Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/F090C65CF76411EE88806717C4F9AE02.roa
File:                     F090C65CF76411EE88806717C4F9AE02.roa (raw, json)
Hash identifier:          KS86v7mF+6dJ+9U3ZOFBZb7JHV9eYXTP5IAlmJs4IDk=
Subject key identifier:   68:BD:AF:CF:6D:5D:6C:85:0F:FF:2B:12:9A:87:CE:27:E1:23:A9:D9
Certificate issuer:       /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial:       5F
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/F090C65CF76411EE88806717C4F9AE02.roa
Signing time:             Wed 10 Apr 2024 18:08:22 +0000
ROA not before:           Wed 10 Apr 2024 18:08:22 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     152300
IP address blocks:        157.10.64.0/24 maxlen: 31
                          157.10.65.0/24 maxlen: 31

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
                          rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
        Validity
            Not Before: Apr 10 18:08:22 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6616d596-2088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:4b:48:93:41:ca:a5:e1:ca:6f:c7:03:20:
                    45:ff:db:7e:cf:9b:6d:e0:95:8b:94:4a:40:28:f5:
                    cf:bd:0a:50:e8:9b:06:dd:30:2b:0f:f4:58:58:92:
                    0d:ce:0d:d3:ea:3c:f7:cd:a3:54:54:38:40:c4:43:
                    c2:eb:c9:a0:d6:5b:9d:85:77:79:8d:0e:c4:8e:72:
                    58:61:22:01:0b:f0:a7:c0:11:ee:e6:b8:79:9e:af:
                    bd:0f:a4:82:9d:b7:87:fb:3f:6d:d3:e2:85:3f:ee:
                    6b:6d:82:79:0b:d6:50:fa:95:d5:ce:a4:dc:58:24:
                    fe:56:70:70:b2:9b:88:cc:db:80:32:0e:21:9b:41:
                    5a:c5:a9:ca:a5:91:f0:0a:ea:0c:0a:19:d8:e6:7b:
                    52:36:f1:25:bd:b9:be:73:a2:b1:97:95:8b:11:a7:
                    39:72:65:e3:43:8a:e8:23:d4:20:8a:a4:e7:f3:7b:
                    5b:ad:6e:90:33:66:09:74:07:10:df:71:c5:43:88:
                    0f:d3:2d:f4:9b:27:8a:90:df:c0:fd:a9:83:9f:a4:
                    39:b4:a5:fa:14:9f:12:5b:7d:d2:c1:a3:f4:31:02:
                    ef:fe:dc:31:38:5d:6e:8e:4d:9e:64:70:07:90:18:
                    9e:d8:c9:fe:8b:44:9a:43:ca:46:b0:08:82:9d:4b:
                    55:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:AF:CF:6D:5D:6C:85:0F:FF:2B:12:9A:87:CE:27:E1:23:A9:D9
            X509v3 Authority Key Identifier:
                keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/F090C65CF76411EE88806717C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:1a:bb:8b:c0:a3:36:c3:91:90:2a:af:1b:f0:e1:9a:14:
         4d:24:08:10:7f:19:f3:c6:cb:ee:c9:5f:4f:9a:11:5e:9e:3b:
         6b:71:5c:cc:52:1e:97:07:a6:34:bb:58:7e:aa:f2:c2:6a:9d:
         c2:30:61:00:18:ae:8a:4c:ce:cb:f7:19:14:62:61:27:95:25:
         99:21:c4:b8:b2:e2:cd:b7:94:74:5a:bc:8f:54:27:02:59:9b:
         88:70:8d:24:22:f3:40:73:1b:39:03:41:7e:24:b4:12:5c:e3:
         e2:fd:16:db:43:28:6f:43:18:2c:90:d8:b2:67:a4:8e:d6:6f:
         69:54:6a:ab:b7:72:4d:8c:9b:f1:e3:d5:bf:73:44:3d:44:0e:
         e0:fd:44:87:cc:21:83:74:86:e8:ad:f5:56:f1:c7:d9:e6:71:
         9a:dd:fd:1d:08:5b:c8:d8:10:f7:29:d1:6d:d1:5a:b1:94:5e:
         eb:c6:c9:69:d8:d4:2c:c1:fb:1e:c5:82:92:19:19:0d:f1:ca:
         eb:41:d8:42:c4:82:93:22:a9:45:8b:5f:4a:bf:ab:7e:30:83:
         80:a4:9a:a3:24:63:26:10:ec:c2:de:7c:ff:50:d0:1b:5f:53:
         ad:d8:33:e7:39:77:b7:b5:58:51:be:d4:f7:e5:2e:4e:06:2e:
         61:89:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:28 2024 by rpki-client on console-fra.rpki-client.org