Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/84FBDFD219ED11ECB996CC4FC4F9AE02.roa
File:                     84FBDFD219ED11ECB996CC4FC4F9AE02.roa (raw, json)
Hash identifier:          DqmoluaA44RPJQztHOJX5CXlOMcBoXQEioo/OYgl0v4=
Subject key identifier:   E6:C1:CE:7C:5A:4F:20:3C:F1:BB:8C:0E:D5:C7:35:49:04:6B:7F:1F
Certificate issuer:       /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial:       03CC
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/84FBDFD219ED11ECB996CC4FC4F9AE02.roa
Signing time:             Wed 11 Oct 2023 01:13:22 +0000
ROA not before:           Wed 11 Oct 2023 01:13:22 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     14537
IP address blocks:        160.32.240.0/21 maxlen: 22
                          160.32.240.0/23 maxlen: 23
                          160.32.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
        Validity
            Not Before: Oct 11 01:13:22 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6525f6b2-ced9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:be:e1:01:bb:c1:42:54:c2:d6:ba:c9:e3:
                    02:3b:04:90:f1:6a:b3:ca:f6:b9:7b:c8:61:e2:46:
                    9b:d2:fc:c6:4b:82:bb:a7:37:47:d7:2c:23:b2:60:
                    e0:6a:10:76:de:57:fe:15:e3:e4:a9:a1:d7:24:03:
                    51:f6:bc:ba:54:65:df:a7:92:93:e9:0b:b4:a9:c7:
                    e3:75:a9:32:4a:86:20:25:74:18:41:77:ec:29:c6:
                    4c:99:f7:1a:fb:17:09:fb:d6:5f:10:93:23:2b:eb:
                    e1:3d:9d:f2:60:04:49:28:49:3b:44:52:7b:5f:19:
                    74:51:ad:fb:19:e7:01:e9:d5:b8:8a:76:b0:34:9a:
                    fe:49:64:8b:0a:0e:af:1a:75:96:7f:03:1e:16:b8:
                    70:ed:48:72:86:a7:35:49:54:44:69:fa:13:a5:a3:
                    28:19:7d:b6:57:b3:ae:74:42:65:82:cf:5a:d3:83:
                    b6:aa:78:16:ec:8b:3a:38:c9:9b:be:8e:f6:27:de:
                    08:9b:a4:c5:01:fc:4a:47:ff:83:c9:41:30:29:ce:
                    07:85:b2:37:0b:56:88:15:52:22:53:27:93:97:3a:
                    1e:71:ed:be:45:e5:8d:ce:05:6c:fd:e5:69:96:08:
                    8b:39:d2:c6:7b:ae:b1:b8:27:2a:5c:be:a4:e6:f4:
                    ef:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C1:CE:7C:5A:4F:20:3C:F1:BB:8C:0E:D5:C7:35:49:04:6B:7F:1F
            X509v3 Authority Key Identifier:
                keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/84FBDFD219ED11ECB996CC4FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:37:f4:3d:64:f6:be:60:4c:c9:20:54:5b:0d:e3:4f:c0:
         fc:c8:1f:0e:a5:94:ed:ad:c2:7a:27:1c:db:b0:8d:55:ba:85:
         06:4a:6c:16:eb:d8:1b:f3:04:b0:92:cb:4f:d0:42:ff:3e:1b:
         86:db:a1:f3:15:ee:65:3f:f2:f8:4f:a6:bb:3a:8a:bc:91:66:
         c6:cd:71:5c:6b:84:cf:ce:42:27:29:67:e4:53:4c:ff:db:c8:
         44:3c:81:f7:ad:47:a5:17:fe:2f:73:1b:86:19:96:7c:6d:3a:
         68:98:de:27:08:4c:17:e6:ad:92:59:14:46:5a:e9:3c:c4:31:
         aa:49:e4:ff:ad:59:b4:f9:7c:d5:36:dd:b8:16:f6:bd:ba:9f:
         57:d4:5e:02:5a:79:0a:16:b6:31:dc:dd:4f:4e:1a:22:f5:c9:
         d3:15:8b:a8:b0:1f:e9:37:47:9e:74:b6:4e:e7:2f:c0:be:be:
         d7:be:4e:fd:ab:8a:66:c5:5d:4b:70:cb:2e:b1:6d:50:3d:ba:
         bc:fe:d1:2b:0f:bb:1d:30:32:0a:1c:a1:b0:4f:36:b5:30:e1:
         86:81:32:38:5b:e7:88:14:34:20:9d:ab:a1:19:ba:04:82:c4:
         9a:f9:c7:40:a2:2b:a7:e0:6f:b0:cc:0f:4d:c2:f0:49:f7:c6:
         89:51:70:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org