Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/D47D55EEE5BB11EE8B36C249C4F9AE02.roa
File:                     D47D55EEE5BB11EE8B36C249C4F9AE02.roa (raw, json)
Hash identifier:          Xbvsq704dPMvTDsWQcnktj8YjFOa8nuy1nElLVu+op0=
Subject key identifier:   C3:85:1A:0E:C9:D4:CD:00:9E:02:48:37:D9:08:11:E9:E2:47:CC:AD
Certificate issuer:       /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial:       02
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/D47D55EEE5BB11EE8B36C249C4F9AE02.roa
Signing time:             Tue 19 Mar 2024 06:42:18 +0000
ROA not before:           Tue 19 Mar 2024 06:42:18 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     152165
IP address blocks:        36.50.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
        Validity
            Not Before: Mar 19 06:42:18 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65f933ca-6f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:b6:3c:46:5b:39:dd:aa:af:0c:d4:de:b0:
                    b5:db:e4:66:f8:63:cc:3f:6b:0e:02:f7:cd:c7:d2:
                    d7:f2:95:1e:4f:e1:b4:71:75:ed:f9:5e:a2:dd:7f:
                    9f:86:0d:73:78:69:97:f0:e5:a5:98:0b:98:24:f9:
                    e8:17:62:23:fb:2a:2f:bf:6e:82:5d:5c:01:da:ad:
                    49:3d:58:e7:66:3a:a9:86:3d:59:fa:de:23:ea:21:
                    83:cd:af:a0:16:ce:ed:22:35:3d:fe:27:d3:9d:63:
                    75:73:c3:96:eb:78:4a:92:9c:83:f9:88:39:3e:36:
                    e3:e5:6b:50:f7:8a:6d:70:1f:95:f9:77:f1:75:fa:
                    36:66:58:5e:58:3d:62:ed:8b:f8:c9:7f:83:42:fa:
                    57:2f:3c:dc:cc:2e:b5:5f:ec:13:44:fa:0e:94:24:
                    43:12:98:e7:86:89:82:9f:bb:7e:93:4e:37:74:bd:
                    d6:f6:19:69:35:fa:35:52:a3:37:84:a8:c4:c5:48:
                    64:dc:e5:9e:99:89:42:ff:cf:ef:dd:17:e9:ea:05:
                    b8:40:ac:f9:31:cb:6c:b0:79:80:a5:9e:af:f0:ee:
                    ee:a6:0d:aa:bd:f6:00:cb:de:73:7a:94:6f:28:c6:
                    d1:75:ac:ab:d4:07:f4:0c:81:35:1e:23:11:c1:56:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:85:1A:0E:C9:D4:CD:00:9E:02:48:37:D9:08:11:E9:E2:47:CC:AD
            X509v3 Authority Key Identifier:
                keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/D47D55EEE5BB11EE8B36C249C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:43:8c:7e:fb:e5:06:3a:a2:be:f0:c4:bb:5e:65:6b:d5:61:
         5a:a3:ab:d0:b6:c3:98:ca:36:bf:40:98:b5:4e:83:ad:ec:be:
         a4:79:41:51:96:f1:53:bf:a7:04:df:46:27:f7:82:8a:70:b7:
         53:cb:69:91:e4:e3:8e:da:bd:37:20:70:cb:ad:a7:d2:3a:1a:
         fe:5e:92:7a:93:3e:e2:37:f7:53:da:aa:58:51:19:3d:91:7b:
         1f:fe:82:70:6e:11:83:f9:3b:3f:d8:1a:d6:eb:ba:b2:ac:a3:
         d7:65:4d:79:19:72:01:11:cb:01:9a:d2:2c:ca:e7:63:d4:e3:
         b3:3d:41:33:c2:08:40:92:b8:8e:f8:74:0f:67:83:a9:7d:73:
         1f:31:9c:5c:e9:8b:7c:05:4a:16:06:49:13:d0:e5:00:90:05:
         e5:94:b4:3e:1d:ee:b0:19:70:ef:d6:8d:a7:f4:c1:3d:43:75:
         d7:c1:bd:46:03:fd:42:1e:f6:70:c9:3c:94:57:9d:b5:28:76:
         53:7c:fb:b2:c1:1e:77:81:7f:d4:a2:de:f1:c1:5c:68:62:d5:
         43:24:01:13:72:0a:a6:24:12:ec:47:ce:77:15:eb:ce:77:7b:
         71:95:03:01:aa:ac:5a:ee:f4:01:2a:84:cb:30:b5:83:04:25:
         b8:1a:4e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:45:07 2024 by rpki-client on console-fra.rpki-client.org