Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CC239EAFE3211EE81256247C4F9AE02.roa
File:                     0CC239EAFE3211EE81256247C4F9AE02.roa (raw, json)
Hash identifier:          4qiCmdWmhvAvwEFwGFu9cJoDB9J+R0i6oyA7eByf3hc=
Subject key identifier:   26:EA:C1:C4:A9:4F:93:CF:90:A6:13:22:42:4D:C1:9F:6A:8B:1E:85
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       19EC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CC239EAFE3211EE81256247C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:33 +0000
ROA not before:           Thu 30 May 2024 15:52:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138769
IP address blocks:        157.66.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6636 (0x19ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:52:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0c1-8b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:17:48:60:f2:64:e5:f6:76:d2:e8:50:6d:
                    c7:1b:99:45:c6:f2:01:60:87:a6:aa:5a:d4:85:d3:
                    6c:ca:c8:7f:db:da:d2:b6:eb:89:19:b1:d6:c1:d5:
                    cd:94:80:a4:7f:5f:fe:25:41:1b:2f:59:43:69:d9:
                    26:94:47:39:e3:e9:3f:21:2c:b3:92:54:74:9d:67:
                    d6:38:c1:d9:48:93:b2:58:d5:72:d1:43:e9:78:ab:
                    a7:f3:7f:f6:13:23:55:1d:61:a2:11:a8:c5:11:a7:
                    7b:ea:dd:8b:56:41:0a:5a:cf:b5:aa:7e:11:d3:1d:
                    bf:2b:09:37:fe:ce:da:fa:f4:b8:da:c0:3f:a4:e7:
                    c8:42:4b:21:aa:d0:8d:92:39:b4:cb:cb:b8:03:fe:
                    c6:2b:25:dd:15:89:9f:39:a4:47:fd:aa:98:d6:80:
                    ab:7c:1c:36:c6:98:c2:85:b8:83:ec:9e:59:88:28:
                    1c:7d:2c:28:7a:66:c2:ea:94:86:19:3c:d1:2c:3e:
                    99:9e:86:b2:10:76:bb:ff:25:70:d4:cb:5a:89:87:
                    9a:81:ea:88:29:54:49:c3:58:dd:de:28:91:77:69:
                    28:4f:1f:67:ca:48:2d:4c:0c:63:cf:40:5f:01:f6:
                    df:58:4b:02:ef:8f:4c:b9:d5:c2:07:a0:ab:8e:07:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EA:C1:C4:A9:4F:93:CF:90:A6:13:22:42:4D:C1:9F:6A:8B:1E:85
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CC239EAFE3211EE81256247C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:91:04:34:33:79:7b:45:d3:f3:b0:12:50:de:a8:57:87:84:
         33:1f:09:28:45:a0:6b:bc:71:82:86:75:2e:1d:65:99:be:07:
         7f:c5:1d:89:79:9f:e6:c1:83:fa:d9:9b:1f:07:78:10:76:0e:
         28:08:53:28:a1:a5:81:cd:7e:8c:e0:52:b6:c3:ea:df:55:a0:
         2c:9c:bc:9c:4c:7f:cf:37:28:27:9f:5a:45:77:5f:04:24:67:
         8e:b8:24:7c:b2:7a:a1:09:33:10:2d:8c:e4:7e:37:8d:36:c3:
         76:cc:00:4c:8e:b8:ad:d8:0c:af:0b:92:bb:ce:e2:08:6c:f3:
         90:31:64:4d:85:da:70:d7:c3:2c:10:17:13:01:a7:ba:ff:91:
         a0:e3:d1:48:be:36:48:89:6f:99:b1:ef:70:f0:ac:ce:ff:8a:
         a2:64:57:fb:d0:f9:0a:6f:04:52:01:30:0a:6b:26:91:f5:1e:
         b0:c7:df:91:b6:c5:84:5c:e2:87:9e:ca:38:7a:83:f9:43:7a:
         27:fc:35:ea:65:f0:a1:61:dc:6c:56:be:38:94:ef:30:97:10:
         50:37:d5:e0:24:69:b7:50:5a:6c:f0:50:08:93:54:df:28:0d:
         57:2a:8e:d4:30:de:18:88:11:d8:d5:8b:e3:79:7a:05:4a:7c:
         bb:04:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 02:20:52 2024 by rpki-client on console-fra.rpki-client.org