Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/B2B006BAE3E911EEB845B268C4F9AE02.roa
File:                     B2B006BAE3E911EEB845B268C4F9AE02.roa (raw, json)
Hash identifier:          svtnxhlF5NWmNNObseS7pAI3bZ45udx6YcRU3jyp4kA=
Subject key identifier:   50:B6:A7:7A:05:3D:57:1E:0E:EE:73:E2:7B:D0:5D:19:53:C3:FD:F9
Certificate issuer:       /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Certificate serial:       1B
Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/B2B006BAE3E911EEB845B268C4F9AE02.roa
Signing time:             Sat 16 Mar 2024 23:05:36 +0000
ROA not before:           Sat 16 Mar 2024 23:05:36 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     152473
IP address blocks:        157.15.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
                          rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
        Validity
            Not Before: Mar 16 23:05:36 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f625c0-6dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:8b:a4:1d:c7:c5:9c:99:6a:fd:2b:b6:29:
                    a7:63:f5:23:29:92:4a:99:3b:d7:a1:35:97:f6:26:
                    fc:61:11:57:ae:c6:85:3e:d2:89:3c:ec:e6:82:17:
                    f4:b0:fb:2a:2b:a9:65:e8:00:85:01:50:1d:53:77:
                    63:96:02:76:86:c2:a8:c5:c7:b2:6f:5e:9c:c9:7e:
                    78:5d:11:27:12:7a:27:33:9d:32:7a:91:4f:da:86:
                    4d:e4:30:08:00:dd:3c:b1:5c:06:d8:00:d7:98:92:
                    04:69:cd:d3:c1:df:3a:8c:0f:f3:db:3e:00:e4:18:
                    97:2c:8c:2b:b8:28:80:fb:82:73:a4:d6:1c:dc:51:
                    53:3b:a3:e3:6e:b4:a7:e2:43:6a:72:f5:63:59:58:
                    95:51:09:3e:f7:fb:47:58:c0:06:72:0f:36:34:85:
                    bb:9c:73:8a:24:98:f9:85:4b:b6:c6:df:87:c3:4a:
                    e9:f8:a2:fc:6f:0e:6a:b3:29:66:25:ee:11:fd:01:
                    45:b0:92:e3:18:f6:05:9d:cf:75:08:60:2c:a6:00:
                    d8:6d:cf:a8:86:20:cf:37:25:2a:34:8a:ac:5d:35:
                    59:a2:58:dc:56:6a:4b:76:9e:29:c9:4a:e4:dd:6d:
                    a7:8b:18:59:62:1d:81:0c:c7:31:6f:07:db:95:cf:
                    ab:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B6:A7:7A:05:3D:57:1E:0E:EE:73:E2:7B:D0:5D:19:53:C3:FD:F9
            X509v3 Authority Key Identifier:
                keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/B2B006BAE3E911EEB845B268C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:42:b0:e5:94:43:ee:b8:32:1b:1b:48:c5:ae:24:0d:26:88:
         f6:3d:26:66:ce:4d:0e:5e:42:2f:77:f3:83:f8:d2:36:68:c2:
         a2:50:00:7a:fa:80:d3:07:bd:19:59:2a:37:6f:34:1c:5c:e1:
         68:81:99:ad:e7:1c:da:85:02:75:2f:3d:04:84:37:b9:15:be:
         1c:0b:d4:0c:bf:d0:30:66:98:9d:36:5c:12:37:4b:21:c0:63:
         bb:76:4e:3e:72:52:ce:d6:31:e1:7e:50:68:e0:ec:a6:c9:42:
         56:dd:55:34:3a:aa:7e:30:dd:51:0b:12:ae:79:04:9e:8e:4b:
         f5:88:71:a9:44:b3:c9:fd:e6:0d:e2:ed:a0:5c:3f:71:33:d5:
         07:10:f1:64:cb:82:ee:84:67:fd:a6:5c:ec:21:c8:97:86:a7:
         82:2f:c2:cc:1a:66:5c:7d:e4:14:e0:14:7c:bd:59:19:8e:07:
         c2:a6:7d:04:10:5e:1d:eb:19:f6:8c:04:2f:6d:3f:de:f3:f3:
         a7:2e:a2:28:47:99:05:af:f0:0b:3c:d9:3c:97:8e:f8:bb:31:
         41:cb:a4:34:b0:2c:67:6f:1d:9c:38:9f:fa:14:be:73:e7:d1:
         9e:02:8d:cd:2d:5c:31:70:ae:93:e2:51:af:25:40:91:5a:f5:
         8e:f9:fe:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:01:40 2024 by rpki-client on console-ams.rpki-client.org