Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/50D705A87FA911EBA8C11D63C4F9AE02.roa
File:                     50D705A87FA911EBA8C11D63C4F9AE02.roa (raw, json)
Hash identifier:          ooqccoiogCkkJFxNvgTBDRvRTl072blE1cY1UXNoB0Q=
Subject key identifier:   13:F8:AA:BB:87:58:F2:BB:02:51:A1:AA:87:45:3F:53:2D:7E:0D:FC
Certificate issuer:       /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial:       05BD
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/50D705A87FA911EBA8C11D63C4F9AE02.roa
Signing time:             Mon 15 Apr 2024 00:32:33 +0000
ROA not before:           Mon 15 Apr 2024 00:32:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56183
IP address blocks:        103.7.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
        Validity
            Not Before: Apr 15 00:32:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=661c75a1-117e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:b4:54:e7:42:66:c9:65:10:98:75:ea:9e:
                    71:40:00:10:94:cc:8a:2d:fe:6d:93:29:85:6d:d4:
                    a6:8f:d6:fd:f0:87:dd:56:60:8e:33:e4:7d:37:ce:
                    5b:e6:b2:18:f5:74:4b:0b:af:ef:10:fe:f2:5e:02:
                    fa:69:d7:8f:f5:df:e7:05:c5:91:8a:7e:88:bc:fc:
                    e0:18:f7:00:7c:20:81:0b:1e:8b:5d:d2:80:95:7c:
                    49:64:e0:df:dc:db:a2:4f:2a:7b:e4:1d:b8:49:ff:
                    f8:69:fa:8e:4d:65:a8:d8:46:62:c6:3c:42:b7:d0:
                    91:2f:5b:32:b9:2f:7b:3e:ab:07:c2:37:25:f1:1d:
                    53:8f:d4:e6:8d:14:db:4d:6d:7a:44:19:b6:62:c2:
                    07:ec:c9:eb:c3:d1:ef:ba:d3:27:f2:27:18:27:7b:
                    41:13:2b:ce:4b:e8:47:1e:ed:c1:d7:73:9a:5b:06:
                    a8:61:af:6a:6c:60:80:22:3d:a2:81:38:a1:b1:31:
                    60:45:b5:77:c9:42:10:2c:30:e0:47:11:fd:10:50:
                    05:cf:5d:fd:67:d0:8c:35:68:d5:35:0b:05:94:b3:
                    ac:9b:c8:5d:ae:da:d0:3c:09:d9:0c:b8:02:2f:b6:
                    3c:ad:83:68:5f:3c:fd:6b:54:3f:db:3e:e0:22:67:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F8:AA:BB:87:58:F2:BB:02:51:A1:AA:87:45:3F:53:2D:7E:0D:FC
            X509v3 Authority Key Identifier:
                keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/50D705A87FA911EBA8C11D63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:34:c4:75:b6:8a:da:b9:13:af:9f:43:4b:c6:6c:ec:17:
         e9:94:f9:58:8b:7d:3e:31:0e:1c:83:a6:35:50:4e:3e:58:f4:
         c3:2b:cc:82:d1:97:e9:21:cf:87:eb:a7:57:8e:d0:1b:eb:61:
         64:d5:4a:8e:28:dd:e4:71:b1:8b:00:2c:2e:22:a1:50:11:10:
         03:9e:24:36:90:e8:0d:1e:2e:0d:51:e3:17:7f:b2:96:7f:bb:
         b9:cd:83:60:24:92:36:ca:60:f0:d8:9e:d8:a0:13:e7:b0:02:
         95:26:e4:50:cf:a5:f6:5b:d1:ee:7d:ca:6a:4f:f8:fa:f4:06:
         98:74:e6:74:8b:af:6e:0d:2f:dc:84:dd:8b:c4:17:3e:cd:fc:
         db:a9:81:c6:61:b3:37:cc:29:bd:02:c9:71:20:c9:b8:7a:fc:
         05:47:de:56:f1:d4:f0:58:b9:02:86:65:f8:cc:54:e7:2f:c5:
         a3:45:b3:da:4b:0d:bc:19:0f:47:7e:5f:48:33:f0:01:da:34:
         6f:d7:b8:ca:a6:0d:72:c9:9e:2c:01:0c:5a:dd:60:80:9c:f4:
         f2:93:e9:08:b0:d7:1f:f0:d2:96:dd:75:dc:b7:c9:58:17:e0:
         02:f5:c6:b2:c5:b6:ae:71:95:42:5f:2d:b1:39:15:59:0a:8b:
         32:6d:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org