Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/426E71C25B1511EF95122A62C4F9AE02.roa
File:                     426E71C25B1511EF95122A62C4F9AE02.roa (raw, json)
Hash identifier:          iVgLpNzw9WvLZDCrNCeZKcdKAVuHQLIqgkettJkRmpw=
Subject key identifier:   6B:06:EB:A4:7A:1F:94:84:3B:03:57:7F:90:6B:03:AD:7A:21:60:6D
Certificate issuer:       /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial:       02
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/426E71C25B1511EF95122A62C4F9AE02.roa
Signing time:             Thu 15 Aug 2024 14:47:14 +0000
ROA not before:           Thu 15 Aug 2024 14:47:14 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131582
IP address blocks:        160.25.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
        Validity
            Not Before: Aug 15 14:47:14 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66be14f2-18c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3c:bf:bd:35:14:8d:1e:ee:4c:5a:76:93:ff:
                    5c:4f:59:ea:ae:3d:ac:28:75:98:b1:fd:a2:cb:23:
                    be:7f:a5:b5:be:e5:ec:42:1f:0e:d8:5c:5c:12:fd:
                    11:4e:25:cb:c9:06:bb:3b:5c:25:99:1e:3b:92:14:
                    0d:69:b4:d4:b5:46:b3:4f:8a:ff:bd:9a:6b:f8:47:
                    df:ae:a5:42:b5:29:4f:56:9f:8b:71:9e:3e:fc:f0:
                    c2:70:0f:41:69:61:4b:5d:fd:1a:58:79:59:b6:c0:
                    75:38:17:c1:79:87:c6:2e:14:7c:11:37:ad:f3:d5:
                    6c:ad:3d:91:2d:02:a4:bd:a7:cd:02:e6:f0:a2:a0:
                    c4:e4:bb:b6:01:8a:44:5e:8b:f1:37:28:12:86:d2:
                    91:6e:63:f5:97:f2:1c:1f:81:2e:d1:99:75:0c:97:
                    09:fa:2a:0c:a5:69:4b:f1:b1:60:8b:74:6f:00:7d:
                    2c:57:4c:1b:9b:e1:58:7b:5d:c4:5d:8e:d5:3c:ce:
                    e6:da:6a:78:c9:fc:55:8b:82:1a:de:85:f7:83:53:
                    aa:0c:40:19:c3:36:fd:1d:c5:d7:70:8e:4c:7f:3a:
                    13:d6:fb:02:db:61:86:5e:6d:1c:bc:75:ca:86:74:
                    78:fe:8f:49:a0:3a:be:cd:ee:a0:64:e8:70:de:c3:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:06:EB:A4:7A:1F:94:84:3B:03:57:7F:90:6B:03:AD:7A:21:60:6D
            X509v3 Authority Key Identifier:
                keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/426E71C25B1511EF95122A62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:23:b4:2e:52:04:a6:7d:8c:14:38:91:66:fd:1b:3a:4a:6d:
         58:b4:35:38:14:18:ce:ba:16:13:c0:ed:d4:7c:29:a7:a3:c3:
         68:b6:2c:12:73:b9:6e:fe:1b:92:69:e2:bb:d2:97:2d:99:ce:
         cb:82:d2:dd:41:52:7e:e5:39:e5:01:54:5e:ba:ce:f6:f7:3d:
         bb:65:7b:94:45:b5:f6:0e:cc:dc:c9:4d:11:c9:15:ac:4f:20:
         f7:2e:f7:37:ed:2e:12:3e:f4:2f:23:3f:1e:7a:f7:50:c1:8c:
         3b:18:b6:cd:24:61:ab:fb:e7:34:f8:c7:53:30:32:56:bf:b0:
         0d:b4:14:ba:11:a2:e0:45:c5:02:9c:fd:41:a2:c6:82:cc:2b:
         b7:5b:3c:c8:8c:07:a5:0b:23:89:f4:40:36:7c:14:94:dc:d4:
         f9:c7:40:f3:1f:73:66:7b:c0:26:eb:64:d6:eb:5c:40:56:e0:
         cd:6d:52:50:2f:84:4a:02:3a:c8:9a:19:23:47:b5:65:fc:60:
         bd:e9:17:2a:27:5f:9a:50:ca:df:34:2b:03:d0:85:db:b3:c2:
         80:22:74:67:e0:4d:00:59:c7:f3:03:d0:7e:db:82:bc:cc:87:
         8b:bf:81:0d:47:62:62:dd:a1:51:61:88:20:cd:86:fb:11:ff:
         10:3a:aa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:21 2024 by rpki-client on console-fra.rpki-client.org