Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa
File:                     2B4804B845B211EF9B812019C4F9AE02.roa (raw, json)
Hash identifier:          RSlQ28v4R7Z7Z91/NWLcgcqSptGPnncTkhKlGUAo99c=
Subject key identifier:   9F:46:39:55:3B:35:59:5F:DF:B4:FA:27:4A:A8:71:F6:D3:7B:F0:07
Certificate issuer:       /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Certificate serial:       02
Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa
Signing time:             Fri 19 Jul 2024 09:35:01 +0000
ROA not before:           Fri 19 Jul 2024 09:35:01 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     152317
IP address blocks:        157.10.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
                          rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 04:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
        Validity
            Not Before: Jul 19 09:35:01 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=669a3344-b8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:00:4e:7a:c4:2c:27:d8:9d:c2:3f:c4:16:45:
                    70:85:fd:26:a2:99:a2:bd:74:ef:a2:56:e7:97:df:
                    91:bf:bf:e4:ef:5a:33:03:30:a0:29:58:3a:ea:aa:
                    47:39:d3:a0:10:d5:10:e7:6b:38:37:73:b9:eb:00:
                    6f:05:2b:4b:49:73:fa:b1:88:58:5b:84:9c:b9:99:
                    1b:1d:c4:c0:78:46:9e:00:3b:d4:b3:1b:a6:3e:fd:
                    8f:9f:a3:f3:92:fd:57:43:ed:41:a6:06:d1:e5:f3:
                    63:fb:08:f1:8f:eb:39:6d:00:da:5d:23:3f:92:9d:
                    4b:83:0b:2b:bf:37:59:55:c8:04:ef:b4:ef:0c:31:
                    9f:a6:81:28:1d:b4:2b:20:c5:2d:fd:06:8f:c1:3a:
                    b5:66:44:53:bb:88:01:30:17:81:08:08:5d:c7:78:
                    89:72:40:8d:ca:cb:84:fb:32:ec:3e:e4:d1:bc:3e:
                    29:79:58:e1:ac:8b:ea:55:cb:49:22:e8:94:67:6f:
                    6b:cf:66:9b:8c:05:3c:cb:a5:f4:9e:98:d1:d6:aa:
                    6c:5b:df:ba:cf:a8:ff:50:f2:de:8d:1f:96:99:e2:
                    19:48:55:9d:8d:b0:3e:63:1b:40:7c:68:3e:33:55:
                    a8:4f:4c:33:ad:0d:c8:d1:b0:a5:8e:fc:d9:79:83:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:46:39:55:3B:35:59:5F:DF:B4:FA:27:4A:A8:71:F6:D3:7B:F0:07
            X509v3 Authority Key Identifier:
                keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:f7:8c:02:fa:85:0e:54:d3:42:2b:6f:d5:fc:d5:56:a6:32:
         19:4c:c8:4b:17:c3:3c:5d:87:20:2f:2e:b0:13:d1:6c:6a:79:
         54:c8:1c:df:5d:ee:7d:cb:79:1a:df:a5:c2:b9:f6:e3:db:ec:
         a9:b5:c3:96:14:09:5f:53:f6:01:3d:76:c0:40:49:fa:97:81:
         3c:9e:c1:14:fc:9d:b9:55:ac:91:2d:8c:97:c3:ce:3e:b0:60:
         e9:6a:45:f9:b9:59:9a:1d:f1:49:9d:d3:19:9c:9b:69:0f:5a:
         04:29:b1:aa:d6:19:c6:6e:81:51:32:a3:3a:65:09:7d:0a:97:
         ee:86:1f:9a:be:f9:d4:12:ed:cd:be:25:66:31:a6:7c:63:08:
         d2:50:47:1a:0e:b3:a2:66:e0:4c:bd:18:88:5d:fa:78:7b:ca:
         d9:56:ec:10:23:56:db:8e:44:8b:45:67:31:e2:d2:eb:8b:1c:
         b9:81:40:0c:ac:93:7e:77:85:f0:71:c7:70:73:03:22:9e:24:
         24:21:56:b2:5f:44:93:02:e7:02:1e:c3:cb:31:db:5b:d9:28:
         29:f1:ce:2b:cc:e5:c9:7b:98:75:5c:7b:2d:da:a7:02:47:0f:
         38:e1:cc:b8:fa:ca:8f:5b:72:ae:8b:ff:83:3a:85:59:1b:4d:
         e1:2d:a5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:11 2024 by rpki-client on console-ams.rpki-client.org