Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/4DE56C729CFC11EEAB12747CC4F9AE02.roa
File:                     4DE56C729CFC11EEAB12747CC4F9AE02.roa (raw, json)
Hash identifier:          Vnp7tnBGhQi7Q7pEvr8xwxQ1a8qwZP0wggJu157FyhE=
Subject key identifier:   98:E2:4F:CF:1C:21:9B:A7:93:36:05:EF:61:B5:B3:05:2A:38:D4:CA
Certificate issuer:       /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial:       02
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/4DE56C729CFC11EEAB12747CC4F9AE02.roa
Signing time:             Sun 17 Dec 2023 16:49:55 +0000
ROA not before:           Sun 17 Dec 2023 16:49:55 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     152163
IP address blocks:        36.50.116.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
                          rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
        Validity
            Not Before: Dec 17 16:49:55 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=657f26b3-0c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:f9:5e:7b:69:b9:c4:9c:1a:90:ff:42:0c:
                    7e:57:f6:fe:a0:c0:28:3e:83:4c:67:41:b7:28:84:
                    89:72:de:c1:2f:e3:dd:af:91:78:b2:3b:73:63:89:
                    32:f6:6c:17:36:77:ff:02:18:81:9b:3f:a7:97:86:
                    3d:94:41:d4:9c:3b:aa:59:56:11:c9:3f:74:e6:44:
                    da:fa:04:01:87:14:78:86:a1:20:e1:43:a2:85:c1:
                    55:d6:8e:c6:fa:49:ad:57:78:b0:93:4a:01:b6:83:
                    d0:3f:ac:21:c9:1a:f9:af:7b:84:e5:33:d8:0f:36:
                    8a:2e:3c:a3:7e:f7:4a:0a:ce:31:74:0c:b0:8f:72:
                    06:46:ca:dc:0e:6a:a9:29:f8:a3:6b:7e:5c:3c:57:
                    6d:c3:8b:34:8d:f2:46:0b:a0:f4:58:e5:a1:dd:2c:
                    d7:99:92:88:b8:b6:7b:c8:36:be:6f:62:1f:8b:d9:
                    05:02:54:e5:73:e2:a6:d8:ce:2c:d3:88:7f:0d:07:
                    13:24:1e:90:45:2f:5c:09:7a:1d:0e:dd:03:51:4c:
                    6a:02:ed:a8:04:4b:9c:88:3e:00:8d:fc:9d:a9:8b:
                    5c:df:63:ce:5f:b8:23:bf:66:0c:7f:79:ba:ef:82:
                    6e:41:88:a9:11:16:f2:44:02:7c:b6:d9:fb:3f:f8:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E2:4F:CF:1C:21:9B:A7:93:36:05:EF:61:B5:B3:05:2A:38:D4:CA
            X509v3 Authority Key Identifier:
                keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/4DE56C729CFC11EEAB12747CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:f3:37:08:3b:cb:15:79:3f:60:b3:3e:1e:5c:01:84:db:80:
         89:c0:9b:49:c3:86:76:91:92:d7:c8:2d:93:94:6b:cb:6c:e4:
         5c:d6:8c:c0:22:2b:e9:ff:cc:32:04:b0:e0:32:51:3d:d2:02:
         44:20:be:f8:21:22:2a:ad:f9:dc:ef:16:6a:8e:15:87:ee:c2:
         59:7e:24:69:44:30:9c:f7:7f:88:db:11:10:a6:46:0e:ce:ba:
         28:71:53:6c:a5:19:e1:2e:ef:50:b2:a2:f4:9b:13:0d:3f:11:
         25:8b:82:8f:45:61:ea:57:15:fb:c3:0a:f1:32:3d:87:7a:43:
         5b:db:32:17:6f:0b:1b:e8:f8:07:a8:23:63:bc:9b:1c:c7:3f:
         cd:83:15:f6:db:d0:3f:db:9d:4e:b6:a0:ef:47:4d:4f:c2:9a:
         85:2d:03:ea:03:3c:81:28:e3:cc:d6:f2:ce:83:58:88:83:19:
         77:74:75:16:c2:50:80:07:a8:dc:22:e9:55:95:2b:55:68:ee:
         81:a7:0a:17:46:cf:cb:fb:60:6f:31:0f:17:03:3d:8a:99:98:
         ba:ae:47:f9:94:12:e8:68:a3:6f:04:3d:14:26:45:c4:6f:be:
         b4:b2:24:66:c1:31:88:bb:05:4e:86:7e:27:32:3c:5a:a0:0d:
         6f:b0:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org