Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
File:                     2F02BC96718D11EE97E3E022C4F9AE02.roa (raw, json)
Hash identifier:          DzBCpboud2zLxpVF1ilPsGBCQ+/vZr9mk3HLW2SW1Ug=
Subject key identifier:   8C:A7:12:5E:AA:BD:21:E7:0A:CC:5C:8B:03:91:77:6F:09:FE:9A:15
Certificate issuer:       /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial:       8E
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
Signing time:             Wed 31 Jan 2024 06:46:40 +0000
ROA not before:           Wed 31 Jan 2024 06:46:40 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     19905
IP address blocks:        157.120.160.0/23 maxlen: 24
                          157.120.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
        Validity
            Not Before: Jan 31 06:46:40 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9ecd0-2576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e2:a6:21:de:cf:ab:45:45:b2:91:27:3a:88:
                    cd:55:8f:f7:2e:09:40:65:ee:ce:ca:d3:e0:ed:89:
                    ab:1e:93:9a:f2:62:0c:fa:90:13:59:8f:58:40:2f:
                    0d:2b:df:09:d1:d8:0a:a9:43:90:fb:93:54:bc:fd:
                    bc:fd:18:9e:10:a4:fa:4a:ff:63:18:d1:88:c4:92:
                    47:3f:aa:d7:08:21:0d:95:fa:4d:30:5d:18:e6:12:
                    42:cd:fe:94:e5:0a:8a:27:2e:5a:73:2c:68:93:62:
                    00:a2:68:fa:ee:12:9e:c7:05:4f:14:b4:38:07:48:
                    bf:0a:2b:d3:ad:9f:ae:64:63:f4:fd:7f:40:e1:18:
                    47:21:87:d7:2a:42:93:9b:a0:a9:f8:5f:46:3f:a9:
                    3d:b7:5b:f5:b6:f1:3a:0e:29:93:58:1c:b7:51:a1:
                    48:ff:76:66:51:44:60:9d:51:b8:19:04:a2:d1:ac:
                    7d:22:96:77:1a:b6:89:b0:48:97:68:f0:18:ea:b8:
                    29:00:fd:af:f0:68:c1:33:8d:ea:79:d0:51:eb:f3:
                    b2:35:44:1c:ee:6d:98:e1:25:63:75:1d:89:2a:c6:
                    1e:c2:98:7c:f0:93:74:c8:99:68:28:6c:d5:42:f6:
                    b7:c4:41:04:38:3e:1f:b4:2e:bd:3e:c4:fe:c6:f1:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A7:12:5E:AA:BD:21:E7:0A:CC:5C:8B:03:91:77:6F:09:FE:9A:15
            X509v3 Authority Key Identifier:
                keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.160.0-157.120.162.255

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:9e:d7:f7:a0:09:dd:94:2a:ee:d2:1a:4f:a9:42:a9:72:
         f6:18:20:ae:21:c7:ab:10:10:5b:5d:d8:00:32:34:85:a9:fc:
         f3:40:84:b1:80:9d:78:9a:a0:b6:56:70:e7:4f:36:82:0f:d5:
         fd:b9:a3:26:26:b2:9e:31:97:ce:f2:f1:bf:ab:e2:1e:e5:08:
         62:2a:97:b6:73:b0:68:0a:6d:d5:cb:8e:ad:1d:71:94:16:17:
         05:2c:a1:c6:f5:f6:a3:4c:5b:fe:2b:b5:e3:6c:60:ba:d1:16:
         2c:ec:3a:36:45:0b:69:f1:9c:db:34:07:b6:71:a3:1c:cc:c8:
         85:ce:35:48:17:79:ef:b3:71:0d:df:9d:41:f5:7c:a0:c4:74:
         6f:70:c5:fb:2c:0a:ab:3a:2b:89:2b:97:61:f4:6d:ac:4e:d7:
         db:3b:40:56:bb:ad:25:db:0b:08:10:35:d2:cd:9f:e3:90:37:
         ef:15:af:24:1b:32:ed:92:58:10:bb:a8:da:c2:b1:34:2c:f9:
         7c:cb:03:40:54:ae:2a:ac:16:8b:e8:22:78:5a:07:f1:81:49:
         2a:99:a5:b8:29:44:02:6f:e7:a5:80:bc:97:35:85:02:2d:20:
         61:71:96:8d:e8:6a:8c:ae:2c:90:de:39:09:a1:34:e1:46:7a:
         8e:e7:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:23:55 2024 by rpki-client on console-ams.rpki-client.org