Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/A91F7E90A44711EF9769564FC4F9AE02.roa
File:                     A91F7E90A44711EF9769564FC4F9AE02.roa (raw, json)
Hash identifier:          cub1I8YYKhHobRxvV7zxolcchqnJ/A+uJu9AWQbVCq0=
Subject key identifier:   88:10:65:31:43:99:F0:3D:0A:8F:7F:4A:6B:91:45:66:CC:28:C2:07
Certificate issuer:       /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Certificate serial:       02
Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/A91F7E90A44711EF9769564FC4F9AE02.roa
Signing time:             Sat 16 Nov 2024 18:21:56 +0000
ROA not before:           Sat 16 Nov 2024 18:21:56 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     147181
IP address blocks:        160.191.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
        Validity
            Not Before: Nov 16 18:21:56 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6738e2c4-cd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:ae:67:4b:5e:f9:4b:9e:aa:a3:9d:08:28:
                    38:ba:9e:9e:cc:0e:0a:24:0a:85:53:e8:bf:57:3a:
                    8b:86:e9:8d:ba:d1:2c:4a:a1:f0:a9:35:46:66:04:
                    6a:24:a2:0c:b1:68:3f:be:19:ea:a0:dc:fd:5e:51:
                    00:ea:c9:71:f3:36:64:f8:7e:70:0b:d2:26:df:59:
                    10:ac:19:93:36:af:26:12:64:e0:45:7d:2e:3c:12:
                    52:7c:01:49:c9:5c:5f:bb:bc:d8:44:aa:44:84:f0:
                    64:dc:e5:b0:a0:ce:8e:6a:9c:d1:a6:fa:f1:df:7c:
                    43:2c:51:f3:36:a9:57:0d:d3:ec:f9:e7:0f:3c:43:
                    b0:7a:26:0c:5b:fa:2b:f1:8b:b7:76:f2:0f:79:38:
                    fe:2f:1c:33:b0:35:e0:87:c9:62:1f:72:c1:86:fe:
                    8e:f2:e8:a1:b4:84:5c:8b:31:fd:c5:ef:31:47:59:
                    6b:74:ba:41:74:a5:aa:9b:17:cd:d1:de:d6:94:59:
                    0b:15:8c:6c:ce:4e:94:04:7d:90:5d:68:fd:fa:bd:
                    8b:20:a0:43:69:99:70:c6:f9:9b:39:d2:bf:86:d0:
                    bd:f2:5d:a6:fe:a1:4e:58:ea:0f:06:23:41:33:31:
                    d3:fa:3d:20:23:d7:ce:42:7a:14:ba:f6:2c:c2:ff:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:10:65:31:43:99:F0:3D:0A:8F:7F:4A:6B:91:45:66:CC:28:C2:07
            X509v3 Authority Key Identifier:
                keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/A91F7E90A44711EF9769564FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:75:32:3d:5d:89:bf:16:86:43:38:83:19:a3:b3:89:8c:0d:
         50:81:8c:c3:ac:20:7b:51:cd:51:c1:3f:8f:eb:22:20:6c:9e:
         73:14:38:29:84:83:44:8e:b4:f7:34:e0:da:96:81:67:8f:55:
         16:fb:9b:57:67:2d:b3:89:cb:b3:84:a0:98:00:ed:63:81:b2:
         2a:f1:de:06:2c:e4:ba:9a:49:b9:52:31:9e:f6:89:e7:45:f6:
         cd:cb:84:8f:fb:cd:c4:f7:2e:dd:bf:75:7f:e2:14:ab:b1:0e:
         da:47:c2:b0:dd:25:56:a8:09:64:e1:be:be:b3:15:f8:87:e8:
         64:94:ee:b6:b1:7f:c4:ef:e7:db:41:ac:1e:fb:18:a8:05:7f:
         82:31:19:06:40:37:a1:57:69:51:5e:40:60:1f:2d:bd:e3:de:
         0e:d3:44:9f:ce:d5:61:8f:8a:97:c6:11:ac:dc:74:87:c1:18:
         62:71:fe:3c:31:35:15:97:b8:59:07:39:4c:60:fb:7f:a0:fc:
         f0:22:1a:a9:b7:2a:dc:95:ec:81:67:3e:82:56:ac:1b:94:48:
         3b:be:11:de:60:5e:44:cf:69:9d:27:34:58:be:34:f8:08:a2:
         10:e5:17:0b:5c:fa:e8:17:54:c5:f3:f3:ed:14:1c:90:a3:27:
         66:c9:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org