Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/5495EE5C9B4311EF87E5073DC4F9AE02.roa
File:                     5495EE5C9B4311EF87E5073DC4F9AE02.roa (raw, json)
Hash identifier:          YBs0kfZTY2sABIi/xaIJAg5Ddfxg9MhnEpmdNb3MBps=
Subject key identifier:   24:EE:C7:2B:CE:36:3A:A4:23:D9:F3:F9:4C:B0:F3:01:AA:49:9F:FF
Certificate issuer:       /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Certificate serial:       15
Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/5495EE5C9B4311EF87E5073DC4F9AE02.roa
Signing time:             Tue 05 Nov 2024 06:58:16 +0000
ROA not before:           Tue 05 Nov 2024 06:58:16 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     153337
IP address blocks:        160.187.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl
                          rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
        Validity
            Not Before: Nov  5 06:58:16 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6729c207-94dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:7d:2d:e2:91:c7:14:a6:3a:5e:f2:5f:e1:73:
                    61:80:c7:7e:5b:e4:b1:99:b8:58:e3:1b:d5:05:25:
                    21:06:e0:d1:f1:0e:dc:07:e2:7f:fd:41:df:83:2b:
                    14:d2:a6:0a:fc:b4:2b:cf:aa:b1:15:01:a9:9e:40:
                    8c:10:89:81:a3:70:87:fa:1c:e0:be:ce:1a:03:15:
                    9a:1d:bf:d6:59:3f:0c:af:7b:dc:4b:d6:ea:b6:75:
                    64:85:6d:44:0d:5b:cf:78:ee:af:9a:33:0c:88:54:
                    04:e4:ca:b3:d4:53:8f:dc:88:ff:10:32:91:9c:08:
                    f2:61:00:64:e9:04:5d:d9:ff:27:15:41:74:6d:ec:
                    cb:a2:1c:92:e2:22:ae:a8:51:bc:82:c1:25:f8:ac:
                    48:d5:80:ac:26:37:87:ab:84:4e:28:a3:30:4f:32:
                    d7:ce:1a:79:b6:38:e0:47:a2:5c:07:8f:e6:ad:87:
                    a7:2c:6c:7a:2d:b9:c9:24:06:b3:96:46:19:4b:0f:
                    6d:0a:ff:c5:26:37:bd:01:45:4c:27:1a:79:b4:d8:
                    fd:81:c5:04:9b:dc:03:8a:06:48:19:56:93:68:84:
                    ec:bb:41:ea:2f:db:17:37:9a:3d:34:23:3d:0e:e8:
                    4a:03:de:dc:70:e9:2c:da:47:52:6a:7f:f7:fd:3c:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EE:C7:2B:CE:36:3A:A4:23:D9:F3:F9:4C:B0:F3:01:AA:49:9F:FF
            X509v3 Authority Key Identifier:
                keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/5495EE5C9B4311EF87E5073DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:4a:c8:97:e5:4f:a0:73:47:16:d3:61:36:17:70:18:95:
         57:a2:3d:da:20:ab:6e:6f:16:e2:0b:31:d0:8f:96:f5:48:6d:
         13:40:b2:73:fb:9f:3e:ba:60:13:36:52:45:0c:b0:fe:4c:dc:
         79:b1:17:19:ac:87:45:43:e2:b2:69:fb:74:ae:ef:b2:99:9d:
         ee:9e:19:6c:8e:a5:74:1d:4b:7d:01:ed:13:ab:8f:02:60:3c:
         15:e1:a0:f3:08:97:10:1b:9d:66:b5:19:25:ab:1e:bd:ce:33:
         ad:6b:c1:2b:26:12:80:98:9f:8f:0b:ef:79:f0:d9:4a:ae:3a:
         43:22:06:7a:e7:df:07:28:13:28:0f:c0:66:5a:0d:4a:88:5b:
         d5:fe:fe:19:84:c6:3f:d1:8c:8b:df:9c:b5:d9:d7:bd:04:24:
         6b:c8:56:1a:a2:50:e7:cf:ec:c0:cf:55:8f:a2:21:61:ec:09:
         ca:ff:18:da:ba:14:85:1f:9d:77:97:6a:e6:ba:b4:04:9c:6e:
         f2:94:d1:6d:68:19:bf:c3:2f:5d:a3:78:09:06:e5:2c:ed:5f:
         61:71:29:18:9f:23:42:89:87:42:54:be:5e:c7:07:e3:a5:51:
         cb:da:2d:3e:51:9f:ba:e6:3b:83:4a:cf:82:04:7c:a0:d7:bb:
         fb:44:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:07 2024 by rpki-client on console-ams.rpki-client.org