Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/50992BCE687511ECB6E9CC6FC4F9AE02.roa
File:                     50992BCE687511ECB6E9CC6FC4F9AE02.roa (raw, json)
Hash identifier:          xH/gtf/K2OYvXfp6LAcBNAFvJrBlGudejtBVB9jGHQY=
Subject key identifier:   A2:7E:25:07:67:84:D1:43:3A:A7:B2:43:5E:14:75:CE:E8:3A:CC:58
Certificate issuer:       /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
Certificate serial:       02EB
Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/50992BCE687511ECB6E9CC6FC4F9AE02.roa
Signing time:             Sat 23 Sep 2023 01:43:15 +0000
ROA not before:           Sat 23 Sep 2023 01:43:15 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     9653
IP address blocks:        202.3.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
        Validity
            Not Before: Sep 23 01:43:15 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650e42b3-397e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:05:8f:71:a6:51:29:40:5f:0c:62:49:ce:
                    bf:24:6d:55:7b:e6:d3:ef:74:1c:08:4d:d2:93:10:
                    fa:32:07:ab:f1:35:36:06:cc:f8:62:e5:88:ed:1f:
                    5c:8c:c0:ab:fb:f9:3f:d0:38:86:51:54:9f:8a:1a:
                    76:ca:b9:1c:dd:ad:7b:bd:7e:a7:f8:1c:1d:59:4d:
                    5e:bd:fc:22:13:7d:f3:7c:75:52:2c:ed:bf:59:12:
                    31:c0:c4:d4:61:c9:58:6f:16:c0:3a:0a:e3:d7:f9:
                    fb:7a:9f:76:ce:78:5d:14:d7:c3:e1:12:5f:b6:42:
                    c9:06:d1:2d:f0:55:89:a8:20:26:79:80:60:a5:2f:
                    70:8f:ed:cd:c0:b4:0e:6c:a7:e3:d5:f1:e4:34:92:
                    cb:98:b9:1a:bd:58:6d:e7:6a:aa:e3:0b:87:b8:45:
                    b3:f4:4b:2b:e2:44:01:15:56:33:20:d6:69:14:cc:
                    17:22:02:6c:c8:60:7d:ad:40:76:01:f5:12:d0:78:
                    1e:c7:da:3e:cd:42:0b:2e:45:38:a9:41:80:5d:0b:
                    14:6d:09:bf:e6:0f:c4:dc:fe:8c:ae:55:66:ba:0f:
                    2f:7e:ca:d7:9d:ba:91:70:78:90:18:72:3e:bb:79:
                    8b:01:69:f0:6e:6f:24:95:88:58:ca:5c:62:7e:0a:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7E:25:07:67:84:D1:43:3A:A7:B2:43:5E:14:75:CE:E8:3A:CC:58
            X509v3 Authority Key Identifier:
                keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/50992BCE687511ECB6E9CC6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.3.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:8d:80:2a:ae:65:bc:82:9b:ca:47:10:7a:2c:31:33:71:73:
         92:47:43:f8:bf:6f:04:29:9a:24:86:f5:8e:74:c8:19:ee:d6:
         a8:c5:c0:da:86:42:24:77:7a:d9:94:9b:6e:b9:bc:7d:11:c4:
         72:a7:1c:af:60:62:72:01:fb:68:34:4c:84:d8:5a:00:54:82:
         a5:f2:11:26:36:a4:e1:ae:40:d5:2b:a4:f1:57:5b:db:0d:5c:
         be:2c:23:03:d6:27:5a:09:86:cd:34:5e:4a:43:a2:75:78:57:
         09:de:01:2f:a3:45:14:84:19:30:cb:38:ec:6f:74:88:84:01:
         47:36:2e:db:56:72:10:0d:4b:f1:34:c5:2f:5e:e1:90:bd:43:
         0b:af:ed:0f:47:1c:93:ab:ec:17:e0:de:50:b2:c3:4b:38:e4:
         73:f0:a7:0a:bd:7e:f8:ef:a0:cc:c9:94:94:54:86:d5:68:8e:
         e4:73:07:28:28:40:81:03:28:fd:57:3e:92:f5:02:a7:b1:c0:
         9d:92:b6:f8:fd:e9:21:fb:50:2e:7d:62:66:d7:2d:36:3e:fd:
         a4:ac:74:6a:3d:73:3d:76:b1:88:c3:01:62:32:c3:31:57:99:
         22:b5:b0:1a:9c:7e:85:da:bc:58:36:b8:9d:cf:d8:82:f8:f8:
         d7:58:35:49
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM3NUMxMTAvBgNVBAUTKEE1MzZBNTREQjQxRTQ0MURFNzRDMzNGNkY3MzZDNUFE
N0E2Njg1QzYwHhcNMjMwOTIzMDE0MzE1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBlNDJiMy0zOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rMFj3GmUSlAXwxiSc6/JG1Ve+bT73QcCE3SkxD6Mger8TU2Bsz4YuWI7R9c
jMCr+/k/0DiGUVSfihp2yrkc3a17vX6n+BwdWU1evfwiE33zfHVSLO2/WRIxwMTU
YclYbxbAOgrj1/n7ep92znhdFNfD4RJftkLJBtEt8FWJqCAmeYBgpS9wj+3NwLQO
bKfj1fHkNJLLmLkavVht52qq4wuHuEWz9Esr4kQBFVYzINZpFMwXIgJsyGB9rUB2
AfUS0Hgex9o+zUILLkU4qUGAXQsUbQm/5g/E3P6MrlVmug8vfsrXnbqRcHiQGHI+
u3mLAWnwbm8klYhYylxifgr9GwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKJ+JQdn
hNFDOqeyQ14Udc7oOsxYMB8GA1UdIwQYMBaAFKU2pU20HkQd50wz9vc2xa16ZoXG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzc1Qy9BQ0FDMzlCRTY4
NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJCM25URFAyOXpiRnJYcG1o
Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BUYWxUYlFlUkIzblREUDI5emJGclhwbWhjWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REM3NUMvQUNBQzM5QkU2ODcxMTFFQzhCREIzNDZCQzRGOUFFMDIvNTA5OTJCQ0U2
ODc1MTFFQ0I2RTlDQzZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKA0AwDQYJKoZIhvcNAQELBQADggEBALqNgCquZbyCm8pH
EHosMTNxc5JHQ/i/bwQpmiSG9Y50yBnu1qjFwNqGQiR3etmUm265vH0RxHKnHK9g
YnIB+2g0TITYWgBUgqXyESY2pOGuQNUrpPFXW9sNXL4sIwPWJ1oJhs00XkpDonV4
VwneAS+jRRSEGTDLOOxvdIiEAUc2LttWchANS/E0xS9e4ZC9Qwuv7Q9HHJOr7Bfg
3lCyw0s45HPwpwq9fvjvoMzJlJRUhtVojuRzBygoQIEDKP1XPpL1AqexwJ2Stvj9
6SH7UC59YmbXLTY+/aSsdGo9cz12sYjDAWIywzFXmSK1sBqcfoXavFg2uJ3P2IL4
+NdYNUk=
-----END CERTIFICATE-----
Generated at Fri May 17 03:50:07 2024 by rpki-client on console-fra.rpki-client.org