Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/10EB474C730311EE9ADB6C46C4F9AE02.roa
File:                     10EB474C730311EE9ADB6C46C4F9AE02.roa (raw, json)
Hash identifier:          cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=
Subject key identifier:   54:44:12:85:5C:61:C8:9C:BE:4B:2D:9C:F0:B0:65:FA:1E:EA:39:06
Certificate issuer:       /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial:       CA
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/10EB474C730311EE9ADB6C46C4F9AE02.roa
Signing time:             Tue 19 Nov 2024 04:18:51 +0000
ROA not before:           Tue 19 Nov 2024 04:18:51 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     151955
IP address blocks:        36.50.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
                          rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Validity
            Not Before: Nov 19 04:18:51 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=673c11aa-1516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:b9:43:5c:78:bf:98:d0:49:90:a5:aa:82:
                    70:b1:d0:e1:0c:ea:cf:b7:c4:59:5e:f7:66:12:35:
                    db:0d:04:48:28:c2:41:6a:6f:10:c7:50:16:dd:db:
                    68:94:4c:6e:12:3a:98:5a:bc:79:d5:b5:ef:f0:1f:
                    42:d6:7c:e9:5b:c5:7a:b5:20:db:ca:0f:05:1b:9b:
                    93:70:d9:3a:5d:c7:cb:a6:1d:94:e4:15:fe:a3:82:
                    07:3a:f8:5f:cd:a6:94:70:53:1e:c8:15:36:48:17:
                    8e:1a:b0:fa:e2:be:f8:af:43:97:53:02:4e:f2:f4:
                    b9:15:97:86:b9:fe:6b:fa:85:04:2d:a1:1f:24:6b:
                    28:5b:b7:0e:7d:98:79:0e:33:5a:e8:4e:ac:6d:96:
                    59:99:4e:fc:a9:bd:b1:cf:b1:a9:d6:3f:b2:42:65:
                    f0:b1:36:e1:e9:d9:27:30:de:75:eb:d7:80:69:04:
                    9b:e6:93:87:74:02:82:20:d8:7f:98:ef:4d:cb:f8:
                    a9:f0:ca:71:28:b6:a9:bd:9c:cc:9b:e1:55:09:14:
                    ab:57:a9:db:7f:1c:c3:ce:3b:a3:6c:1d:16:19:87:
                    e8:f2:ea:63:d7:80:5d:01:a3:f4:a0:03:d0:9c:0b:
                    f8:f8:41:24:c7:3e:06:50:cc:04:62:4f:3e:1c:a7:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:12:85:5C:61:C8:9C:BE:4B:2D:9C:F0:B0:65:FA:1E:EA:39:06
            X509v3 Authority Key Identifier:
                keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/10EB474C730311EE9ADB6C46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:e5:0b:da:a9:69:c0:37:d8:de:c6:60:20:16:a3:5c:40:66:
         45:2a:ec:cf:d3:9d:db:99:a1:d3:2c:99:66:8f:2c:0d:23:ba:
         ce:6a:1e:21:88:ac:24:cf:21:48:33:f6:4f:56:2f:b0:e3:29:
         f4:57:70:47:97:59:0d:05:1d:c1:0a:b3:cf:1a:19:fb:82:8c:
         19:ac:6b:d9:8c:fb:c2:dc:16:cd:b4:d8:34:01:8f:59:f0:7b:
         cc:fd:b5:96:09:57:42:8e:b8:34:ed:02:00:60:d9:58:d9:50:
         53:26:67:82:fc:87:ec:d0:70:83:f1:98:06:eb:6b:a5:d9:f1:
         2d:7e:32:db:c5:3d:fb:a9:4e:a7:a4:54:95:84:ff:dd:af:76:
         eb:c9:e4:02:12:69:4a:01:2a:ef:35:56:65:d6:e9:93:9a:87:
         ff:9d:b9:1c:3b:ee:16:4d:c8:3f:3d:17:7e:ff:f0:5a:38:4a:
         a1:9c:1e:eb:aa:23:10:85:c0:89:84:c4:6d:19:35:0f:73:28:
         be:34:a8:f5:da:ca:16:62:4c:ee:7a:0b:b4:55:7b:57:2e:6d:
         11:19:25:59:45:d7:93:3e:9d:0b:ce:4f:25:a4:96:ad:00:1a:
         bb:e5:20:7a:00:c5:98:46:5f:98:6c:ab:2b:85:fb:b8:96:3d:
         c7:62:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:14 2024 by rpki-client on console-ams.rpki-client.org