Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/06CCBE4AED9A11EA9D06C66BC4F9AE02.roa
File:                     06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (raw, json)
Hash identifier:          2qvXU+tp2d+3MZx3p0J67Vu1ntJd9jwcAIOzjZKqJZk=
Subject key identifier:   CB:8B:D0:1C:E2:AC:C4:3D:00:7B:48:24:FF:F9:9B:83:C6:1C:CE:22
Certificate issuer:       /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87
Certificate serial:       33B8
Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/06CCBE4AED9A11EA9D06C66BC4F9AE02.roa
Signing time:             Thu 04 Apr 2024 15:20:48 +0000
ROA not before:           Thu 04 Apr 2024 15:20:48 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     38529
IP address blocks:        116.50.64.0/18 maxlen: 23
                          116.50.64.0/19 maxlen: 24
                          116.50.96.0/23 maxlen: 24
                          116.50.98.0/24 maxlen: 24
                          116.50.100.0/22 maxlen: 24
                          116.50.104.0/21 maxlen: 24
                          116.50.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl
                          rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13240 (0x33b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87
        Validity
            Not Before: Apr  4 15:20:48 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660ec54f-a12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:b2:a1:b8:c6:c0:18:88:7e:a7:98:2c:b4:
                    0d:99:b8:bf:8c:50:25:6d:60:0f:2f:85:ab:8c:34:
                    2a:be:9c:95:f5:93:a5:27:f0:31:5f:79:30:41:4d:
                    0b:cb:97:f8:9a:74:7d:12:96:d2:51:be:5d:5e:e6:
                    9c:fa:82:86:48:00:bf:ee:7b:22:f9:78:86:a5:6e:
                    9e:51:a8:f8:fc:59:e4:d6:1e:ba:a1:99:1c:54:3c:
                    30:df:aa:8a:79:87:d4:19:a0:40:19:04:b5:8f:35:
                    91:17:25:58:85:d0:c6:47:f5:65:5b:6d:55:ad:a3:
                    8b:4b:8c:ed:69:d8:08:cf:18:2d:7c:ac:60:b3:64:
                    6f:d6:13:fe:fd:f5:1f:f8:e9:b4:1f:34:28:a8:fd:
                    5c:b8:a9:2c:6a:e0:97:6d:65:f1:7f:29:a5:41:f3:
                    25:1f:7e:45:e1:d3:ba:17:a6:3b:6f:7c:2c:91:60:
                    12:89:6d:43:ca:9f:84:37:fa:5f:d4:c2:f0:ae:31:
                    02:c3:5a:45:38:85:61:9a:0d:f9:8f:55:d9:92:83:
                    cd:9a:ce:ef:ed:b6:43:04:fc:eb:fa:68:28:d1:3c:
                    e8:8c:26:46:8c:e0:eb:92:59:bb:a1:4e:d7:54:3d:
                    2e:bb:0c:63:24:31:2e:7e:9e:43:60:ca:7e:7a:82:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8B:D0:1C:E2:AC:C4:3D:00:7B:48:24:FF:F9:9B:83:C6:1C:CE:22
            X509v3 Authority Key Identifier:
                keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/06CCBE4AED9A11EA9D06C66BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.50.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:d7:70:52:2b:c2:c9:db:09:f4:75:97:87:24:ef:a5:69:7e:
         0c:67:40:0b:20:fe:64:4a:66:b7:91:3a:97:81:8d:86:35:43:
         59:81:6e:13:b7:38:f7:87:3c:53:fc:ad:a9:b9:00:f3:b4:a1:
         54:99:6b:99:da:7d:bb:9e:7a:6f:51:db:8b:55:38:72:83:12:
         bb:3b:b5:73:24:31:11:d5:34:08:c6:26:8a:a3:44:1f:c0:66:
         b2:68:d3:7e:17:c8:fb:94:05:9d:3a:d8:9a:01:82:e5:bb:a3:
         cb:65:8c:13:50:c0:3f:33:5f:66:a9:96:8b:d1:60:e0:f0:7f:
         de:48:56:88:c7:0f:9c:db:65:5a:2b:d9:88:3d:ee:65:ac:42:
         39:83:8f:bc:7a:ad:42:f8:3d:49:a9:2f:90:9d:65:36:50:e6:
         65:a9:89:e1:95:23:3a:77:fd:09:96:d8:98:d9:62:2c:9e:44:
         8b:7c:bc:f1:be:e0:84:aa:93:05:11:e8:3c:b2:42:c9:1b:67:
         9c:e4:b1:23:0d:b8:a7:2f:16:ae:23:63:5b:c5:1d:2c:ca:e2:
         95:5a:09:c6:5e:7b:66:82:4d:69:a1:35:81:be:17:94:15:03:
         8d:59:70:5b:f3:d9:a2:26:22:c7:64:72:1b:ce:62:4f:25:c3:
         ef:3b:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org