Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/F2E15D04EB2011EEA69D7D3CC4F9AE02.roa
File:                     F2E15D04EB2011EEA69D7D3CC4F9AE02.roa (raw, json)
Hash identifier:          BnKipIhiv2yThIAvehIAiN0OUr8N16t+fYO2QuqR4kI=
Subject key identifier:   FD:9B:42:F0:C2:60:6F:C0:3F:25:35:61:F9:A8:FC:74:C1:6A:D3:EF
Certificate issuer:       /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial:       95
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/F2E15D04EB2011EEA69D7D3CC4F9AE02.roa
Signing time:             Sat 05 Oct 2024 17:29:37 +0000
ROA not before:           Sat 05 Oct 2024 17:29:37 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     152462
IP address blocks:        157.15.134.0/24 maxlen: 24
                          157.15.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
        Validity
            Not Before: Oct  5 17:29:37 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=67017781-4e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:9e:b0:35:06:d8:cc:31:49:fb:04:29:62:
                    19:39:76:8d:a3:df:de:f5:6e:cf:b2:07:58:73:81:
                    74:59:33:7d:75:ec:ca:6b:fd:9c:ea:ee:0a:b6:74:
                    20:18:c1:b8:76:29:4e:e8:38:28:4c:32:7c:9a:ea:
                    75:65:bc:f2:71:52:dc:7a:88:16:a6:dd:66:2f:af:
                    48:33:be:91:a8:f9:2e:5b:03:ef:17:86:b3:06:23:
                    e3:5b:ad:3e:b7:50:e5:29:db:bd:0e:d5:54:bb:da:
                    85:9f:d3:4b:4a:2f:c2:1f:67:d3:8a:00:a1:61:ba:
                    97:61:4b:d0:a6:aa:14:46:0d:6d:99:a1:0c:f6:43:
                    87:3c:b5:e6:6f:ff:3b:b9:38:c3:ec:2d:af:bc:ad:
                    dd:81:df:91:43:3b:2f:b2:57:32:3e:ed:e3:2b:cb:
                    cf:e7:d1:2b:84:10:bd:2a:96:b4:e1:e0:91:93:e5:
                    20:91:2f:14:76:41:80:03:80:e6:3e:18:d1:48:50:
                    07:9d:c0:07:60:4b:ad:5d:58:78:30:8c:07:2f:90:
                    4d:48:b0:73:f2:44:7d:7a:a0:4b:90:31:74:af:f5:
                    0d:a3:fc:72:1f:5f:60:81:a8:e8:6e:2b:50:8a:2e:
                    4b:24:75:ea:0a:3b:c0:b5:b8:64:04:a4:51:db:97:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9B:42:F0:C2:60:6F:C0:3F:25:35:61:F9:A8:FC:74:C1:6A:D3:EF
            X509v3 Authority Key Identifier:
                keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/F2E15D04EB2011EEA69D7D3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:99:3f:61:b8:54:8e:a5:79:9f:57:95:90:30:e7:2c:f2:9b:
         f6:1b:91:a4:28:16:23:5a:05:03:52:a7:81:ae:60:74:36:7d:
         e1:f5:2f:3d:85:df:79:35:dd:51:a8:c7:9a:9d:15:c9:e8:e9:
         45:67:74:f9:44:16:b5:70:b5:b5:5b:7f:4f:85:ce:51:ed:a1:
         24:fe:d0:07:c8:8a:5b:41:96:6b:de:0b:2a:dc:c9:89:2d:2c:
         30:a4:2a:46:ea:eb:c6:f0:e7:82:44:f7:cc:a2:4e:c9:b9:5b:
         ed:79:44:bf:c4:5e:0a:a5:bc:50:87:a7:a2:a3:fc:20:53:1c:
         46:ec:80:f6:c2:d9:d5:11:bc:c8:d2:76:1f:6c:5d:08:6e:d2:
         08:45:f0:43:1a:13:f4:8c:7d:c6:c4:85:de:ce:5c:41:72:73:
         9d:83:5d:de:41:32:f5:8a:bb:84:17:ab:86:b1:78:bf:ee:35:
         01:17:0e:b0:9b:b3:de:54:e0:7a:b3:35:9d:d6:aa:f8:e6:a9:
         14:a9:48:12:00:6e:10:04:d4:18:d2:53:53:04:02:86:3c:71:
         48:8c:fc:0c:5c:55:92:90:9e:9e:af:60:33:d1:ef:2a:19:8f:
         33:25:d3:09:fa:f7:db:52:3e:6a:4b:d3:e9:82:7b:31:15:93:
         1c:79:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:29 2024 by rpki-client on console-fra.rpki-client.org