Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/D055D382225711EF975F6747C4F9AE02.roa
File:                     D055D382225711EF975F6747C4F9AE02.roa (raw, json)
Hash identifier:          vSUF8UhOaMH+V+SNryLP4jUhOyX0+t5vpdmlCLCB3Cc=
Subject key identifier:   B3:D4:B4:F6:C3:4A:45:88:62:3F:DF:E7:35:E9:26:56:03:42:A7:FE
Certificate issuer:       /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Certificate serial:       02
Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/D055D382225711EF975F6747C4F9AE02.roa
Signing time:             Tue 04 Jun 2024 09:50:03 +0000
ROA not before:           Tue 04 Jun 2024 09:50:03 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152898
IP address blocks:        160.22.50.0/24 maxlen: 24
                          160.22.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
                          rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
        Validity
            Not Before: Jun  4 09:50:03 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665ee34a-a837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:98:2e:7e:80:f7:9c:62:02:9b:5c:df:e6:
                    1d:6e:58:33:75:fd:ad:88:4e:4d:b5:96:a8:d4:d4:
                    87:76:90:0a:4a:d5:18:78:07:c9:ef:8c:8f:11:ac:
                    73:91:b2:0f:55:86:8f:c0:99:56:a3:57:2c:86:b2:
                    aa:09:ee:77:29:b0:00:bd:a5:49:93:e7:1c:af:83:
                    39:7e:b1:49:b7:32:a6:3c:9a:17:9e:76:6e:24:3d:
                    46:98:47:f3:05:c8:2b:f6:d7:78:57:cd:7b:57:10:
                    05:3d:89:f2:7d:bc:fb:f0:1a:17:cb:af:a8:bf:c0:
                    8b:fb:02:be:38:49:93:95:f2:2d:bd:1a:46:d5:e0:
                    a4:e0:b3:18:b4:6f:65:a6:dc:66:ba:2b:a1:2e:53:
                    ec:f4:6f:9a:7f:e7:2c:47:26:92:06:77:3f:ac:ff:
                    a7:f8:68:c7:a5:b3:50:e9:f4:01:7e:b4:53:5d:b9:
                    c0:67:5c:f6:22:7c:52:9b:f0:43:fb:cd:30:29:99:
                    67:90:28:30:9d:d3:fd:e4:b1:5e:9e:83:11:84:93:
                    c5:d8:01:3c:ff:83:a9:ba:98:8a:0f:6b:79:0a:92:
                    f8:17:77:47:6e:2b:68:ce:e4:78:8e:f7:cc:7e:c7:
                    8d:f1:6a:8c:85:50:32:bf:ba:c3:dc:57:77:e5:34:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:B4:F6:C3:4A:45:88:62:3F:DF:E7:35:E9:26:56:03:42:A7:FE
            X509v3 Authority Key Identifier:
                keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/D055D382225711EF975F6747C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:ac:92:15:e7:8a:f0:2b:1d:f4:a6:6c:9c:91:f8:5f:ab:9f:
         76:0b:55:cf:aa:76:e2:5e:93:a6:54:f5:97:12:1d:c5:ee:1b:
         99:df:88:5f:db:d4:2e:56:77:af:44:b0:21:b8:09:3d:95:1d:
         6d:a1:3f:d6:e1:9b:be:5c:b0:5c:56:b1:b9:c5:60:08:8b:1e:
         53:d7:48:f4:0b:7e:2b:2b:e1:b5:95:e5:8a:6e:68:ba:1f:2b:
         83:7c:dd:2c:9c:b8:eb:12:59:fe:31:f8:9e:38:31:a6:18:c0:
         ec:6a:21:5f:db:94:c8:af:2e:dd:97:b0:84:e4:72:d9:0a:31:
         e1:5b:da:b8:4b:c0:4d:34:07:9f:41:10:49:5f:0a:70:39:bb:
         aa:02:0b:87:52:fc:11:23:d4:b1:03:e8:3a:6e:5f:68:7b:80:
         77:84:75:d8:ad:6c:29:e0:67:26:af:e6:1c:1d:9e:09:1b:a9:
         67:55:22:d4:a2:8f:c6:27:d3:c3:f4:cf:6a:9e:c6:0d:e8:b7:
         05:93:71:f4:4d:47:23:43:9a:47:dc:e0:6e:8a:70:bf:d4:c0:
         5d:db:db:42:9b:92:fa:41:6c:34:50:37:e9:99:92:4c:26:d7:
         5a:a9:28:be:32:39:0d:01:e5:d2:67:d7:d4:e5:db:60:d8:9e:
         05:03:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org