Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/79124A64AD5F11EE8824985BC4F9AE02.roa
File:                     79124A64AD5F11EE8824985BC4F9AE02.roa (raw, json)
Hash identifier:          B9BQyy3CDZZSMJBX+GCW4rWICLdCrlm/SrcOF/YLMFQ=
Subject key identifier:   CB:A3:8F:EF:1C:B9:19:4F:41:3B:21:90:4F:20:09:9C:B5:8E:2D:E1
Certificate issuer:       /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial:       16
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/79124A64AD5F11EE8824985BC4F9AE02.roa
Signing time:             Sun 07 Jan 2024 13:20:06 +0000
ROA not before:           Sun 07 Jan 2024 13:20:06 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     136765
IP address blocks:        36.50.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
        Validity
            Not Before: Jan  7 13:20:06 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=659aa506-2f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:f6:9c:3f:62:68:67:80:4c:62:54:eb:9d:
                    74:57:af:ec:d6:de:76:75:cb:5e:91:23:41:3f:83:
                    e5:59:9f:4b:3d:4f:a2:04:d9:d9:22:e9:9b:09:6a:
                    9e:0c:b2:c6:89:3a:d8:c2:b2:27:df:47:d4:69:cb:
                    86:ea:71:3f:b8:1d:e0:d3:49:72:64:de:40:66:b6:
                    4e:2e:92:67:d6:9a:f5:79:d4:e6:7a:6d:28:c6:8c:
                    0a:c1:a4:b2:31:67:c2:e7:60:9e:a9:22:ae:eb:8a:
                    52:09:f9:23:d3:b8:4c:e4:23:f6:85:ba:f9:18:f7:
                    fc:1f:4e:74:6c:44:6c:b0:1a:af:45:01:9a:ce:99:
                    51:6b:50:41:f8:74:fd:a4:47:4b:c2:61:4c:3e:d0:
                    95:ee:9f:ea:1b:36:b2:c1:b2:6a:1c:44:aa:c8:1b:
                    db:39:8a:3d:fd:30:55:45:ee:49:67:76:01:04:8f:
                    d7:29:c0:28:f7:33:17:c3:a1:b4:c1:7b:c7:03:ea:
                    ae:ed:7c:b8:e4:70:45:d5:dc:ed:20:54:05:4a:52:
                    b1:02:9f:1f:6f:e1:46:7e:14:85:c5:ce:45:26:a6:
                    66:55:f2:8e:a1:b0:a0:f0:fb:0a:0e:92:a8:31:0a:
                    0f:fb:d5:15:2f:a4:ae:5f:c2:f0:6a:b3:38:63:50:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A3:8F:EF:1C:B9:19:4F:41:3B:21:90:4F:20:09:9C:B5:8E:2D:E1
            X509v3 Authority Key Identifier:
                keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/79124A64AD5F11EE8824985BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:d4:2e:80:c2:c0:cf:3b:2a:c4:38:bb:85:48:d2:16:4d:ec:
         ba:51:5f:67:bf:22:7a:cc:2a:a9:4c:1f:65:67:0e:7d:d7:d3:
         2e:27:6a:b3:2b:36:39:ab:b6:a8:6a:9f:9e:72:6a:45:72:3d:
         62:0f:bf:68:46:dd:14:02:40:88:1a:d0:ac:84:2a:ea:d3:2a:
         6e:f9:80:07:b0:3d:03:f4:f1:16:69:e8:a7:29:f6:80:cd:f7:
         40:ca:6a:01:b0:70:bf:86:0d:c6:e1:93:fd:99:79:5e:a4:44:
         a4:21:a2:65:bd:16:e9:65:6b:ae:c9:29:7d:b6:11:5c:d5:a7:
         9b:60:2f:c1:ef:2e:57:87:ba:b6:7b:9a:26:3c:55:06:40:21:
         16:6c:ad:dd:12:bb:c8:48:5b:46:58:e6:55:94:9a:b7:f7:c0:
         fb:70:09:12:e6:ba:45:79:ae:a0:61:73:9d:8f:62:02:c4:c3:
         e8:65:78:9a:25:b9:35:b4:2d:e2:31:2c:34:21:8b:60:6b:21:
         23:9f:f9:28:10:d4:9b:12:f9:71:e9:75:bc:b6:9c:50:72:06:
         a1:5c:68:fa:09:50:12:4c:2f:c3:7c:d5:04:22:89:77:10:e2:
         99:76:cd:86:18:74:8a:d6:b4:25:25:0f:fc:78:81:99:67:6a:
         ea:a4:b1:cf
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RTk3MjExMC8GA1UEBRMoNUQxODVCNzEyRDkzMDU2QkYyNzRCOEI3QTg5OEM2OTI1
NEVCQjk4MzAeFw0yNDAxMDcxMzIwMDZaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1OWFhNTA2LTJmNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC34vacP2JoZ4BMYlTrnXRXr+zW3nZ1y16RI0E/g+VZn0s9T6IE2dki6ZsJap4M
ssaJOtjCsiffR9Rpy4bqcT+4HeDTSXJk3kBmtk4ukmfWmvV51OZ6bSjGjArBpLIx
Z8LnYJ6pIq7rilIJ+SPTuEzkI/aFuvkY9/wfTnRsRGywGq9FAZrOmVFrUEH4dP2k
R0vCYUw+0JXun+obNrLBsmocRKrIG9s5ij39MFVF7klndgEEj9cpwCj3MxfDobTB
e8cD6q7tfLjkcEXV3O0gVAVKUrECnx9v4UZ+FIXFzkUmpmZV8o6hsKDw+woOkqgx
Cg/71RUvpK5fwvBqszhjUKzTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUy6OP7xy5
GU9BOyGQTyAJnLWOLeEwHwYDVR0jBBgwFoAUXRhbcS2TBWvydLi3qJjGklTruYMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOTcyLzI0NUIzRERDQTNF
NjExRUVBREY5NDg1NUM0RjlBRTAyL1hSaGJjUzJUQld2eWRMaTNxSmpHa2xUcnVZ
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWFJoYmNTMlRCV3Z5ZExpM3FKakdrbFRydVlNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTk3Mi8yNDVCM0REQ0EzRTYxMUVFQURGOTQ4NTVDNEY5QUUwMi83OTEyNEE2NEFE
NUYxMUVFODgyNDk4NUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEACQyxzANBgkqhkiG9w0BAQsFAAOCAQEAstQugMLAzzsqxDi7
hUjSFk3sulFfZ78ieswqqUwfZWcOfdfTLidqsys2Oau2qGqfnnJqRXI9Yg+/aEbd
FAJAiBrQrIQq6tMqbvmAB7A9A/TxFmnopyn2gM33QMpqAbBwv4YNxuGT/Zl5XqRE
pCGiZb0W6WVrrskpfbYRXNWnm2Avwe8uV4e6tnuaJjxVBkAhFmyt3RK7yEhbRljm
VZSat/fA+3AJEua6RXmuoGFznY9iAsTD6GV4miW5NbQt4jEsNCGLYGshI5/5KBDU
mxL5cel1vLacUHIGoVxo+glQEkwvw3zVBCKJdxDimXbNhhh0ita0JSUP/HiBmWdq
6qSxzw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org