Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/FB729544B57F11EF8BDF3346C4F9AE02.roa
File:                     FB729544B57F11EF8BDF3346C4F9AE02.roa (raw, json)
Hash identifier:          wnr7gdAIv5Jdc15Z3sjp6boqd+eAUfOZ3eJD4U6UCSM=
Subject key identifier:   CB:E5:8E:41:EF:BE:84:63:C0:C0:43:A8:1F:E0:B4:48:79:77:0F:78
Certificate issuer:       /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial:       06
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/FB729544B57F11EF8BDF3346C4F9AE02.roa
Signing time:             Sun 08 Dec 2024 16:17:56 +0000
ROA not before:           Sun 08 Dec 2024 16:17:55 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     153325
IP address blocks:        160.250.162.0/24 maxlen: 24
                          160.250.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
                          rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Jan 2025 05:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
        Validity
            Not Before: Dec  8 16:17:55 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6755c6b3-1d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:76:50:57:4b:e7:e0:cb:5d:be:40:82:20:05:
                    4e:a8:e9:e3:8d:e1:26:35:d3:ce:b8:55:3f:cf:d6:
                    58:f8:12:3a:50:b1:a8:88:fc:49:f6:7d:c1:9c:72:
                    f8:3e:0d:0b:79:1a:1c:be:cf:84:bf:1c:48:ce:70:
                    41:31:ee:10:77:4d:c3:00:46:a8:4b:1c:34:94:2c:
                    f6:fa:3e:d6:00:9f:df:0e:d9:91:99:9e:ee:7c:c7:
                    7e:19:c6:c7:2c:1a:23:69:b4:4b:b4:c7:19:92:6c:
                    21:40:fe:9e:b9:f5:e8:bd:53:ff:8d:21:83:f1:bd:
                    a6:28:c7:af:59:7f:bb:f9:91:95:a8:f5:07:7d:ce:
                    13:3e:54:85:55:48:3e:15:3e:c6:bc:9b:83:bf:ba:
                    6a:17:57:c2:af:17:f2:0b:de:ba:d5:e8:0e:8a:2f:
                    72:a1:cf:8c:7b:16:fa:61:e5:5e:5d:57:97:d0:d8:
                    55:b4:ed:36:ed:07:64:03:ae:0a:21:47:23:86:d5:
                    17:bd:1c:8a:a1:24:f5:06:63:37:8f:5d:7e:f0:a6:
                    d1:26:9a:ab:93:03:11:48:7c:6a:5d:b5:6b:0c:0c:
                    af:33:a6:44:e6:2a:a9:28:3e:e9:5f:04:15:92:ef:
                    24:81:9d:f4:b5:07:7b:f0:ca:87:f6:76:43:50:02:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E5:8E:41:EF:BE:84:63:C0:C0:43:A8:1F:E0:B4:48:79:77:0F:78
            X509v3 Authority Key Identifier:
                keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/FB729544B57F11EF8BDF3346C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:b4:1a:d9:3c:42:35:4e:17:dc:38:0f:23:0a:ea:55:c9:9d:
         2e:b2:34:d3:98:da:c9:fc:f6:00:23:a5:b0:b8:8c:bb:4e:d4:
         60:75:7b:47:03:4c:4f:3f:ad:0a:56:14:90:99:ba:78:e2:9a:
         83:3d:f0:a9:72:ee:9d:c0:8b:4a:74:dc:6b:e5:da:e1:a3:0c:
         53:1a:c5:24:42:08:cc:25:8e:f8:de:2e:37:a4:0f:cf:ae:5a:
         13:a9:ac:7a:4e:cb:58:15:9c:d9:a4:0f:a5:b0:85:31:b5:11:
         9a:cb:8c:39:d9:d6:2e:81:9d:a4:64:88:45:8c:58:ce:84:9f:
         1d:07:c1:3e:f8:de:fe:fd:94:1f:e0:96:51:ac:7e:dd:4d:75:
         0e:7e:8b:39:3a:36:a9:f1:50:05:40:83:77:0b:5e:65:06:2e:
         4d:74:cd:43:24:1f:f0:eb:7e:53:6d:ee:0e:72:1f:65:9c:60:
         f9:53:6f:8b:ff:e4:a9:84:8b:34:41:1f:32:1b:23:51:60:07:
         31:a3:1d:33:8d:46:e2:96:37:0c:27:63:03:50:d3:f8:fb:5a:
         db:f3:e6:c8:e1:ff:78:6b:bd:3f:d4:9e:5a:93:2d:2d:b9:62:
         4a:e9:03:64:f4:86:15:ac:2d:12:43:89:af:be:27:c5:1b:d4:
         96:3d:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 07:43:19 2024 by rpki-client on console-ams.rpki-client.org