Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/7BA410DCECB811EC851D8945C4F9AE02.roa
File:                     7BA410DCECB811EC851D8945C4F9AE02.roa (raw, json)
Hash identifier:          a2mCIDVUNsJ5yiuMcDr+/oyni5I65UgnevBCcQRPLgY=
Subject key identifier:   0F:32:1B:E7:C7:F9:01:7B:DD:70:F6:48:C9:15:63:33:CF:8C:10:10
Certificate issuer:       /CN=A915E18D/serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507
Certificate serial:       0202
Authority key identifier: 3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/7BA410DCECB811EC851D8945C4F9AE02.roa
Signing time:             Thu 02 Nov 2023 23:31:34 +0000
ROA not before:           Thu 02 Nov 2023 23:31:34 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     132847
IP address blocks:        207.65.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D/serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507
        Validity
            Not Before: Nov  2 23:31:34 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65443156-ab71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:50:b7:8b:f2:2b:c9:ef:72:a9:a9:20:bf:
                    84:68:98:ab:27:76:9c:c0:eb:94:f9:ea:c6:b8:ad:
                    32:c3:fe:23:db:b3:52:3b:df:53:d8:38:b5:5e:2f:
                    63:36:95:88:1e:33:21:d2:19:7a:f6:e5:83:ed:35:
                    e3:29:87:9f:bc:ea:3d:49:44:af:5f:e0:57:98:62:
                    fb:57:d0:f2:80:ed:34:69:00:dd:76:4d:74:9a:60:
                    a6:30:45:64:75:46:77:32:7d:02:8d:2f:30:9f:e4:
                    b5:d4:fb:76:37:2c:72:6e:9b:aa:58:45:ea:b7:5e:
                    37:c2:f2:fc:a7:f7:53:fd:b3:c4:89:5d:09:1e:e3:
                    ad:14:5d:40:e2:88:9c:82:3c:9c:fe:83:13:97:81:
                    3b:80:f9:0a:32:a6:c2:97:2c:38:00:96:b5:2d:b9:
                    b3:f7:b0:3c:d1:49:39:75:c2:c4:7a:ab:c0:70:d3:
                    80:df:08:1f:42:e3:3e:23:dc:12:9b:96:9d:ad:d1:
                    05:4b:73:af:e3:b8:c0:b2:fb:9f:f8:a6:52:c8:2a:
                    46:6c:72:1a:31:15:ff:48:c1:c5:e4:20:2c:cf:c2:
                    4a:59:4b:39:fe:15:b0:f8:97:6e:ca:96:47:d9:13:
                    8c:88:ea:8e:1f:4b:32:37:c6:82:3c:ec:a6:48:19:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:32:1B:E7:C7:F9:01:7B:DD:70:F6:48:C9:15:63:33:CF:8C:10:10
            X509v3 Authority Key Identifier:
                keyid:3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/7BA410DCECB811EC851D8945C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.65.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:fb:76:ea:26:df:29:7c:68:3b:5d:3f:df:bf:b7:67:a1:
         34:a1:cf:b3:d3:90:0e:41:51:be:bf:72:54:cf:87:39:91:99:
         08:8d:91:14:98:77:d4:c1:dd:0a:27:ec:d7:57:21:11:8d:7b:
         ab:4f:84:ab:14:80:03:ad:b2:92:a4:3d:0a:24:8a:af:9b:ac:
         12:72:83:2b:2d:bb:86:79:b2:89:3c:5f:f3:2a:9c:a6:f0:6e:
         ff:1e:0b:ed:e1:be:58:f0:65:24:d8:2b:21:fe:0e:4e:ee:4d:
         01:36:3f:f3:57:f0:fa:54:9a:d5:8a:06:53:40:45:92:2a:d7:
         19:98:a7:67:c7:39:e1:4b:a0:9e:1d:33:98:00:d6:e9:72:01:
         da:be:f8:92:1b:6b:f4:64:54:45:b2:ed:a8:d2:e9:f1:72:19:
         4f:43:2e:0f:79:ba:12:02:3f:8e:da:5e:0b:00:a2:36:31:9e:
         e3:9e:cd:1d:21:50:6a:4d:d5:50:c9:3d:9f:ad:3a:dc:6d:fa:
         0b:74:a0:80:62:e8:d5:2c:74:78:b5:07:9e:a2:fc:01:37:ca:
         48:08:75:52:d3:97:23:70:c1:fe:19:1c:54:50:69:cb:3d:dc:
         3b:9b:45:9d:1b:92:5e:74:c9:3f:85:2a:a1:a6:9c:95:21:85:
         d5:17:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 01:42:25 2024 by rpki-client on console-ams.rpki-client.org