Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
File:                     4E9597086B5C11EFABB11F60C4F9AE02.roa (raw, json)
Hash identifier:          qpNZ0Lm7ohL4bDYSXZ5HFsKxSW3wfA050YYCOcr+GtU=
Subject key identifier:   C6:E9:C3:66:E4:78:59:D8:94:CA:06:D0:CA:C4:EE:B2:CB:57:D1:9A
Certificate issuer:       /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial:       07
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
Signing time:             Fri 13 Sep 2024 04:23:07 +0000
ROA not before:           Fri 13 Sep 2024 04:23:07 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     152475
IP address blocks:        160.30.128.0/24 maxlen: 24
                          160.30.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
        Validity
            Not Before: Sep 13 04:23:07 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e3be2b-9984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:90:c3:7a:dd:23:35:bd:e4:dc:c3:6d:a7:
                    7a:5f:8e:03:76:02:90:77:b0:3e:97:f3:29:24:07:
                    90:31:28:e6:f4:e2:ce:10:7d:ec:00:67:2e:fe:2a:
                    76:53:40:90:0e:41:d3:75:7a:f2:f1:94:2a:af:f8:
                    d7:d0:62:92:c8:08:9c:6c:a0:34:5f:a2:d8:96:30:
                    51:33:85:a8:41:83:5e:17:76:48:7b:89:2d:ca:29:
                    54:96:a9:0b:25:89:26:8b:1d:47:5d:fe:d0:c9:0f:
                    9d:0d:75:b7:3e:93:9a:7c:98:27:7d:91:22:dd:23:
                    a4:3f:3c:09:48:99:85:5a:68:08:c3:c1:2c:8b:cf:
                    3e:0c:d4:fe:b6:93:ba:23:12:1f:fd:4a:9d:a3:0b:
                    bc:59:8b:f1:2a:3e:08:3e:e7:ba:98:ab:a6:07:5c:
                    24:0f:c9:4a:f4:8b:e1:d3:3d:69:7e:d9:40:b5:2f:
                    9d:b4:30:9c:69:53:0f:2b:05:e4:a1:54:f0:ef:c8:
                    63:50:c1:b2:4c:b6:22:db:e7:78:83:3e:b6:b4:48:
                    c6:c7:a3:c1:4d:eb:5b:b5:21:48:e7:15:19:ce:0e:
                    ed:0e:76:4e:e4:70:16:09:e0:3d:a8:d1:2b:96:f2:
                    d7:ea:ed:99:eb:39:45:7a:2e:98:11:cb:25:a0:d3:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E9:C3:66:E4:78:59:D8:94:CA:06:D0:CA:C4:EE:B2:CB:57:D1:9A
            X509v3 Authority Key Identifier:
                keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:1e:b9:ba:9c:7b:bd:0b:7a:80:a7:1f:0b:bf:67:be:70:
         12:73:03:fc:5f:ba:d8:2e:94:7c:c3:b2:ef:d3:23:a9:86:9c:
         f0:8d:2a:56:b9:97:d9:ca:c8:9d:8a:68:d2:4a:c3:94:94:b1:
         f9:d4:72:e5:89:75:7c:ad:12:c2:6b:41:24:d4:63:d1:91:d8:
         25:c8:d4:9f:ef:a8:56:f4:aa:12:fd:bb:d8:3f:81:99:12:2d:
         1d:02:a0:cb:a9:56:9d:a0:85:8f:fb:db:a2:42:7d:1f:36:5a:
         a5:4f:36:e4:65:93:dd:8f:6e:66:70:24:96:3a:25:96:b8:1a:
         35:aa:db:a0:35:f7:2f:0d:18:bb:5e:b5:f4:0c:20:d5:af:fa:
         a2:4b:e4:e1:2a:95:b2:9c:03:1f:c0:a8:4f:4a:cf:4d:7b:48:
         89:61:26:2a:42:ed:52:99:71:71:84:30:6e:e5:c9:2c:68:76:
         e5:56:2b:b3:38:ab:36:a5:2b:fc:09:c9:dc:ae:96:09:bd:fd:
         b9:fc:2c:5e:c4:70:30:a0:8f:49:bc:21:cf:2c:6e:d8:c2:91:
         4b:14:5d:df:4f:ba:43:91:fb:7e:e8:bc:e2:db:39:90:d2:b8:
         81:4a:05:73:f6:4d:b6:75:0e:05:84:3a:4c:dc:a4:63:0e:1c:
         3d:c0:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org