Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/A54CA35E853B11EFB513D149C4F9AE02.roa
File:                     A54CA35E853B11EFB513D149C4F9AE02.roa (raw, json)
Hash identifier:          RrqE2FvhQsWooo2STNcNmbHYOAPrQ1yGVEmXNwdzve4=
Subject key identifier:   76:1A:6A:2E:5D:FB:A3:A7:62:F8:16:9D:ED:33:2D:80:94:09:D4:BC
Certificate issuer:       /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial:       03
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/A54CA35E853B11EFB513D149C4F9AE02.roa
Signing time:             Tue 08 Oct 2024 06:07:50 +0000
ROA not before:           Tue 08 Oct 2024 06:07:49 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     150154
IP address blocks:        160.187.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
                          rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
        Validity
            Not Before: Oct  8 06:07:49 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6704cc35-1f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:a0:ee:60:5e:70:55:77:49:b5:a2:2b:8a:
                    77:82:09:9f:60:56:05:fd:18:26:c6:d9:7f:7b:a0:
                    9b:29:45:f4:97:a7:67:83:2d:9f:34:b1:39:ea:83:
                    29:64:33:7c:5b:a2:9b:23:e4:0f:2c:75:ae:4d:37:
                    61:dd:fb:62:db:54:e6:70:73:a9:c8:17:d7:01:5f:
                    9a:68:19:ce:4b:31:a3:77:8a:8a:9b:d0:b8:56:6e:
                    b0:1f:af:b3:20:91:fb:f8:6f:e6:58:60:03:2b:58:
                    1d:6d:28:82:d8:c0:3e:ab:d9:b8:d4:46:1f:ac:00:
                    26:cf:4b:6d:67:14:c3:03:d3:25:c7:9f:cd:d3:2b:
                    38:3d:7e:8c:30:57:30:05:e8:9b:14:32:43:25:dd:
                    5a:36:1f:de:2d:8d:62:1b:fe:cc:35:8d:26:8f:35:
                    63:88:14:8b:5d:a6:95:fd:5a:6c:d7:d7:8d:9d:d7:
                    12:c8:90:84:d2:21:84:ba:a9:3f:cb:73:65:d8:29:
                    e8:9f:8e:04:0b:3b:7d:0e:cf:9f:21:7d:f5:66:6f:
                    bb:b4:5b:57:32:21:a3:29:fd:a4:42:44:69:31:a4:
                    69:b8:1b:35:65:d4:6c:f7:5d:06:e6:8e:09:ea:ed:
                    f6:74:02:7c:43:40:a7:7e:19:fb:eb:30:be:e2:44:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1A:6A:2E:5D:FB:A3:A7:62:F8:16:9D:ED:33:2D:80:94:09:D4:BC
            X509v3 Authority Key Identifier:
                keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/A54CA35E853B11EFB513D149C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:65:36:04:85:3a:c5:5f:97:5d:91:08:84:4a:f1:e2:5a:6b:
         f3:4a:75:c2:6a:94:9b:8e:dc:91:89:8a:88:31:c4:7f:df:1e:
         bd:e9:cc:37:47:2e:2b:d8:a8:38:a5:e4:04:f4:f8:2c:84:f3:
         37:05:a5:87:c3:fb:60:1e:41:26:ae:55:4c:36:c3:e3:e3:fb:
         b3:24:69:7b:06:e6:2e:09:eb:86:ee:3a:2b:c2:5c:40:37:67:
         08:84:67:60:8b:7b:15:8e:aa:c8:ac:10:4e:51:21:16:13:b8:
         d3:72:a2:08:45:8e:c2:b4:d1:a5:9d:1c:d2:4b:9f:28:fb:a5:
         72:4e:3b:0e:7c:04:3a:e9:84:ce:f9:42:94:47:7b:89:e8:40:
         8f:0e:95:d3:ab:5d:c8:69:17:5a:07:56:eb:4e:2d:e8:9d:7e:
         c7:a1:96:03:4b:31:89:fd:ca:42:09:cd:d0:4a:04:67:5f:34:
         4a:28:6d:85:10:ee:9f:95:e9:fa:93:7f:16:0a:4a:e1:3b:6e:
         5c:5e:dd:69:8c:22:2e:54:48:68:87:f0:87:dc:7a:cf:3d:7f:
         a8:5d:82:42:eb:17:f4:39:93:10:b8:3e:b5:0b:ef:28:9d:09:
         36:06:aa:14:cc:d2:1f:10:a3:9a:5b:27:94:64:7c:2a:00:e0:
         fc:3f:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org