Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02FDC7D2ADFE11EE8512934EC4F9AE02.roa
File:                     02FDC7D2ADFE11EE8512934EC4F9AE02.roa (raw, json)
Hash identifier:          zX/MMKutscCuyqrDB6CQN7StID/8Zy6IifA1PTScyQg=
Subject key identifier:   AF:23:1E:E2:DD:A8:1E:5E:AD:11:2E:DA:56:30:BD:4F:EA:0F:1C:3E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       19FD
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02FDC7D2ADFE11EE8512934EC4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:48 +0000
ROA not before:           Thu 30 May 2024 15:52:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     151703
IP address blocks:        157.10.58.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6653 (0x19fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:52:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0d0-4e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:11:ec:7b:14:dc:92:a4:a6:4b:cd:9f:09:
                    53:dc:44:4d:79:1f:b7:38:5f:0b:41:54:4b:ce:73:
                    4a:01:b2:f8:c7:d6:89:14:10:07:e9:57:bb:b1:a0:
                    fb:eb:26:6a:a6:d2:64:37:e8:1a:13:32:85:69:0d:
                    41:e0:7b:b3:ef:bc:e9:84:78:ba:ca:56:dd:b3:2e:
                    a2:df:c0:d7:2b:9c:12:41:69:8e:94:90:74:18:67:
                    15:f4:b5:b5:f5:2d:93:0f:05:11:5b:31:3c:4b:dd:
                    4a:8a:59:79:48:9d:c4:53:da:a2:3a:64:81:2b:fb:
                    68:e6:5a:fa:4b:ec:91:e4:f8:35:9a:4b:3b:e3:4a:
                    6e:96:31:24:17:1e:55:89:0b:51:04:57:12:af:e0:
                    13:67:c9:17:18:21:fa:c5:44:fb:7f:d2:31:33:ad:
                    d8:f4:7a:ee:08:f9:f9:95:cb:c4:75:eb:d7:df:92:
                    db:77:06:1d:c8:a9:1d:8e:0e:79:b0:43:dc:2f:00:
                    ec:11:89:c6:d0:a1:64:2d:e1:25:0b:0a:70:87:c0:
                    9a:f3:82:b5:3b:fb:1b:7d:87:f0:d6:e9:77:58:7c:
                    19:37:a5:36:4e:67:47:76:9e:1d:7a:21:b5:41:9b:
                    3c:c7:5a:6f:cf:cb:e1:e1:46:8b:1e:fd:1a:b8:90:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:23:1E:E2:DD:A8:1E:5E:AD:11:2E:DA:56:30:BD:4F:EA:0F:1C:3E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02FDC7D2ADFE11EE8512934EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:f5:3d:39:fb:ca:cc:57:3e:14:a6:6e:fa:5c:8e:8f:e9:6d:
         ca:98:65:e4:35:f4:20:f7:47:d7:26:9e:3e:79:b7:1c:12:7e:
         78:5c:e1:e5:f1:41:b6:3d:2b:09:90:bb:e7:50:32:80:66:c4:
         e4:8f:28:f7:dd:66:60:17:9f:a6:80:1b:d5:bd:d8:d2:1d:39:
         2f:19:d6:ea:46:ab:4b:91:23:fd:9e:14:fc:63:82:3b:75:76:
         a7:b8:67:b2:a7:dd:f3:a1:74:fb:ea:21:39:aa:a7:09:72:a4:
         9a:26:03:41:89:d0:17:03:81:28:77:f8:ab:3b:15:b5:95:cb:
         3f:c2:44:f4:1e:fd:8f:e5:84:78:13:52:34:e1:cc:1e:25:dc:
         22:6f:47:3d:d2:21:14:bc:17:ec:89:c7:58:41:e3:73:a5:cd:
         bc:53:79:d4:e2:38:98:f9:c4:a8:4d:60:64:bf:55:ea:db:c6:
         80:a8:c4:13:39:0d:21:1d:bb:6e:b5:28:fc:a3:b9:27:e3:c3:
         2e:b6:58:52:b5:80:fd:cd:ce:90:df:f8:26:ec:70:bd:31:d0:
         97:0c:f6:c5:68:20:23:d6:7d:4b:45:cf:78:a4:be:da:26:5d:
         e9:d9:ca:0f:af:3a:1d:6b:8c:90:c9:bd:a6:0d:c0:dc:2d:dc:
         a1:3a:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org