Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/002622285F8F11EF9D02A046C4F9AE02.roa
File:                     002622285F8F11EF9D02A046C4F9AE02.roa (raw, json)
Hash identifier:          1n7jLRYTaVw5u2mwQ6NatrZ/xHlr3ZhbJEnbXC5Rplo=
Subject key identifier:   C2:5A:EA:0D:9B:1C:F3:E3:CE:22:BE:B1:C5:72:BE:06:4F:49:2D:FD
Certificate issuer:       /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Certificate serial:       02
Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/002622285F8F11EF9D02A046C4F9AE02.roa
Signing time:             Wed 21 Aug 2024 07:28:46 +0000
ROA not before:           Wed 21 Aug 2024 07:28:46 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     134216
IP address blocks:        160.30.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl
                          rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
        Validity
            Not Before: Aug 21 07:28:46 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66c5972e-c91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:09:da:46:de:e2:cf:34:59:99:f1:df:f6:
                    b8:74:1a:fa:99:a2:9e:a8:0d:54:67:0b:45:d7:09:
                    87:9a:26:de:97:a9:66:05:dd:6c:25:8e:5d:63:5b:
                    d1:16:d2:ad:99:20:51:43:d3:fd:67:da:ac:26:35:
                    b8:8e:47:7e:58:40:f2:b2:22:86:92:5f:97:de:16:
                    6f:37:1b:68:e5:da:00:8f:94:88:68:c8:1e:e0:84:
                    c0:ab:93:57:ab:98:b7:96:ce:75:1f:b2:25:67:ad:
                    d0:24:51:19:f3:6c:23:86:3c:90:61:50:8f:8b:e3:
                    11:90:2b:b1:86:67:3f:f3:30:71:a4:f4:36:04:40:
                    de:b3:91:f6:fc:a8:c7:22:a9:c9:8d:a6:3f:44:f8:
                    11:cc:c5:f8:3e:70:d0:b1:bc:91:0c:0c:af:f3:88:
                    cc:89:43:ba:93:9b:48:41:c5:0e:c7:3c:da:03:1c:
                    41:aa:b3:b5:19:57:39:97:f5:d9:6b:69:6a:06:45:
                    2e:38:7a:99:9a:c1:74:83:48:4f:7c:1e:42:e2:23:
                    6e:8d:3b:19:4e:03:bc:41:2a:cc:f8:61:a3:02:93:
                    17:37:08:90:11:65:80:b4:e5:ba:41:07:06:01:f8:
                    e1:6e:4a:e6:09:2b:e7:df:e6:80:ae:40:14:9a:30:
                    dc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:EA:0D:9B:1C:F3:E3:CE:22:BE:B1:C5:72:BE:06:4F:49:2D:FD
            X509v3 Authority Key Identifier:
                keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/002622285F8F11EF9D02A046C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:0e:0b:d4:c5:cf:9c:18:8b:e6:03:e5:d4:ab:14:0c:68:bc:
         37:27:0f:8c:a7:a1:1a:97:bf:94:fb:82:ef:59:5a:08:51:80:
         72:7d:46:d2:3e:96:f8:1e:36:9e:7a:a6:c9:70:c2:61:f9:15:
         e8:ea:f6:d4:3f:ba:f5:68:46:6a:76:a3:dc:e7:19:9e:ba:67:
         b0:82:e4:eb:b9:3e:4f:b7:1a:93:43:b1:e1:1d:e8:88:48:66:
         13:fc:c2:05:1e:75:cd:c8:f3:3c:5c:89:c2:9a:94:91:33:bb:
         05:19:ef:20:c6:0a:d4:df:89:15:e1:56:6e:d9:72:cc:1e:a9:
         ca:60:e4:1c:99:c9:c2:03:0d:7c:87:74:22:59:3b:1c:cd:9d:
         60:fd:50:d8:a0:96:08:5f:2e:81:f7:e6:68:36:7f:a5:88:ca:
         28:db:b8:fe:45:d3:32:12:a0:d8:22:f3:c8:c5:80:e2:ba:1f:
         de:1c:ce:0d:53:97:52:8a:26:8f:34:db:7f:b9:f2:7d:b0:60:
         a0:93:33:28:76:1a:5f:be:39:14:81:ae:a8:ca:79:30:75:1b:
         f7:4c:7d:c3:5a:49:dd:dd:46:b4:11:97:2d:12:16:7a:f0:b8:
         3e:ba:be:57:66:9c:b4:02:ce:52:60:08:a0:cd:69:df:ff:a0:
         4c:9a:5d:21
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MjZGRjExMC8GA1UEBRMoQzBERDJDNTU4NTdBOTJGRkU3Q0RDQkEyOTQ5OTgzRDQ4
QTQyQjlEODAeFw0yNDA4MjEwNzI4NDZaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2YzU5NzJlLWM5MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBJwnaRt7izzRZmfHf9rh0GvqZop6oDVRnC0XXCYeaJt6XqWYF3Wwljl1jW9EW
0q2ZIFFD0/1n2qwmNbiOR35YQPKyIoaSX5feFm83G2jl2gCPlIhoyB7ghMCrk1er
mLeWznUfsiVnrdAkURnzbCOGPJBhUI+L4xGQK7GGZz/zMHGk9DYEQN6zkfb8qMci
qcmNpj9E+BHMxfg+cNCxvJEMDK/ziMyJQ7qTm0hBxQ7HPNoDHEGqs7UZVzmX9dlr
aWoGRS44epmawXSDSE98HkLiI26NOxlOA7xBKsz4YaMCkxc3CJARZYC05bpBBwYB
+OFuSuYJK+ff5oCuQBSaMNx7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUwlrqDZsc
8+POIr6xxXK+Bk9JLf0wHwYDVR0jBBgwFoAUwN0sVYV6kv/nzcuilJmD1IpCudgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNkZGLzk0MTA0QjRBNUY4
RTExRUZCMjNFNzk0NUM0RjlBRTAyL3dOMHNWWVY2a3ZfbnpjdWlsSm1EMUlwQ3Vk
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd04wc1ZZVjZrdl9uemN1aWxKbUQxSXBDdWRnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjZGRi85NDEwNEI0QTVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi8wMDI2MjIyODVG
OEYxMUVGOUQwMkEwNDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKAejTANBgkqhkiG9w0BAQsFAAOCAQEAoQ4L1MXPnBiL5gPl
1KsUDGi8NycPjKehGpe/lPuC71laCFGAcn1G0j6W+B42nnqmyXDCYfkV6Or21D+6
9WhGanaj3OcZnrpnsILk67k+T7cak0Ox4R3oiEhmE/zCBR51zcjzPFyJwpqUkTO7
BRnvIMYK1N+JFeFWbtlyzB6pymDkHJnJwgMNfId0Ilk7HM2dYP1Q2KCWCF8ugffm
aDZ/pYjKKNu4/kXTMhKg2CLzyMWA4rof3hzODVOXUoomjzTbf7nyfbBgoJMzKHYa
X745FIGuqMp5MHUb90x9w1pJ3d1GtBGXLRIWevC4Prq+V2actALOUmAIoM1p3/+g
TJpdIQ==
-----END CERTIFICATE-----
Generated at Wed Oct 23 07:45:48 2024 by rpki-client on console-ams.rpki-client.org