Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/52EADE54935111EF98AA8C86C4F9AE02.roa
File:                     52EADE54935111EF98AA8C86C4F9AE02.roa (raw, json)
Hash identifier:          0fdxeAEBe9WDBbNHH1E08sqfA2VEHdavddZ4/AMBK2M=
Subject key identifier:   D8:55:B1:31:26:CC:15:87:1F:25:AF:F8:2C:89:B2:19:45:0D:F1:B7
Certificate issuer:       /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Certificate serial:       03
Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/52EADE54935111EF98AA8C86C4F9AE02.roa
Signing time:             Sat 26 Oct 2024 04:18:16 +0000
ROA not before:           Sat 26 Oct 2024 04:18:16 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     140323
IP address blocks:        160.30.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl
                          rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
        Validity
            Not Before: Oct 26 04:18:16 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=671c6d88-04e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:d7:99:97:5e:63:eb:45:32:a6:9f:35:1d:
                    5a:6f:ca:bb:80:d2:0c:d8:aa:53:b2:e7:63:cd:0f:
                    e4:d4:87:c9:2d:27:9b:84:90:ac:e5:84:6d:b4:55:
                    00:39:1e:0c:bc:a3:17:62:79:fc:98:a6:f1:1f:51:
                    1f:f2:c5:f8:03:1b:12:c7:22:29:fe:c7:ec:37:4d:
                    f3:32:30:c5:4e:ca:b8:88:e4:8e:b1:70:1e:ec:f9:
                    63:0c:1c:75:9d:23:44:17:74:ba:30:7b:92:16:0f:
                    33:6b:25:af:ac:a7:4b:0a:be:20:32:c0:21:c8:26:
                    0c:e2:38:87:32:43:90:d5:c3:54:85:19:66:0c:d1:
                    07:4b:5f:76:8b:4f:52:6d:85:6a:4b:6d:3b:4a:ef:
                    a2:cb:e6:9c:44:d9:44:ef:ad:46:12:92:5b:ad:d8:
                    e2:d4:33:84:6a:07:7e:4b:b5:a5:81:fc:8d:80:90:
                    c5:4e:54:25:33:1d:8d:0c:1a:51:37:9e:8f:e0:95:
                    9c:11:27:f8:f5:fb:b1:58:10:b6:00:6b:4f:8d:ab:
                    67:a9:ba:aa:c6:17:f8:ef:ef:44:08:f1:a0:b4:0b:
                    b6:21:58:01:a6:7d:27:44:80:ca:54:8d:55:ff:db:
                    87:3c:2c:d8:2e:d8:cb:c2:52:51:f5:7a:95:d4:08:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:55:B1:31:26:CC:15:87:1F:25:AF:F8:2C:89:B2:19:45:0D:F1:B7
            X509v3 Authority Key Identifier:
                keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/52EADE54935111EF98AA8C86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:ad:11:2c:43:22:7e:1a:6e:50:9c:9d:be:4a:12:c1:06:40:
         12:57:43:ab:4b:13:7c:b4:3c:77:9b:c6:fe:d0:a5:5b:1d:4a:
         cf:34:7c:78:fb:0e:50:47:6e:6f:ee:08:9f:58:0a:a2:00:a3:
         38:4c:92:f0:e6:f4:7f:ff:d1:c0:3c:ad:a5:99:22:53:70:fc:
         ca:ef:9c:a1:f8:5c:c9:ee:df:70:f0:6f:f6:88:c5:29:1a:22:
         c8:32:b0:fd:a4:13:d0:56:de:5a:1e:88:e6:78:e9:9e:d8:17:
         a0:cd:dc:b5:d0:dd:8f:34:f0:b9:10:34:e1:6c:15:ba:39:b1:
         87:d0:d8:d6:55:f9:58:23:ed:e1:0c:83:f2:3d:3d:6f:cf:52:
         52:05:5a:ed:48:df:3c:2d:2c:27:92:02:a7:d3:c1:90:49:41:
         8b:97:b0:31:a0:e0:45:59:9d:b3:f6:8e:17:4d:93:05:b9:94:
         51:26:d0:f5:da:57:a6:13:27:f5:d1:5c:4d:db:bf:13:37:63:
         a7:82:9d:91:49:15:0d:c2:d4:07:a7:d8:57:25:fe:ab:f4:05:
         ca:a3:b1:5a:8d:9e:c5:ac:57:9c:8e:2a:21:a8:3d:89:06:9b:
         08:8b:f4:5d:92:4f:b2:7b:5b:63:86:59:04:a2:a1:6f:17:eb:
         68:f0:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org