Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/E160BBDC495E11EF8EE0647AC4F9AE02.roa
File:                     E160BBDC495E11EF8EE0647AC4F9AE02.roa (raw, json)
Hash identifier:          x7MCciPiMoC21iI94vanFTmv6Gh7il8p9AlIW1ZpCrc=
Subject key identifier:   EA:B4:64:88:FD:E4:9B:6A:84:F2:3B:FF:BD:40:A5:DA:AF:A0:08:47
Certificate issuer:       /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Certificate serial:       02
Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/E160BBDC495E11EF8EE0647AC4F9AE02.roa
Signing time:             Wed 24 Jul 2024 01:48:53 +0000
ROA not before:           Wed 24 Jul 2024 01:48:53 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     152909
IP address blocks:        2001:df3:ebc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 05:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
        Validity
            Not Before: Jul 24 01:48:53 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a05d85-db16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:1f:ee:ac:91:59:40:ce:20:6e:e3:7d:88:
                    87:36:f4:d1:6c:1e:6b:29:7d:3d:3e:fa:47:eb:8c:
                    35:6e:2c:03:d5:52:1a:ab:d0:a6:e7:a5:c1:56:6c:
                    2a:e6:b5:41:08:16:17:72:59:d9:e2:fc:fa:0f:77:
                    07:5b:e8:4f:1a:0d:0d:07:02:bc:3a:8c:e8:c2:73:
                    88:8b:4e:1e:66:eb:f2:f6:85:ce:c3:86:9e:67:b3:
                    f7:a4:15:31:99:49:4e:bd:4d:ae:e1:50:8e:fc:3c:
                    fd:1b:f4:dc:e3:9f:cc:03:28:ef:61:40:24:d5:2a:
                    70:fa:46:84:96:e8:22:81:3a:bc:53:52:54:a1:ff:
                    31:8f:c1:b6:da:21:42:81:bc:82:1c:7e:34:b9:29:
                    a7:c9:99:fd:4e:49:66:6e:59:9e:1d:3e:93:78:40:
                    79:7e:49:12:d7:22:e4:89:93:c3:3b:fc:7d:90:0c:
                    dc:7b:22:18:23:b5:7d:d8:af:5e:eb:03:ee:5f:ba:
                    21:f6:3d:26:fd:76:41:f6:03:0d:2e:c2:28:8e:a7:
                    90:94:75:6c:c2:e1:39:e2:7c:c4:dc:47:25:10:20:
                    d5:ce:de:22:b8:7c:cc:4e:f9:c8:de:e5:af:ab:67:
                    31:4b:17:fb:90:e8:c1:0f:d6:27:48:67:34:2b:79:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B4:64:88:FD:E4:9B:6A:84:F2:3B:FF:BD:40:A5:DA:AF:A0:08:47
            X509v3 Authority Key Identifier:
                keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/E160BBDC495E11EF8EE0647AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:ebc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:f5:48:2f:90:4d:e7:4a:0f:1d:36:cc:c6:3e:72:f2:28:
         65:49:07:30:58:00:03:bf:5e:6b:b3:c7:e2:26:2c:00:5c:17:
         d8:89:24:fd:88:5d:cc:b4:c6:c1:8c:f2:33:fb:61:6d:a9:83:
         d1:0f:77:a8:cd:49:88:cf:43:30:94:8a:d9:cf:a7:ba:33:a7:
         67:6e:eb:ad:db:0b:0c:d6:1c:c6:a6:a3:b8:ff:c8:76:e7:43:
         b6:9d:94:28:14:b9:9f:74:71:2c:12:4a:6c:1f:dd:8a:02:0c:
         14:c2:b7:32:17:08:48:48:f3:5b:37:5f:59:44:d8:cc:cb:7a:
         ad:6f:c3:d0:f8:79:4e:c2:15:55:16:db:d9:a5:b4:26:77:1b:
         f5:7e:5e:4e:20:f5:4f:ea:d5:ef:4e:df:80:04:2c:73:e5:26:
         ef:32:31:f0:c7:44:13:be:6a:e3:b3:f1:5c:c1:15:79:e7:b2:
         4c:1b:68:f7:1f:2e:00:df:81:c7:94:10:6d:6a:25:45:a6:aa:
         9d:2f:4f:06:a7:65:b7:a5:4c:fc:3f:6c:d6:ef:06:2f:28:69:
         88:f0:96:61:3f:f2:fb:27:b5:65:8f:4a:e6:6e:62:9e:05:59:
         40:1e:a8:b0:38:90:c1:89:70:3d:12:2a:f7:da:ad:22:a1:b5:
         9b:29:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:45:49 2024 by rpki-client on console-ams.rpki-client.org