Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/10EB474C730311EE9ADB6C46C4F9AE02.roa
File:                     10EB474C730311EE9ADB6C46C4F9AE02.roa (raw, json)
Hash identifier:          iXfC933F5qXNmETSjvIrjbzXpKOAbyO+/gWWUW8vo2E=
Subject key identifier:   E0:5A:A0:BD:0B:0A:DA:74:E9:06:65:0C:24:4D:41:2D:CB:8D:AA:E8
Certificate issuer:       /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial:       02
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/10EB474C730311EE9ADB6C46C4F9AE02.roa
Signing time:             Wed 25 Oct 2023 06:52:31 +0000
ROA not before:           Wed 25 Oct 2023 06:52:31 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     151955
IP address blocks:        36.50.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
                          rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Validity
            Not Before: Oct 25 06:52:31 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6538bb2e-173e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:86:df:d1:28:21:9f:ce:c9:27:6b:27:45:
                    8d:bb:58:df:eb:e2:06:66:45:2f:8f:15:80:ab:ad:
                    75:e5:92:ca:36:73:9c:4f:90:19:4b:a8:29:c6:0d:
                    22:b1:eb:46:9e:b2:01:51:c7:de:aa:bd:49:d5:a0:
                    8c:f0:ae:cb:90:b0:ec:1e:e2:0b:13:e9:9a:fc:95:
                    1a:c4:7a:f7:e8:cc:22:87:00:e7:1d:a9:ce:d6:5d:
                    c1:61:dc:fc:eb:d9:93:6a:13:77:4b:e5:7a:ce:8a:
                    97:a1:4c:05:f4:38:b2:ca:1f:22:81:ee:b9:77:26:
                    fe:d5:06:c7:c1:9f:27:4f:2c:6d:9d:82:ca:55:8e:
                    e9:bc:e8:a9:94:ad:d9:65:b8:18:c6:31:92:3c:45:
                    2a:2c:47:3b:5e:4d:1b:46:71:d1:35:34:c0:f5:f6:
                    e5:8a:d3:0c:c1:8b:c8:b9:de:22:2b:8f:07:47:8e:
                    2a:5e:51:58:35:91:93:a2:63:89:9b:e2:21:e9:4c:
                    06:0b:e9:82:fe:86:c5:ba:13:be:c0:25:85:92:a7:
                    2c:1b:0e:a1:1a:49:1d:c0:af:2c:2f:fd:2f:b1:4c:
                    27:3b:9a:70:85:5f:ac:10:d0:74:ed:c8:26:42:f6:
                    d7:6e:12:a8:cf:61:d4:fc:36:0c:22:68:c6:24:5f:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5A:A0:BD:0B:0A:DA:74:E9:06:65:0C:24:4D:41:2D:CB:8D:AA:E8
            X509v3 Authority Key Identifier:
                keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/10EB474C730311EE9ADB6C46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:73:bc:e2:2c:ee:e6:0c:e2:ff:bb:1f:0e:f3:58:e8:71:d8:
         d8:97:69:7b:a0:b9:0a:3e:6e:7e:8a:b3:6c:30:78:8a:d1:75:
         53:9a:1d:ec:fa:7d:e8:f1:aa:83:93:87:0e:24:66:dd:64:95:
         43:d9:f2:c4:bd:65:0d:e7:e9:84:cd:eb:77:75:90:69:cb:f6:
         71:0c:85:e7:0c:fe:0b:4f:bb:e3:8c:29:39:bd:5a:e9:89:bb:
         be:a4:19:99:4f:66:23:75:f4:ee:08:cc:4c:b1:02:5b:23:d1:
         2f:6e:34:c9:38:4e:dd:aa:c5:cf:42:01:1c:54:4b:16:9f:2e:
         6e:82:13:0c:87:0a:de:39:ba:4e:5f:22:d1:e4:09:1f:ba:77:
         b5:5d:ef:83:25:68:f5:7f:79:3f:b3:68:cc:95:d8:ec:6f:39:
         8f:c9:93:92:25:26:98:e9:d3:b4:40:03:b5:38:62:31:e8:90:
         15:b3:a1:90:9b:e1:df:da:62:90:7b:1d:0c:03:35:32:28:a5:
         63:ef:6b:bf:63:41:f4:c5:f0:f6:16:9c:a0:9c:f4:e2:8d:fe:
         68:5a:60:77:2b:67:74:d5:6e:80:01:69:c1:0e:fd:fd:a4:98:
         bd:c8:a6:91:57:43:18:55:eb:84:52:a2:9e:e5:44:4f:26:be:
         2e:4e:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:42:23 2024 by rpki-client on console-fra.rpki-client.org