Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/060F7718074A11EFA1093E85C4F9AE02.roa
File:                     060F7718074A11EFA1093E85C4F9AE02.roa (raw, json)
Hash identifier:          cb1EPhkHJOzS9xUOUx71+Yw90w5i0ub1Gp2GX0RjukY=
Subject key identifier:   BB:F9:A4:1C:AB:71:A0:A4:6A:07:E2:53:32:3C:D1:D2:69:63:D1:25
Certificate issuer:       /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial:       50
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/060F7718074A11EFA1093E85C4F9AE02.roa
Signing time:             Tue 30 Apr 2024 23:33:19 +0000
ROA not before:           Tue 30 Apr 2024 23:33:19 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150750
IP address blocks:        113.192.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
                          rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 07:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
        Validity
            Not Before: Apr 30 23:33:19 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66317fbe-6a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:33:a8:53:a5:6a:9d:c3:0c:59:a2:11:8b:
                    1a:e8:15:f9:9b:fe:08:10:27:3b:38:26:f4:6a:58:
                    e6:5a:05:d5:4f:fc:6f:18:61:12:d2:61:7d:aa:3a:
                    47:0b:f8:59:87:94:65:fc:cc:e9:da:73:93:7b:18:
                    a3:e3:08:6c:b0:95:27:8d:a7:41:b6:ad:0c:c7:1a:
                    3c:04:c7:e3:d1:1f:df:d6:51:64:08:ee:cf:ac:7f:
                    27:fe:28:99:df:11:16:fe:d3:d0:2a:81:75:cc:7c:
                    ee:4a:66:2f:0e:d9:ea:fc:84:50:de:dd:37:a2:5c:
                    18:af:df:2f:9d:38:ed:45:41:f8:d8:5e:7c:3c:65:
                    9a:f8:7e:74:ed:dc:db:52:25:a3:a2:bb:31:29:f8:
                    f8:fb:31:16:f0:b4:c8:95:38:a2:98:64:1c:04:f0:
                    1a:e0:98:d7:67:19:77:69:62:74:ad:87:80:f3:f5:
                    19:ca:af:ad:34:94:80:ea:63:82:ea:0e:0a:d8:47:
                    e1:3e:36:d8:bc:55:db:a5:8a:9b:84:cf:77:90:1b:
                    61:c0:50:ae:ef:be:17:1a:30:12:67:d9:49:48:6f:
                    1b:23:5b:c9:c9:e6:4c:32:07:ef:ce:74:5c:b4:7c:
                    48:3c:32:73:0f:1f:f4:8c:98:d5:9f:22:1e:f1:1d:
                    ce:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F9:A4:1C:AB:71:A0:A4:6A:07:E2:53:32:3C:D1:D2:69:63:D1:25
            X509v3 Authority Key Identifier:
                keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/060F7718074A11EFA1093E85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:1a:c3:90:20:67:1c:d7:61:4a:02:2a:20:f3:d4:c5:b7:11:
         ad:98:24:25:c0:94:c0:a8:be:88:29:cf:e5:ed:ce:df:ee:ae:
         ea:80:b5:c3:f5:d1:d4:fd:da:71:9a:eb:ae:4a:2c:f1:25:de:
         5f:7d:b6:8f:de:2f:68:5d:ef:5e:8a:56:1a:e1:60:6a:a3:52:
         62:89:08:01:81:a6:d1:92:5d:64:2d:73:6f:f7:e6:25:2a:bc:
         ea:77:e2:7a:7b:cb:aa:25:44:77:da:fb:f3:d4:23:a4:b9:2e:
         f8:a3:76:8b:23:2a:e1:c8:41:78:30:97:18:3b:ee:79:38:5b:
         cf:e9:5f:50:c9:71:e7:a5:a6:25:f8:6f:4a:60:6a:6e:14:49:
         fd:81:e4:02:f9:e3:1d:4b:ff:d4:5f:cc:ca:92:23:be:15:14:
         52:19:07:bd:10:25:f9:33:f0:30:4a:ee:9c:a8:3c:5a:47:28:
         a3:80:e3:8e:a0:51:84:ff:46:96:15:1c:05:df:72:b6:71:c4:
         f1:e9:63:b9:d3:ae:d9:e6:4b:e8:54:02:63:33:ec:62:2b:bd:
         81:1b:1f:76:61:de:eb:48:c7:c9:7c:69:91:ed:e2:45:fe:aa:
         ae:a8:6a:16:ad:ab:6d:3d:90:ec:71:b4:da:c8:e2:b1:2e:66:
         fb:21:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:10:53 2024 by rpki-client on console-fra.rpki-client.org