Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/3E4867CC86DC11EFA6022627C4F9AE02.roa
File:                     3E4867CC86DC11EFA6022627C4F9AE02.roa (raw, json)
Hash identifier:          kBrZwIHTbaSnaE7XdLULllQIjEnMuSEphHZrV4DhNKM=
Subject key identifier:   77:92:EF:8A:E1:C7:85:C5:06:0C:E3:8A:D3:EE:27:6B:EF:5F:DE:8F
Certificate issuer:       /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial:       02
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/3E4867CC86DC11EFA6022627C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 07:49:57 +0000
ROA not before:           Thu 10 Oct 2024 07:49:57 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     153193
IP address blocks:        160.30.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
                          rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
        Validity
            Not Before: Oct 10 07:49:57 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67078725-1975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:81:12:b1:32:b3:8f:5d:b0:47:7e:0f:f4:
                    55:e0:01:31:a8:9a:df:e5:93:fe:0a:bf:56:f3:31:
                    67:31:af:aa:a0:5d:b3:cf:8b:ea:fc:99:48:e5:13:
                    0e:32:a6:68:01:62:1c:90:35:2d:2e:cd:78:e7:95:
                    72:ac:30:fa:48:cc:3a:2f:e9:62:df:82:9a:9d:4f:
                    48:5e:c9:5f:b7:0d:a1:cf:5c:0b:73:7a:09:6c:58:
                    b4:88:b6:4c:e2:c3:6b:9e:5a:fc:e7:12:5d:1a:e4:
                    70:21:81:21:64:8f:f5:37:60:ca:a2:49:76:5e:7d:
                    89:a8:0d:f2:eb:7a:77:63:bc:51:5c:1f:99:52:02:
                    20:1e:84:9d:57:02:75:fb:91:11:79:51:a1:49:1c:
                    3c:fc:81:1d:27:ba:bb:61:2a:e2:71:a0:3a:18:cc:
                    3d:2e:17:2a:c4:2d:e2:94:4f:13:ef:17:c0:26:3f:
                    1e:41:43:27:23:01:30:6b:38:d3:95:9e:15:09:ca:
                    a9:e3:ed:a0:b6:84:91:e4:67:ae:76:7c:54:39:ef:
                    f8:18:9b:09:ff:9a:42:a3:fb:50:c4:14:9f:ce:cf:
                    d0:31:95:4c:75:07:a5:a8:db:86:52:e4:17:54:d3:
                    1d:27:f4:3d:6d:41:91:0f:d8:86:cc:16:fc:9b:bf:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:92:EF:8A:E1:C7:85:C5:06:0C:E3:8A:D3:EE:27:6B:EF:5F:DE:8F
            X509v3 Authority Key Identifier:
                keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/3E4867CC86DC11EFA6022627C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:b2:42:d5:ce:8e:1a:a6:64:70:f1:2f:b5:25:30:e5:d8:93:
         79:c1:2f:92:fc:e7:d3:1c:7e:11:61:e8:66:db:67:6c:3f:00:
         04:aa:b2:0f:46:85:a1:43:98:0a:fc:c3:64:5c:f4:c7:2e:62:
         9a:9e:0b:08:bc:d5:e8:f0:81:d0:5b:15:ad:6b:67:56:d0:7a:
         ce:94:c8:af:d0:3e:c6:38:90:23:0f:4e:20:f3:a9:9b:64:ce:
         d6:f4:f5:6f:19:3e:f6:9e:81:7b:23:08:dc:6f:64:7a:4f:36:
         34:28:8b:4a:f6:73:07:6c:19:4c:8c:98:f6:65:bd:4b:c9:6b:
         cb:c9:7a:39:70:e2:c3:65:d5:4c:21:5d:eb:59:46:a1:80:ce:
         c1:31:25:e1:84:b5:7b:36:3d:9c:e9:d6:57:f4:46:2f:fd:48:
         79:e3:48:d0:c5:98:10:42:85:02:be:7f:7a:08:6e:75:53:5e:
         c6:b0:07:b6:44:cd:f7:65:24:6d:31:62:f7:dc:9a:db:0b:5a:
         7e:c8:58:26:4d:e4:6b:65:c1:00:93:7a:09:a1:33:32:8b:15:
         49:8a:03:62:de:3c:ce:a0:85:01:62:da:8f:ca:15:91:d2:8f:
         d5:7b:69:19:ce:f1:ba:48:26:0b:41:cc:ce:2b:a5:73:39:03:
         df:d1:90:74
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QjYzMzExMC8GA1UEBRMoMTNEN0ExM0I0MjNCQjZFODdBMUE3NUI3NDkzRjBCQzE5
RDBDRUFBMzAeFw0yNDEwMTAwNzQ5NTdaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MDc4NzI1LTE5NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXd4ESsTKzj12wR34P9FXgATGomt/lk/4Kv1bzMWcxr6qgXbPPi+r8mUjlEw4y
pmgBYhyQNS0uzXjnlXKsMPpIzDov6WLfgpqdT0heyV+3DaHPXAtzeglsWLSItkzi
w2ueWvznEl0a5HAhgSFkj/U3YMqiSXZefYmoDfLrendjvFFcH5lSAiAehJ1XAnX7
kRF5UaFJHDz8gR0nurthKuJxoDoYzD0uFyrELeKUTxPvF8AmPx5BQycjATBrONOV
nhUJyqnj7aC2hJHkZ652fFQ57/gYmwn/mkKj+1DEFJ/Oz9AxlUx1B6Wo24ZS5BdU
0x0n9D1tQZEP2IbMFvybv+G9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUd5LviuHH
hcUGDOOK0+4na+9f3o8wHwYDVR0jBBgwFoAUE9ehO0I7tuh6GnW3ST8LwZ0M6qMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNjMzL0QwQUI5M0U0ODZE
OTExRUY4QjhCRUIxRkM0RjlBRTAyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZx
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRTllaE8wSTd0dWg2R25XM1NUOEx3WjBNNnFNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjYzMy9EMEFCOTNFNDg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi8zRTQ4NjdDQzg2
REMxMUVGQTYwMjI2MjdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaAeQDANBgkqhkiG9w0BAQsFAAOCAQEAN7JC1c6OGqZkcPEv
tSUw5diTecEvkvzn0xx+EWHoZttnbD8ABKqyD0aFoUOYCvzDZFz0xy5imp4LCLzV
6PCB0FsVrWtnVtB6zpTIr9A+xjiQIw9OIPOpm2TO1vT1bxk+9p6BeyMI3G9kek82
NCiLSvZzB2wZTIyY9mW9S8lry8l6OXDiw2XVTCFd61lGoYDOwTEl4YS1ezY9nOnW
V/RGL/1IeeNI0MWYEEKFAr5/eghudVNexrAHtkTN92UkbTFi99ya2wtafshYJk3k
a2XBAJN6CaEzMosVSYoDYt48zqCFAWLaj8oVkdKP1XtpGc7xukgmC0HMziulczkD
39GQdA==
-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:21 2024 by rpki-client on console-fra.rpki-client.org