Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/E9AB8256861011EFAAE9845AC4F9AE02.roa
File:                     E9AB8256861011EFAAE9845AC4F9AE02.roa (raw, json)
Hash identifier:          TAibHCWzblKHdLqREdrug0sl41Cq4DjCYp4R2g2bse4=
Subject key identifier:   67:63:D0:9F:BB:DC:0E:E7:61:3D:0D:C1:AE:0D:64:DD:D3:59:7A:29
Certificate issuer:       /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial:       06
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/E9AB8256861011EFAAE9845AC4F9AE02.roa
Signing time:             Wed 09 Oct 2024 07:34:27 +0000
ROA not before:           Wed 09 Oct 2024 07:34:27 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     64073
IP address blocks:        160.187.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
                          rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
        Validity
            Not Before: Oct  9 07:34:27 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67063203-0e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:8b:5f:82:b2:55:82:86:f9:16:f2:dd:ab:
                    3a:83:d5:51:03:d6:a8:e0:5a:af:4f:eb:b6:69:1b:
                    cb:69:68:33:f8:2f:4a:0b:83:e6:ff:f8:79:73:b6:
                    5c:fb:e3:82:64:c8:c9:8b:2b:9b:35:02:16:c1:df:
                    0f:b2:32:fe:15:62:ec:03:ed:0a:bc:55:68:58:dc:
                    75:e8:17:f7:ab:cd:f0:f5:3c:bd:cd:1a:56:fa:d1:
                    e5:c0:f3:1e:41:22:b1:41:e0:c1:2e:19:63:80:88:
                    c1:17:f1:b1:3d:d4:2e:c0:34:75:eb:02:51:68:b3:
                    a6:11:94:2c:d1:a8:27:0f:a0:34:8f:06:f8:cc:8e:
                    51:0b:08:5b:e3:d7:20:77:7c:fa:43:44:6a:9f:ef:
                    56:5b:0a:d1:04:11:37:ad:97:63:f0:95:38:cd:06:
                    c8:02:7c:97:33:69:58:d3:21:67:4f:a7:86:06:07:
                    4f:57:9e:f4:cd:63:4f:c3:52:44:2f:11:11:ca:c2:
                    37:fc:d2:f9:3c:d2:7b:b9:22:06:27:0b:6f:84:71:
                    3a:d1:21:2d:7d:e5:8e:b1:5c:16:61:55:4d:bc:00:
                    e6:06:60:3a:58:56:43:96:84:b2:3c:87:18:38:8d:
                    18:dc:6f:8b:bc:3e:b6:73:0a:6d:fe:90:68:1e:f8:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:63:D0:9F:BB:DC:0E:E7:61:3D:0D:C1:AE:0D:64:DD:D3:59:7A:29
            X509v3 Authority Key Identifier:
                keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/E9AB8256861011EFAAE9845AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e3:bc:03:27:e5:20:6b:75:90:c5:cc:08:2e:65:02:b8:bf:
         16:ae:22:8a:92:ff:b3:80:2b:00:31:1e:85:82:b7:72:c3:63:
         0b:0f:93:fb:e8:01:18:66:93:b4:77:4e:b7:78:7b:d5:a5:7a:
         8f:14:e5:a4:d6:3a:b1:10:a7:fa:5d:5b:ef:3b:18:6d:a6:9c:
         c6:c1:3a:7d:b6:ec:2d:61:3b:7c:7c:13:8b:b7:a4:c3:c7:b6:
         17:8f:4c:ff:ec:b5:2b:c4:29:84:fe:27:56:ce:59:d9:7f:bc:
         38:1b:5b:51:4d:3f:4b:a7:20:c6:b4:4e:0e:4e:9e:3b:44:b6:
         c6:29:6d:69:75:6a:76:bc:b2:30:29:41:6b:f2:05:77:f9:b9:
         12:d0:5b:63:f5:15:dd:9e:3e:00:8b:81:dd:fa:9c:31:34:2f:
         08:9d:b6:44:2c:f1:69:f1:41:bb:9b:e8:b8:80:95:45:d5:ab:
         1d:07:74:ab:08:8e:82:e7:a6:c7:cc:d2:0c:26:f2:3f:65:02:
         28:70:ef:dd:1d:0a:f3:31:ee:c8:a0:b8:c8:b8:a8:03:10:7a:
         a6:89:a0:4e:71:52:94:06:91:99:c8:4d:e3:7f:b4:45:4d:53:
         cb:ea:95:9d:c6:6e:50:b9:bd:e8:32:04:7e:26:85:34:80:87:
         21:99:6b:eb
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MEVFRDExMC8GA1UEBRMoNjkxOEFBNzFGMzZCMDQ2MzUzQTY1Q0MwODk3OEIxOEVG
RkI5RjVDNjAeFw0yNDEwMDkwNzM0MjdaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MDYzMjAzLTBlNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2YYtfgrJVgob5FvLdqzqD1VED1qjgWq9P67ZpG8tpaDP4L0oLg+b/+Hlztlz7
44JkyMmLK5s1AhbB3w+yMv4VYuwD7Qq8VWhY3HXoF/erzfD1PL3NGlb60eXA8x5B
IrFB4MEuGWOAiMEX8bE91C7ANHXrAlFos6YRlCzRqCcPoDSPBvjMjlELCFvj1yB3
fPpDRGqf71ZbCtEEETetl2PwlTjNBsgCfJczaVjTIWdPp4YGB09XnvTNY0/DUkQv
ERHKwjf80vk80nu5IgYnC2+EcTrRIS195Y6xXBZhVU28AOYGYDpYVkOWhLI8hxg4
jRjcb4u8PrZzCm3+kGge+DwVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZ2PQn7vc
DudhPQ3Brg1k3dNZeikwHwYDVR0jBBgwFoAUaRiqcfNrBGNTplzAiXixjv+59cYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRUVELzM3NDAyQURFODUz
QjExRUZBMzA3MjM0OUM0RjlBRTAyL2FSaXFjZk5yQkdOVHBsekFpWGl4anYtNTlj
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvYVJpcWNmTnJCR05UcGx6QWlYaXhqdi01OWNZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEVFRC8zNzQwMkFERTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi9FOUFCODI1Njg2
MTAxMUVGQUFFOTg0NUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKC7uTANBgkqhkiG9w0BAQsFAAOCAQEAkuO8AyflIGt1kMXM
CC5lAri/Fq4iipL/s4ArADEehYK3csNjCw+T++gBGGaTtHdOt3h71aV6jxTlpNY6
sRCn+l1b7zsYbaacxsE6fbbsLWE7fHwTi7ekw8e2F49M/+y1K8QphP4nVs5Z2X+8
OBtbUU0/S6cgxrRODk6eO0S2xiltaXVqdryyMClBa/IFd/m5EtBbY/UV3Z4+AIuB
3fqcMTQvCJ22RCzxafFBu5vouICVRdWrHQd0qwiOguemx8zSDCbyP2UCKHDv3R0K
8zHuyKC4yLioAxB6pomgTnFSlAaRmchN43+0RU1Ty+qVncZuULm96DIEfiaFNICH
IZlr6w==
-----END CERTIFICATE-----
Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org