Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/2C0CF1C04A1111EFB5C41713C4F9AE02.roa
File:                     2C0CF1C04A1111EFB5C41713C4F9AE02.roa (raw, json)
Hash identifier:          gcTBwMg2meuYsZup8cuv/4L4S8IZ8u9w6uUHH9oycV0=
Subject key identifier:   3C:B7:1C:01:EA:28:9C:55:CE:D8:2E:B7:86:E9:FE:EF:25:B2:35:14
Certificate issuer:       /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial:       A2
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/2C0CF1C04A1111EFB5C41713C4F9AE02.roa
Signing time:             Wed 24 Jul 2024 23:14:52 +0000
ROA not before:           Wed 24 Jul 2024 23:14:52 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     152300
IP address blocks:        36.50.240.0/23 maxlen: 31
                          2001:df3:5240::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
        Validity
            Not Before: Jul 24 23:14:52 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66a18aec-84bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:8c:b8:8d:a0:5e:24:bc:04:50:be:7b:5a:
                    08:3d:15:3a:4b:3d:6b:d7:44:c8:46:6e:21:aa:de:
                    2b:ed:68:00:28:7c:08:91:e1:d7:0c:59:3f:c5:f9:
                    06:01:0f:2e:50:0f:aa:3e:aa:b9:3c:b3:88:fa:56:
                    e2:44:89:9a:66:18:77:4a:b9:52:c4:3e:e4:6c:82:
                    78:a8:f3:b7:17:07:4a:97:80:3c:6e:13:fe:ff:dc:
                    71:86:16:3b:aa:82:7a:1c:43:0e:82:de:44:ef:d2:
                    c1:e3:45:da:49:b0:88:6e:6d:da:ed:ab:13:0c:09:
                    2e:b1:e0:ac:e6:0c:c1:9e:5d:17:d8:da:c4:57:ee:
                    dc:5d:25:1e:96:33:cb:4a:da:90:fe:e3:c7:34:15:
                    87:18:9d:ad:07:92:6e:2c:4a:8d:45:28:46:9f:4d:
                    a1:ba:a2:b7:da:de:5f:7a:77:e9:41:4f:10:24:6d:
                    c0:34:ab:f9:d4:e7:65:5e:a4:48:cd:da:f4:28:c7:
                    6e:4f:45:88:0d:58:7f:ae:9f:ef:e2:9f:c1:02:53:
                    1b:34:da:e5:b8:36:84:aa:b5:d1:7a:df:aa:ee:5d:
                    5b:d8:0d:b7:2e:e3:b5:95:a3:ba:46:d8:f5:24:d5:
                    c5:af:50:17:d5:e3:df:20:8e:2b:74:cd:6e:d3:d4:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B7:1C:01:EA:28:9C:55:CE:D8:2E:B7:86:E9:FE:EF:25:B2:35:14
            X509v3 Authority Key Identifier:
                keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/2C0CF1C04A1111EFB5C41713C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.240.0/23
                IPv6:
                  2001:df3:5240::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:90:ad:65:e5:d3:f9:26:ab:7e:2e:1e:c3:16:04:f2:4a:27:
         cf:cd:29:f4:c2:31:d0:94:10:8b:ca:91:9c:e7:47:a1:bd:84:
         47:bd:e6:4d:fe:70:af:88:0c:57:e0:0b:b6:6e:79:a0:e7:47:
         bf:b2:72:18:91:9d:f0:b4:48:5e:45:95:1f:77:5f:c9:18:13:
         f9:1a:c6:5e:82:38:cd:bf:d6:b5:cc:3b:d4:0f:93:39:c1:9e:
         73:3a:e0:b0:44:4f:ad:b3:dc:be:1d:05:25:a2:be:2c:31:2f:
         77:f4:23:c8:b7:5f:c8:02:21:a7:52:27:8d:ec:a6:aa:13:4d:
         c1:ca:8d:e9:e8:4d:92:80:f0:27:52:84:86:a2:fc:aa:e0:b4:
         87:cf:86:93:1f:a9:da:23:b2:0f:ba:65:48:51:f5:59:c6:2a:
         29:e7:13:e2:08:8b:aa:b5:0d:30:57:4c:12:f5:0c:0b:9a:25:
         96:6d:d2:e9:9e:bb:80:86:21:03:a8:f9:61:b0:1e:04:d1:76:
         6f:d1:17:b8:4c:1f:9d:c5:22:fe:9b:0d:37:e8:a7:8f:dd:6a:
         06:95:c4:f0:07:e6:76:24:ab:a5:be:9c:4d:7f:ab:0f:3e:28:
         19:0b:24:f8:2f:bf:44:89:46:f4:74:90:6e:29:5e:78:66:42:
         cd:2b:dc:fb
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0
RDQ2RkQwMjQwHhcNMjQwNzI0MjMxNDUyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmExOGFlYy04NGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0uMuI2gXiS8BFC+e1oIPRU6Sz1r10TIRm4hqt4r7WgAKHwIkeHXDFk/xfkG
AQ8uUA+qPqq5PLOI+lbiRImaZhh3SrlSxD7kbIJ4qPO3FwdKl4A8bhP+/9xxhhY7
qoJ6HEMOgt5E79LB40XaSbCIbm3a7asTDAkuseCs5gzBnl0X2NrEV+7cXSUeljPL
StqQ/uPHNBWHGJ2tB5JuLEqNRShGn02huqK32t5fenfpQU8QJG3ANKv51OdlXqRI
zdr0KMduT0WIDVh/rp/v4p/BAlMbNNrluDaEqrXRet+q7l1b2A23LuO1laO6Rtj1
JNXFr1AX1ePfII4rdM1u09Q61wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDy3HAHq
KJxVztgut4bp/u8lsjUUMB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0
QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE5MkQvQ0M2N0QyNTJBNEJDMTFFRTlFNUE1RDcyQzRGOUFFMDIvMkMwQ0YxQzA0
QTExMTFFRkI1QzQxNzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAEkMvAwDwQCAAIwCQMHACABDfNSQDANBgkqhkiG9w0BAQsF
AAOCAQEALZCtZeXT+Sarfi4ewxYE8konz80p9MIx0JQQi8qRnOdHob2ER73mTf5w
r4gMV+ALtm55oOdHv7JyGJGd8LRIXkWVH3dfyRgT+RrGXoI4zb/Wtcw71A+TOcGe
czrgsERPrbPcvh0FJaK+LDEvd/QjyLdfyAIhp1InjeymqhNNwcqN6ehNkoDwJ1KE
hqL8quC0h8+Gkx+p2iOyD7plSFH1WcYqKecT4giLqrUNMFdMEvUMC5ollm3S6Z67
gIYhA6j5YbAeBNF2b9EXuEwfncUi/psNN+inj91qBpXE8AfmdiSrpb6cTX+rDz4o
GQsk+C+/RIlG9HSQbileeGZCzSvc+w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:14 2024 by rpki-client on console-ams.rpki-client.org