Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa
File:                     B21985725F3711EFA108CA0CC4F9AE02.roa (raw, json)
Hash identifier:          qWDPCZUNoXxLfCTQ51artmgIDTxez9EecMCL2qvkzMg=
Subject key identifier:   7B:8C:19:37:C1:0B:33:0D:0A:D1:AC:1C:03:E5:82:71:4E:C2:DB:2B
Certificate issuer:       /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Certificate serial:       02
Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa
Signing time:             Tue 20 Aug 2024 21:03:49 +0000
ROA not before:           Tue 20 Aug 2024 21:03:49 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     135559
IP address blocks:        160.30.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 04:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
        Validity
            Not Before: Aug 20 21:03:49 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66c504b5-766d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:f9:0b:5b:16:34:58:0e:25:d5:4a:95:3c:
                    41:ff:43:dd:f1:8d:a2:83:b9:90:f4:db:38:e1:c9:
                    1f:be:a5:15:d7:3b:88:b2:30:56:3e:d8:bf:30:1f:
                    be:13:09:26:d4:20:4e:de:97:44:1e:4c:eb:ba:c4:
                    45:01:63:37:a1:2b:3c:48:9e:72:0b:eb:2f:ca:84:
                    98:7a:0e:13:c8:89:6d:8e:a2:ba:1d:bb:b6:25:68:
                    08:b3:3d:5b:12:33:e8:c6:ff:42:6e:75:df:82:92:
                    02:86:6d:8a:0a:11:63:08:f4:b8:b6:f5:7d:4f:88:
                    76:02:38:95:a3:7a:db:f8:6c:3e:93:7b:3b:fd:6d:
                    db:45:0b:dc:3a:05:b0:2b:5c:22:23:b7:7c:12:bd:
                    2b:03:e6:3e:d8:ea:7a:1a:1d:4e:c4:10:33:f3:71:
                    e3:f6:90:bb:93:3e:d2:a7:60:a0:69:1c:74:c6:2a:
                    39:79:a1:52:56:80:0a:a8:8c:8a:13:17:a6:54:90:
                    54:5d:69:38:46:99:79:fc:13:a6:f0:f3:75:de:88:
                    07:a2:f3:23:f6:98:01:75:99:32:33:50:5d:44:34:
                    71:28:1c:55:af:6e:d0:90:f5:d3:1b:ec:38:56:9d:
                    1e:81:22:49:ca:cb:5d:35:bb:01:88:0c:3f:6d:f4:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8C:19:37:C1:0B:33:0D:0A:D1:AC:1C:03:E5:82:71:4E:C2:DB:2B
            X509v3 Authority Key Identifier:
                keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:df:28:8a:94:31:3a:36:6b:64:4d:96:61:97:db:89:5c:81:
         06:b6:bc:fb:4a:d0:a9:04:5d:e0:2f:8f:a6:3d:c5:d1:6e:d8:
         81:61:59:e1:1c:d1:08:26:13:ca:21:b7:8b:11:83:de:25:ae:
         bd:5f:45:6a:98:34:75:4c:ff:f7:a8:5f:a5:43:bb:4e:49:4d:
         5e:fb:99:b8:4f:6d:1b:80:02:4c:a4:63:aa:92:d1:39:a3:93:
         4c:73:58:50:99:d8:0a:96:3a:3a:74:c7:b9:f8:e1:6d:fe:76:
         83:82:47:c5:0b:a9:ef:ed:37:33:fa:11:0a:0a:e8:58:2d:0a:
         95:35:cc:4a:7d:22:8d:08:74:f0:a0:83:d0:64:4b:79:b7:58:
         33:df:40:ab:3f:20:f2:26:f1:26:0c:4d:7b:80:1e:7f:db:35:
         6e:23:35:83:c9:00:70:27:e8:2b:34:50:41:0a:d8:69:88:29:
         f8:92:a7:0f:25:67:35:3d:13:50:83:98:2a:82:7b:16:11:de:
         1a:e7:41:16:98:8e:1b:2d:63:e4:1f:01:1d:b9:7d:5e:64:ed:
         26:51:da:92:4a:0c:d9:cd:2f:f8:ff:c8:76:8e:c0:77:96:27:
         79:19:8e:13:69:a3:e1:9c:8b:e4:e7:13:e5:e7:9a:32:a7:57:
         34:e8:c0:5c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTNFRDExMC8GA1UEBRMoREYyNEI0RDUxQzY3ODQxREQ2MDBERDJBNjE3ODZCQ0U5
ODg3ODY2NzAeFw0yNDA4MjAyMTAzNDlaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2YzUwNGI1LTc2NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/F/kLWxY0WA4l1UqVPEH/Q93xjaKDuZD02zjhyR++pRXXO4iyMFY+2L8wH74T
CSbUIE7el0QeTOu6xEUBYzehKzxInnIL6y/KhJh6DhPIiW2Oorodu7YlaAizPVsS
M+jG/0Judd+CkgKGbYoKEWMI9Li29X1PiHYCOJWjetv4bD6Tezv9bdtFC9w6BbAr
XCIjt3wSvSsD5j7Y6noaHU7EEDPzceP2kLuTPtKnYKBpHHTGKjl5oVJWgAqojIoT
F6ZUkFRdaThGmXn8E6bw83XeiAei8yP2mAF1mTIzUF1ENHEoHFWvbtCQ9dMb7DhW
nR6BIknKy101uwGIDD9t9E8BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUe4wZN8EL
Mw0K0awcA+WCcU7C2yswHwYDVR0jBBgwFoAU3yS01RxnhB3WAN0qYXhrzpiHhmcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxM0VELzY3N0FBQTNDNUYz
NzExRUZCRjM2OUU1OEM0RjlBRTAyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGht
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvM3lTMDFSeG5oQjNXQU4wcVlYaHJ6cGlIaG1jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi9CMjE5ODU3MjVG
MzcxMUVGQTEwOENBMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKAeJTANBgkqhkiG9w0BAQsFAAOCAQEAu98oipQxOjZrZE2W
YZfbiVyBBra8+0rQqQRd4C+Ppj3F0W7YgWFZ4RzRCCYTyiG3ixGD3iWuvV9Fapg0
dUz/96hfpUO7TklNXvuZuE9tG4ACTKRjqpLROaOTTHNYUJnYCpY6OnTHufjhbf52
g4JHxQup7+03M/oRCgroWC0KlTXMSn0ijQh08KCD0GRLebdYM99Aqz8g8ibxJgxN
e4Aef9s1biM1g8kAcCfoKzRQQQrYaYgp+JKnDyVnNT0TUIOYKoJ7FhHeGudBFpiO
Gy1j5B8BHbl9XmTtJlHakkoM2c0v+P/Ido7Ad5YneRmOE2mj4ZyL5OcT5eeaMqdX
NOjAXA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:14:55 2024 by rpki-client on console-fra.rpki-client.org