a1:72:b6:00:81:ff:
         1c:c2:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:14 2024 by rpki-client on console-ams.rpki-client.org