Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/659B37E4958E11EFAFF1870AC4F9AE02.roa
File:                     659B37E4958E11EFAFF1870AC4F9AE02.roa (raw, json)
Hash identifier:          sw3b7tOsmtcORcb4/1la/iuF/wIik6QnkMPpzRiIQ4w=
Subject key identifier:   7A:45:47:0C:66:FD:D8:E9:0C:7D:F7:2F:F4:DF:F8:E2:F3:A4:3D:20
Certificate issuer:       /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Certificate serial:       4D
Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/659B37E4958E11EFAFF1870AC4F9AE02.roa
Signing time:             Tue 29 Oct 2024 00:40:29 +0000
ROA not before:           Tue 29 Oct 2024 00:40:29 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        160.187.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
        Validity
            Not Before: Oct 29 00:40:29 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=67202efd-544d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:99:45:71:e7:96:2e:ec:6d:8d:28:1e:02:
                    56:fe:8b:ce:53:d5:76:61:14:f6:22:c5:a1:c5:eb:
                    d6:83:e9:14:55:d0:2d:bf:e6:23:82:af:61:68:12:
                    f7:93:a5:6c:9a:d0:59:7f:17:96:27:f4:bf:7c:31:
                    bf:67:64:5b:b3:6d:80:65:f0:db:1e:2d:96:f3:1d:
                    35:d8:f6:b1:d4:e1:f6:be:be:c6:16:c6:ea:cd:b6:
                    98:64:88:0e:a2:d6:2f:6c:67:ac:89:13:53:ce:92:
                    0f:d7:3e:11:7c:34:28:a0:a0:95:4d:58:b9:9c:77:
                    43:06:7d:3b:89:fb:c9:12:99:34:bb:73:53:b2:84:
                    49:db:24:a0:26:a3:03:d4:a4:90:4a:45:c1:61:2e:
                    13:ec:a2:af:4d:16:75:3a:0a:c7:76:7a:50:1f:c3:
                    77:a6:68:c6:e5:4d:10:1e:0e:88:96:29:70:5d:16:
                    48:95:c9:e0:2b:3d:fd:08:0f:9c:96:4a:31:f6:66:
                    12:98:7a:a0:38:c3:04:d1:68:08:8f:8b:73:98:2a:
                    23:05:63:3b:f3:c5:70:2a:fe:08:77:36:74:d1:b0:
                    f0:44:5c:b1:f2:2b:40:e4:3e:fe:b7:5e:a6:be:f6:
                    d5:6d:6c:24:c3:be:7e:f1:3b:22:73:b1:49:2b:d4:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:45:47:0C:66:FD:D8:E9:0C:7D:F7:2F:F4:DF:F8:E2:F3:A4:3D:20
            X509v3 Authority Key Identifier:
                keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/659B37E4958E11EFAFF1870AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:ab:6c:85:4f:70:5d:fd:af:e9:53:b6:8f:08:ce:9f:25:
         96:f5:5b:ed:7d:0e:35:5e:46:69:86:5c:b4:1f:56:0d:54:57:
         44:b5:b5:4d:7e:fb:b4:1a:56:3f:29:5c:c8:fe:7e:8e:7f:34:
         9a:30:f8:61:d9:82:9b:c3:0c:0e:79:13:57:73:d6:9e:a4:f0:
         25:a6:79:2a:65:b7:c8:38:3c:93:a7:7e:d4:73:75:3a:e1:5b:
         df:67:8c:f0:8e:01:6c:02:fa:ad:5d:23:8c:1b:ce:fa:0b:e6:
         8b:d3:3b:fb:09:4d:01:66:4b:96:b7:de:ad:d1:f4:86:fc:c0:
         f5:ba:f5:65:4f:7d:72:69:35:d2:80:3f:f9:36:ad:b2:07:91:
         85:63:d0:af:01:9e:bc:5a:49:1a:45:c3:ff:e4:f0:2a:f6:a7:
         5a:82:41:13:70:4e:dd:6c:60:7d:c9:08:13:32:de:ed:e1:34:
         bc:2c:7c:c2:69:44:31:f7:35:6d:3e:94:dd:1a:86:9f:24:16:
         0d:ba:10:b5:d4:52:4a:be:e8:1d:b7:da:03:78:d7:78:a4:ac:
         3b:5a:96:b8:97:30:9b:54:c1:65:71:4e:5c:c9:f3:ea:41:51:
         44:c5:cd:f1:a0:da:52:73:0a:a6:c2:69:55:91:7d:c7:e2:f4:
         83:cd:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org