Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/29810CBE69B211EF9455261FC4F9AE02.roa
File:                     29810CBE69B211EF9455261FC4F9AE02.roa (raw, json)
Hash identifier:          0G8uGJ4dZCfvjnpW8PUW3boGLhZJWfk4sCRw/L4gD5s=
Subject key identifier:   AD:30:51:72:57:D6:AB:FE:5D:DA:27:1E:5D:F7:9E:A8:20:9C:A6:72
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1B27
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/29810CBE69B211EF9455261FC4F9AE02.roa
Signing time:             Tue 03 Sep 2024 05:05:40 +0000
ROA not before:           Tue 03 Sep 2024 05:05:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135701
IP address blocks:        160.30.144.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6951 (0x1b27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep  3 05:05:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66d69923-59d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:43:e3:ec:8c:8c:be:54:b7:ea:45:c6:33:
                    a9:4e:5e:0f:83:d6:85:b2:89:d1:10:5b:c4:42:90:
                    69:4b:8b:36:78:76:45:1f:78:53:7a:d0:77:aa:07:
                    b8:65:05:9e:82:97:b0:b9:39:c8:fe:60:d9:f5:d9:
                    fe:dc:ef:90:89:07:82:2f:0e:f2:17:38:52:b9:65:
                    7c:17:b1:e0:8d:f7:b4:58:a0:26:db:44:2d:a1:cb:
                    2f:e9:95:a4:f4:a9:4b:58:67:38:d8:a7:79:5b:2d:
                    fa:42:db:2d:b4:8c:42:d0:b3:5f:40:86:6e:1c:71:
                    ba:15:49:a0:8d:1c:a5:62:da:22:52:30:30:da:46:
                    d6:ec:13:90:c8:ff:0f:66:65:8c:6f:3d:57:49:80:
                    b6:35:07:43:8a:3b:dc:01:8a:b7:bb:ad:9a:9a:75:
                    1d:73:34:80:3f:c0:99:cd:9a:b8:bd:fb:cb:e9:a6:
                    9e:05:fd:8a:db:59:c2:f7:b6:54:ff:a3:77:84:2e:
                    93:e4:51:a2:82:3c:15:2e:37:77:de:d9:30:11:20:
                    df:78:c4:8d:ff:fb:4f:97:5b:d6:de:ac:65:a2:5c:
                    ef:26:57:9a:c2:45:6f:e9:e3:45:49:4e:38:51:24:
                    67:6e:51:0e:26:81:b5:0a:9f:fc:2e:21:a6:11:d5:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:30:51:72:57:D6:AB:FE:5D:DA:27:1E:5D:F7:9E:A8:20:9C:A6:72
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/29810CBE69B211EF9455261FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:54:5e:5c:68:f9:49:5e:ae:48:c8:79:bf:f7:1d:93:17:
         dd:a2:93:9c:72:13:37:31:31:52:1b:12:65:84:2f:ad:fe:3d:
         ba:3b:ce:1f:83:8d:c3:13:d9:6a:49:de:a2:31:6c:54:a3:a2:
         e7:dc:e4:65:99:57:5a:26:2d:c0:91:10:49:72:c6:df:10:2e:
         ac:e1:81:d0:65:9a:35:9f:14:07:33:85:b8:7a:39:0a:c6:ba:
         73:76:76:00:a5:b8:0c:e4:15:8a:56:66:6b:76:0f:02:fc:8d:
         72:d3:e4:1a:f1:56:63:67:d9:65:67:a2:f6:23:78:92:f8:96:
         58:ba:21:c6:e9:ff:5f:23:e7:9f:80:d3:e4:b8:2f:74:0a:91:
         e8:38:94:68:62:8d:fd:e1:44:17:b4:18:7b:28:a4:cc:b8:0a:
         c3:52:2f:d5:16:73:20:b2:d2:9f:6e:9d:09:f6:25:94:d8:a1:
         81:f3:fd:eb:52:67:b4:fa:9b:10:cc:21:11:37:c5:06:6c:92:
         10:9f:f5:43:40:0a:4d:a9:99:9b:e1:7d:9f:8f:38:1e:36:d3:
         10:ae:46:98:9f:f9:81:0a:c6:e0:31:30:b2:05:c8:36:bf:63:
         85:86:5b:a0:4f:6f:71:b4:46:94:b0:b2:9c:a1:53:cc:80:5d:
         6d:6b:42:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org