Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa
File:                     F0674762B6B611EE8EF4443AC4F9AE02.roa (raw, json)
Hash identifier:          FaOon3incGL44fXWsUh5gm5uuJKLqWRTOR+SCwv9JuY=
Subject key identifier:   6D:1C:7F:3C:1C:9E:5C:C2:C4:33:47:D7:F5:E7:22:0D:4D:1E:89:9F
Certificate issuer:       /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial:       08
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa
Signing time:             Fri 19 Jan 2024 13:25:18 +0000
ROA not before:           Fri 19 Jan 2024 13:25:18 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     147006
IP address blocks:        157.10.242.0/23 maxlen: 23
                          157.10.242.0/24 maxlen: 24
                          157.10.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
                          rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
        Validity
            Not Before: Jan 19 13:25:18 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65aa783d-14c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:33:b1:4c:a8:2e:f4:ca:75:9e:2e:16:8d:
                    a0:03:d8:4b:8f:74:99:ea:7b:b6:5c:4e:fa:7e:96:
                    6c:7b:4b:8d:a3:14:59:85:de:7f:f6:dc:eb:da:51:
                    53:7e:a9:9a:f3:90:a9:ff:a4:71:5e:b9:90:48:86:
                    74:74:95:60:55:74:f7:d7:01:37:2e:35:b2:25:e6:
                    38:c2:ed:19:24:01:bd:04:c6:a9:55:6e:d2:a7:ca:
                    08:4e:32:71:64:e3:2a:c1:66:5d:17:64:a8:a4:90:
                    fe:fe:87:1a:6b:26:ec:d3:d8:65:04:cc:5f:2b:c9:
                    8b:2c:71:13:44:ba:5e:23:81:87:23:69:eb:08:45:
                    2a:ed:2c:df:68:c9:1d:c7:0d:9b:4e:4d:c8:08:ad:
                    c3:9d:b0:c3:5c:e8:8b:2f:d5:b7:9e:08:3c:b9:39:
                    ea:50:ce:39:54:77:70:f8:e5:a1:a2:fa:6c:c0:66:
                    b3:16:62:a9:f3:b7:f5:24:64:11:74:de:e8:89:cd:
                    e3:ce:b2:a6:29:07:f9:e9:ab:fc:b4:e2:8d:ac:af:
                    9b:66:8a:85:72:e2:89:93:33:6f:eb:a3:42:b3:5b:
                    bb:2b:40:d4:fd:31:e7:5a:9e:57:bc:3b:9f:b3:23:
                    9f:43:a3:c0:10:39:7f:cc:2b:07:68:34:89:5a:49:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1C:7F:3C:1C:9E:5C:C2:C4:33:47:D7:F5:E7:22:0D:4D:1E:89:9F
            X509v3 Authority Key Identifier:
                keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:e2:25:4f:0f:a2:37:38:85:83:72:6b:c2:bf:da:8e:e6:16:
         83:f4:82:8e:e4:e8:5e:24:68:e1:b1:92:69:d7:c2:82:09:19:
         34:9d:34:a7:0a:6a:2e:11:bd:00:0d:b3:c1:67:1c:61:9f:05:
         7a:70:72:d4:55:b6:dc:66:4b:94:77:0e:4b:28:d4:c1:78:37:
         f7:18:11:68:0d:39:ca:b0:95:0b:bc:a6:4a:86:ce:74:88:1c:
         c8:f4:e4:ef:07:d7:4a:f0:63:18:92:1c:15:9f:42:8b:a0:59:
         17:56:dc:42:e4:b2:47:4b:1f:c5:6b:96:d7:67:31:44:54:3a:
         bf:99:ab:97:de:75:b1:ae:bf:d0:55:ab:88:17:cd:73:ea:8a:
         57:d3:07:1e:ca:85:4f:b4:d7:0c:d0:c5:f8:bc:6a:07:5d:87:
         f6:07:0c:19:32:ea:3b:68:f2:a5:32:bd:77:50:fc:d9:cd:06:
         e1:b5:b6:0a:6d:80:4f:16:32:63:91:b8:18:3f:5a:bd:57:8a:
         e9:d7:7f:85:59:bd:e8:97:81:fb:3f:b6:81:08:0c:ca:00:1b:
         a1:8a:8b:0f:e2:18:07:67:ea:4b:83:75:6a:00:00:30:d6:8a:
         da:b6:95:8c:0f:3b:7a:b3:8e:87:0a:3b:49:be:60:63:58:f2:
         d8:29:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:59 2024 by rpki-client on console-fra.rpki-client.org