Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa
File:                     FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (raw, json)
Hash identifier:          OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=
Subject key identifier:   5F:C1:D6:7B:46:9A:70:7C:14:2B:77:97:26:46:C1:7E:9E:DF:B3:A9
Certificate issuer:       /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial:       04
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa
Signing time:             Wed 06 Nov 2024 04:53:26 +0000
ROA not before:           Wed 06 Nov 2024 04:53:26 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     153393
IP address blocks:        160.191.182.0/24 maxlen: 24
                          160.191.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
        Validity
            Not Before: Nov  6 04:53:26 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=672af646-46b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a8:da:24:dd:27:61:45:4f:2b:c6:36:d9:0c:
                    fd:59:65:08:1f:39:e8:20:8c:64:b7:c2:36:6d:24:
                    31:fb:e2:0a:51:87:cf:d0:6d:95:34:af:f6:73:b6:
                    ae:34:b5:bf:3f:eb:7c:fa:47:9f:a9:71:39:f6:90:
                    e3:e7:45:43:40:b3:e2:c1:c8:78:24:8e:e7:ec:b0:
                    ff:e3:78:83:25:1b:70:08:4e:7f:48:6b:c7:29:06:
                    36:9c:5f:98:63:5c:a7:2b:86:4b:3b:54:4a:e2:09:
                    37:b1:32:0f:74:1f:5d:d0:27:99:c1:f5:3a:6a:57:
                    03:18:5d:0a:ac:44:65:af:32:f4:2b:e5:ef:ee:39:
                    2e:72:48:7c:24:b0:38:1b:04:14:c1:af:d3:9d:74:
                    7d:30:39:26:2b:a1:26:78:bc:8d:14:e7:64:01:9c:
                    6f:02:2b:37:fd:1f:7a:6e:d8:e5:81:56:76:54:65:
                    7d:50:7d:24:e8:a1:ae:d1:78:48:23:5d:fd:ce:d6:
                    8f:99:13:94:5d:6d:36:4c:ac:43:c7:ba:72:fe:56:
                    04:d8:4d:d7:8d:00:3a:f2:4a:d5:20:bd:b9:b6:c4:
                    13:47:8f:d8:ff:4b:33:d7:a4:65:f3:2d:46:01:8b:
                    66:5f:fe:4d:17:1a:2b:dd:9e:d1:84:1a:62:91:7a:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C1:D6:7B:46:9A:70:7C:14:2B:77:97:26:46:C1:7E:9E:DF:B3:A9
            X509v3 Authority Key Identifier:
                keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:a9:15:0b:64:90:00:ff:85:5d:e2:d9:1e:ef:49:f7:ab:9b:
         d7:68:77:d6:45:9d:22:26:10:60:1c:5c:56:4f:dc:51:ea:9c:
         01:d3:9a:66:41:ee:f7:11:bc:c5:74:f9:20:17:f1:a4:3d:32:
         21:ad:87:a0:13:76:7b:66:d7:33:66:3f:d8:bc:24:ba:f6:11:
         34:16:3a:93:53:94:79:8b:04:b4:af:08:07:f2:7b:14:a0:2f:
         25:97:b3:c8:23:63:ae:0d:23:d5:e4:06:fc:24:fb:e6:32:5e:
         96:5e:eb:f9:ab:32:59:8f:72:fe:75:5d:ef:c6:59:ca:2e:86:
         f8:b2:15:12:0d:41:13:d0:c5:73:80:86:d1:bb:70:5c:af:70:
         8f:a0:6c:a7:44:7e:a2:6e:67:4f:c5:1b:70:0d:40:1d:d2:2f:
         69:c3:4e:93:61:2e:da:1d:75:05:9c:d4:3a:33:86:81:1b:8a:
         bf:db:d8:ff:c8:d2:a9:88:23:b6:2c:ed:9e:47:0c:44:d5:bf:
         c6:5b:c9:a4:65:33:d8:f7:47:c4:d1:47:3d:cd:73:cd:38:be:
         f2:19:f3:d3:d1:50:49:86:9d:e2:50:83:06:91:a8:fd:36:40:
         08:19:6a:85:0a:67:a8:91:af:0f:7d:ab:c3:93:e2:ea:b6:59:
         17:5f:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:01 2024 by rpki-client on console-ams.rpki-client.org