Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/3590B0F65B9B11EFB90EBF42C4F9AE02.roa
File:                     3590B0F65B9B11EFB90EBF42C4F9AE02.roa (raw, json)
Hash identifier:          969jdHyGdAb1flnXmcu6oMyF0jGTp5cUzC4c61xE+18=
Subject key identifier:   CC:0E:8D:87:64:C4:7E:61:3D:8E:42:9E:29:A3:16:B3:53:5F:24:23
Certificate issuer:       /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial:       17
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/3590B0F65B9B11EFB90EBF42C4F9AE02.roa
Signing time:             Tue 10 Sep 2024 00:35:15 +0000
ROA not before:           Tue 10 Sep 2024 00:35:15 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     153197
IP address blocks:        160.30.95.0/24 maxlen: 24
                          160.187.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
        Validity
            Not Before: Sep 10 00:35:15 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66df9442-fd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:ab:c8:4b:65:df:dc:35:b4:ea:2d:47:ae:
                    6d:06:51:5d:d9:e7:ea:70:09:18:b6:da:f2:4a:8d:
                    a9:07:52:f4:ee:46:66:0f:d2:c8:68:b2:cc:36:4a:
                    9f:8b:47:00:51:de:a7:08:7e:0a:07:0f:14:ac:98:
                    04:9a:aa:9b:bb:2f:01:7f:83:40:29:3f:e8:a1:9e:
                    2d:01:28:31:19:0a:44:f8:37:c3:37:81:72:5e:83:
                    40:ae:bd:0a:46:69:a7:de:86:c8:46:36:f2:71:54:
                    2c:7f:e7:50:50:a4:f1:b3:57:dc:57:e2:3d:27:70:
                    37:bb:b1:b1:a9:7a:37:a8:55:6c:c9:31:70:e0:4a:
                    2e:78:6e:c0:0d:86:e6:b1:3d:30:1f:a7:63:30:0d:
                    7d:17:ed:da:e4:23:c0:a1:cd:50:46:c1:b9:43:41:
                    4a:6f:1c:0f:1e:f1:3e:65:53:48:20:ac:6c:6f:9c:
                    48:38:90:bf:45:47:5f:e0:ef:e2:e6:36:18:80:57:
                    85:03:12:ac:9c:95:37:28:cb:df:cf:4e:2f:a0:94:
                    15:eb:18:6f:62:36:86:09:f8:c4:88:9d:fa:40:cc:
                    de:44:fc:95:77:f0:69:cc:fb:91:bc:e1:e4:9d:b2:
                    9f:9b:6c:7e:e2:9d:f4:93:3a:01:59:91:f5:26:e2:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0E:8D:87:64:C4:7E:61:3D:8E:42:9E:29:A3:16:B3:53:5F:24:23
            X509v3 Authority Key Identifier:
                keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/3590B0F65B9B11EFB90EBF42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.95.0/24
                  160.187.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:63:0f:19:4d:dd:c8:b6:21:a5:35:a0:6e:c1:10:43:76:9a:
         78:38:c0:47:2c:12:0e:79:a2:1b:95:c1:4d:2d:b4:85:5e:5d:
         0f:d5:97:bc:b0:22:91:4e:5f:af:e3:d7:6a:a3:7b:ba:71:20:
         70:4f:74:bc:b8:e7:df:90:ee:72:23:86:40:4d:5a:7c:61:e6:
         25:03:48:16:55:d7:9b:47:f5:f9:49:f1:0d:86:10:01:2f:87:
         aa:9d:4f:e1:bc:0d:26:fe:78:84:96:f2:10:6b:9e:cc:e4:ac:
         51:90:6f:b7:04:bf:d0:e3:94:70:26:5b:82:77:a0:b8:dc:23:
         e3:a4:eb:5b:a5:b4:de:43:73:38:5b:b4:5b:2a:68:13:fe:2d:
         48:f1:45:8f:ce:36:15:99:05:5b:6e:24:a0:1a:b0:b3:10:51:
         8e:c4:a2:dd:2f:71:c5:34:a4:1f:bc:33:2f:2e:f1:31:99:88:
         8e:e8:03:63:43:e9:bc:7f:e4:dd:ac:f7:8d:58:34:73:c5:35:
         cc:5d:c9:33:01:cb:ec:81:f0:65:11:9f:4e:e8:eb:64:4b:dd:
         70:80:cd:ca:ce:90:60:e2:51:c9:79:a8:6c:19:47:71:92:4d:
         5f:00:38:3c:4b:b9:07:9e:fe:ff:be:a3:b0:98:10:73:3b:d0:
         50:ba:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:45:48 2024 by rpki-client on console-ams.rpki-client.org