Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
File:                     E010D234AC8D11EF93B1CB46C4F9AE02.roa (raw, json)
Hash identifier:          YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=
Subject key identifier:   08:8C:EA:9B:73:A2:D8:31:56:26:0C:4F:6C:32:B2:3E:37:C3:79:1A
Certificate issuer:       /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Certificate serial:       02
Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
Signing time:             Wed 27 Nov 2024 07:04:42 +0000
ROA not before:           Wed 27 Nov 2024 07:04:42 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     206216
IP address blocks:        160.187.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl
                          rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 06:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142420
        Validity
            Not Before: Nov 27 07:04:42 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6746c48a-1785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:83:54:c9:b4:62:22:79:ee:77:e1:8f:61:10:
                    df:4c:30:cd:58:94:85:80:54:aa:01:d1:32:41:c9:
                    fe:d7:57:d1:e6:cb:8d:ed:07:a6:6d:d4:4d:56:11:
                    20:ea:30:a7:68:08:6c:df:99:6c:2d:91:50:cf:1b:
                    de:d7:43:76:b6:a8:e6:e4:d5:17:1c:9d:3c:58:a7:
                    bd:9b:b3:95:a8:aa:6f:49:08:86:e9:f5:78:70:b9:
                    d5:cb:41:b1:f6:96:9b:df:89:44:12:11:e7:a6:61:
                    29:f1:ad:dc:fe:5b:9b:5f:a6:e8:b0:a6:19:de:b4:
                    29:b0:75:09:5b:2f:b0:1b:bd:a1:fa:de:7a:8c:de:
                    07:87:f0:5e:c5:6a:3c:4f:c2:44:96:a1:15:8a:74:
                    ae:26:df:72:b3:5e:e9:33:b7:fd:92:31:7b:47:f8:
                    e5:44:fd:a3:7f:90:7a:b7:9f:3c:6d:28:61:57:45:
                    7e:52:14:1e:38:8b:4d:17:8f:87:4d:c0:dd:cb:d4:
                    3f:54:0a:92:a1:c9:f8:96:15:3c:40:3c:ef:a5:07:
                    1f:fd:eb:c5:82:a1:48:00:07:03:04:1b:cc:c5:ee:
                    42:53:7b:ed:4f:d1:74:a6:29:4f:a5:3a:8e:21:02:
                    8b:f2:ec:23:98:70:8b:a2:86:14:7a:ea:d5:31:4a:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:EA:9B:73:A2:D8:31:56:26:0C:4F:6C:32:B2:3E:37:C3:79:1A
            X509v3 Authority Key Identifier:
                keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:c2:40:c4:dc:18:86:d0:df:31:93:6b:a8:4c:3c:cd:7d:74:
         45:1a:ab:4e:10:56:af:e9:b2:23:2f:f7:33:8b:a6:14:be:de:
         b5:7f:e2:b4:c8:0a:8a:18:41:03:77:0c:ac:94:5c:8e:de:43:
         d8:c1:88:f1:71:d8:bc:ca:c3:2a:10:ad:a8:82:fa:82:0e:4b:
         39:a5:4f:f8:f2:16:87:cf:61:04:10:bc:9e:30:37:b7:a1:d3:
         25:bf:87:c5:63:50:53:75:33:0b:c8:91:ee:f4:c7:a0:4c:30:
         80:7e:b5:df:53:15:54:b2:ae:db:47:19:75:3d:81:b4:45:0a:
         73:3a:3a:23:48:bf:c0:df:74:8e:07:53:bf:0f:8e:5e:40:4b:
         65:29:7b:13:84:c1:52:59:4f:0a:bd:80:a4:67:43:84:1a:87:
         19:65:65:7f:5b:8a:26:fb:1b:11:60:36:cd:d4:9b:b7:9f:f4:
         86:f5:de:6d:48:00:e0:15:4e:7b:e2:d1:36:14:cb:e8:36:e2:
         69:0b:df:ff:3a:7a:13:db:ed:6d:85:45:10:54:8c:39:5d:2f:
         22:5a:dd:81:41:5a:0b:2e:09:6f:84:38:cf:ac:3d:42:71:3a:
         d7:e9:de:7e:de:34:25:de:00:8c:a8:b7:27:5c:3e:0a:2a:92:
         cd:44:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 22:55:46 2025 by rpki-client