Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/900F4ADA440611EF85166C30C4F9AE02.roa
File:                     900F4ADA440611EF85166C30C4F9AE02.roa (raw, json)
Hash identifier:          jYgy4yMQyKQf5VxNbJ2NKQFUgnsZsFyOqLwxVUIrb0I=
Subject key identifier:   07:EA:F0:D8:7B:4A:25:F2:D2:3F:0A:FA:EC:AF:47:8C:E4:20:43:D2
Certificate issuer:       /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial:       44
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/900F4ADA440611EF85166C30C4F9AE02.roa
Signing time:             Tue 05 Nov 2024 04:57:52 +0000
ROA not before:           Tue 05 Nov 2024 04:57:52 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     152742
IP address blocks:        160.25.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
        Validity
            Not Before: Nov  5 04:57:52 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6729a5cf-1c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:7c:10:9e:c2:e4:66:a7:55:db:68:2d:e1:
                    44:63:5f:39:c2:63:0c:52:bd:15:ae:f8:d7:5b:dc:
                    4f:98:d6:62:cc:1f:2c:f6:4c:30:10:e6:ba:cf:e3:
                    39:f8:fa:d5:52:be:6a:d9:c9:52:17:f3:de:b5:29:
                    75:fd:66:eb:9a:84:5f:92:b6:47:a9:b6:33:ab:0c:
                    a0:05:09:4a:4a:d4:5a:0f:dd:cd:06:ad:0d:bc:d7:
                    61:12:ac:cc:83:54:c1:7d:60:59:52:a3:04:be:b4:
                    80:b4:b3:2b:cb:60:ee:c3:aa:f6:8b:59:1a:89:6c:
                    d3:2f:40:cb:70:ca:e3:f2:04:10:4d:3c:20:62:1c:
                    00:02:04:34:9e:05:42:14:e7:ca:96:70:66:9b:35:
                    0f:f3:92:49:ef:39:33:fb:a9:f1:2f:0c:ff:81:eb:
                    53:70:03:28:14:fb:b4:30:11:ae:9b:5e:20:7c:98:
                    5d:8c:f0:0a:0d:d9:75:e5:4f:7b:4a:4c:8e:ba:15:
                    24:59:f5:b1:cc:88:9e:36:32:2a:44:f4:ef:84:c8:
                    ec:68:a1:dc:9e:16:6c:f6:3f:53:34:39:3f:90:82:
                    50:7a:bf:c2:69:aa:86:2c:74:9d:a4:02:5f:e8:22:
                    f7:6e:4d:fa:00:53:b9:c1:63:ac:e6:84:2b:26:b4:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EA:F0:D8:7B:4A:25:F2:D2:3F:0A:FA:EC:AF:47:8C:E4:20:43:D2
            X509v3 Authority Key Identifier:
                keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/900F4ADA440611EF85166C30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:16:27:63:8c:37:ce:74:1b:e8:f1:1a:1a:72:ae:33:8a:1e:
         07:da:79:74:4c:c8:e7:64:46:1a:cd:b3:f9:05:ec:6c:3d:78:
         65:d5:4b:61:8b:7a:90:82:c0:5f:2d:b0:20:97:14:94:80:b9:
         da:32:b7:0b:cc:1d:f6:03:66:64:d9:a8:f7:14:db:b6:3d:ef:
         e5:03:38:cc:cf:86:12:f4:10:94:c3:53:8c:54:d8:85:f3:24:
         27:e2:ef:8c:07:b4:6a:6b:19:eb:97:0c:bf:2b:f0:68:87:f5:
         c9:d8:6a:0a:ec:7d:94:be:3f:ec:22:39:c2:d0:08:b9:da:34:
         27:70:a1:2e:1c:4d:da:0b:77:d1:85:da:ae:c4:a1:35:7b:a9:
         21:a2:10:87:bf:b0:8b:c5:2d:42:93:01:70:92:fa:33:80:ba:
         9c:65:13:1d:0e:f9:a8:83:71:92:b9:c2:f7:11:dc:91:89:ac:
         3a:2f:ba:87:dd:e7:c9:d0:8d:a7:d5:78:4b:37:76:e3:f0:64:
         07:17:78:90:2d:23:eb:d6:4d:fe:7a:7d:48:76:9a:da:a0:46:
         02:b0:cd:14:ff:33:f4:74:dd:8d:df:a6:a1:11:f7:8c:78:3a:
         c6:3e:2a:38:c9:3b:ec:14:3a:0e:56:e1:18:03:9a:75:d7:1c:
         41:a9:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org