Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/81AC362C306711EFAE36037BC4F9AE02.roa
File:                     81AC362C306711EFAE36037BC4F9AE02.roa (raw, json)
Hash identifier:          k7Wbf5CkJyNl+30FmCNnUI9tD15C8SFcoadS7Yc8YWo=
Subject key identifier:   94:1D:4C:94:68:06:15:02:46:D9:C5:95:CB:E9:CD:AA:01:0B:86:33
Certificate issuer:       /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial:       05
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/81AC362C306711EFAE36037BC4F9AE02.roa
Signing time:             Sat 22 Jun 2024 07:17:39 +0000
ROA not before:           Sat 22 Jun 2024 07:17:39 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     45905
IP address blocks:        160.22.150.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
                          rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
        Validity
            Not Before: Jun 22 07:17:39 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66767a92-7fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f1:a7:1c:db:38:48:00:cd:16:fe:06:e5:55:
                    a3:3d:0e:9f:ba:cb:bd:04:29:35:b3:d9:7f:0a:7f:
                    5b:7a:d8:46:63:ac:78:00:b0:39:9b:d1:53:97:ea:
                    e1:1d:d2:3c:8f:ab:52:b7:53:4f:f6:b7:09:2e:f5:
                    91:8f:5b:4f:e4:63:f0:e6:fb:86:f3:3a:cc:2c:e9:
                    ba:c6:53:9c:87:fd:07:81:13:8b:e5:8c:b9:aa:62:
                    02:4d:c8:f1:db:98:eb:90:cc:fd:1c:f7:33:ba:dc:
                    27:bb:79:54:ff:16:af:c6:67:9f:5b:39:d1:43:c7:
                    64:7d:c1:dc:93:86:fd:6c:b2:80:5c:4b:34:ca:be:
                    ad:8f:df:19:e4:78:e9:8c:9a:b9:f8:73:69:3b:9a:
                    e8:19:d0:a5:8e:5e:60:3a:47:b2:86:89:a8:a1:95:
                    65:92:55:66:db:38:9a:7d:43:31:fd:2e:9f:8e:79:
                    ad:84:43:b2:38:05:cd:aa:4e:8c:08:3e:75:5b:ec:
                    a7:fb:c8:09:20:a7:45:77:f7:8e:1b:03:e7:71:b4:
                    f0:2e:e7:43:d1:56:ff:5c:47:80:39:a9:7d:18:72:
                    8c:85:73:10:71:4d:a0:c9:47:27:3c:4f:75:fb:9e:
                    d7:69:17:37:6c:e2:79:56:97:f4:30:6e:2a:39:32:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1D:4C:94:68:06:15:02:46:D9:C5:95:CB:E9:CD:AA:01:0B:86:33
            X509v3 Authority Key Identifier:
                keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/81AC362C306711EFAE36037BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:55:1b:e8:32:5e:0c:58:b8:08:ce:6c:ac:b1:d4:09:64:d3:
         5e:10:80:57:a0:0d:df:88:0a:ef:e9:f4:0d:ce:3c:5f:64:47:
         b7:25:bf:08:ce:7c:1e:7e:59:60:60:22:d9:fb:67:93:f0:20:
         90:96:f1:0f:48:f2:e7:d3:cb:33:99:95:de:f7:bc:24:29:9f:
         f1:c0:39:de:f0:25:b4:d4:68:65:2f:7b:9a:ca:1c:f2:77:c0:
         a9:c2:d6:49:7b:bd:e3:48:3a:b6:3c:d5:2c:b4:8a:a2:65:44:
         dc:0f:a8:42:4a:be:3a:02:a1:2a:a5:c5:17:93:bf:80:20:d8:
         c9:bc:5b:c8:5d:9d:d8:cf:d7:9f:dd:68:bd:46:f3:ff:a9:53:
         84:93:3b:aa:00:0d:92:9a:5e:8d:c3:a3:06:81:85:22:b9:84:
         0c:e3:9e:20:2e:4d:67:4b:eb:12:bb:86:5d:e0:cf:d7:d6:b2:
         38:39:cb:b8:68:bd:24:7a:a9:7b:b2:24:6a:9c:a6:ca:53:96:
         14:34:dd:f9:42:99:30:58:f1:90:51:0b:0e:a4:ec:8e:a3:87:
         42:07:1e:b0:50:1d:e6:3d:cc:a9:5e:f1:27:c3:ee:e9:b3:19:
         34:ba:b2:6e:5d:56:2a:e7:a6:2a:49:51:4c:62:95:7d:55:40:
         c1:9e:37:97
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NDNEQzExMC8GA1UEBRMoRkVBQkFEOTIzNUFFRjE3MDIzQ0RDRkIxNjE5MDI2RjND
RURCMkM3RjAeFw0yNDA2MjIwNzE3MzlaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2NzY3YTkyLTdmYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDc8acc2zhIAM0W/gblVaM9Dp+6y70EKTWz2X8Kf1t62EZjrHgAsDmb0VOX6uEd
0jyPq1K3U0/2twku9ZGPW0/kY/Dm+4bzOsws6brGU5yH/QeBE4vljLmqYgJNyPHb
mOuQzP0c9zO63Ce7eVT/Fq/GZ59bOdFDx2R9wdyThv1ssoBcSzTKvq2P3xnkeOmM
mrn4c2k7mugZ0KWOXmA6R7KGiaihlWWSVWbbOJp9QzH9Lp+Oea2EQ7I4Bc2qTowI
PnVb7Kf7yAkgp0V3944bA+dxtPAu50PRVv9cR4A5qX0YcoyFcxBxTaDJRyc8T3X7
ntdpFzds4nlWl/Qwbio5MhkDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlB1MlGgG
FQJG2cWVy+nNqgELhjMwHwYDVR0jBBgwFoAU/qutkjWu8XAjzc+xYZAm887bLH8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0M0RDLzk3REY3QTEyMzA2
MjExRUY5NzhCNDc2NEM0RjlBRTAyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxI
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvX3F1dGtqV3U4WEFqemMteFlaQW04ODdiTEg4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi84MUFDMzYyQzMw
NjcxMUVGQUUzNjAzN0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaAWljANBgkqhkiG9w0BAQsFAAOCAQEAJ1Ub6DJeDFi4CM5s
rLHUCWTTXhCAV6AN34gK7+n0Dc48X2RHtyW/CM58Hn5ZYGAi2ftnk/AgkJbxD0jy
59PLM5mV3ve8JCmf8cA53vAltNRoZS97msoc8nfAqcLWSXu940g6tjzVLLSKomVE
3A+oQkq+OgKhKqXFF5O/gCDYybxbyF2d2M/Xn91ovUbz/6lThJM7qgANkppejcOj
BoGFIrmEDOOeIC5NZ0vrEruGXeDP19ayODnLuGi9JHqpe7IkapymylOWFDTd+UKZ
MFjxkFELDqTsjqOHQgcesFAd5j3MqV7xJ8Pu6bMZNLqybl1WKuemKklRTGKVfVVA
wZ43lw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org