Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/497464A4FD5F11EEBF4BFE32C4F9AE02.roa
File:                     497464A4FD5F11EEBF4BFE32C4F9AE02.roa (raw, json)
Hash identifier:          jQHX0XNVnBPJ0b2jcSuoXWnNzg9ki4YRcx51hLfc0tY=
Subject key identifier:   55:7C:9D:55:FC:95:F1:53:34:24:EF:A4:80:5A:37:CE:8A:56:F6:92
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1967
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/497464A4FD5F11EEBF4BFE32C4F9AE02.roa
Signing time:             Thu 18 Apr 2024 08:40:19 +0000
ROA not before:           Thu 18 Apr 2024 08:40:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55410
IP address blocks:        157.15.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 15:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6503 (0x1967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Apr 18 08:40:19 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6620dc73-69fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1d:23:71:1a:9e:88:ed:82:e2:c1:a7:f9:20:
                    a6:b6:9b:b8:9f:c4:5a:fa:0e:13:b4:ff:b5:9c:c0:
                    a4:30:ae:2c:ed:54:06:d1:f3:98:ec:4e:c5:72:c0:
                    fb:ae:0b:b2:61:4a:6e:32:4b:c6:a3:62:17:88:60:
                    53:97:34:a6:84:b1:dd:c4:89:5e:a3:8e:12:22:1f:
                    b5:2f:df:5c:59:88:5f:02:91:c6:d3:3d:b3:f7:07:
                    6e:47:2c:f1:3f:79:cd:a7:62:d8:84:b0:d3:77:65:
                    9f:e8:0a:f7:3e:39:21:de:eb:01:3a:2b:8d:65:e1:
                    59:f6:a3:5d:53:75:c7:ce:b3:a8:84:73:6a:38:57:
                    f4:6b:99:04:cd:26:c8:49:d6:39:dc:98:e4:87:46:
                    37:2d:a4:2c:ec:1a:e4:ef:57:40:07:05:ee:96:92:
                    1e:6a:22:54:fa:ce:a8:6e:1c:2e:3b:ca:2a:a0:e0:
                    2b:2f:17:78:2d:3e:d9:d2:01:25:a3:8f:8d:ca:9a:
                    0b:a8:e4:ae:73:9a:34:fd:df:b5:4f:b9:7a:4c:69:
                    ba:b6:51:9c:39:61:08:22:8d:68:d3:c9:4d:c5:1c:
                    7f:41:a6:2f:b9:97:25:11:1d:bc:29:a6:55:a6:6c:
                    11:91:8a:3b:a8:39:8c:0e:4b:8f:17:a1:0d:25:13:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7C:9D:55:FC:95:F1:53:34:24:EF:A4:80:5A:37:CE:8A:56:F6:92
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/497464A4FD5F11EEBF4BFE32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:fa:49:3e:d5:b6:f4:f1:e4:0c:d7:00:60:b9:5f:1b:86:77:
         16:be:a0:7e:9f:78:44:29:f7:b0:83:c4:94:14:c6:82:a6:bb:
         25:0e:32:25:4b:29:7c:c1:4f:5c:8d:25:f2:17:65:e4:4c:c2:
         a9:3b:c7:a3:b4:81:7f:03:e0:30:7a:8a:03:5f:b2:fe:a9:4c:
         77:4d:22:05:71:c2:3c:fd:2e:ce:35:0b:58:ec:c6:9a:f3:d1:
         59:71:c7:2f:eb:af:43:be:8e:2e:59:c0:bb:79:57:c8:22:00:
         07:cb:28:22:10:42:05:e7:35:dd:36:64:38:f1:e7:88:76:02:
         76:69:cf:a4:11:d9:46:23:70:ff:8b:af:04:bd:00:cf:2f:94:
         7f:e0:14:a4:f0:aa:2e:f3:fc:5d:e5:c0:37:6e:37:02:51:1d:
         6d:d5:6c:4b:ca:c0:ae:6c:30:38:6f:48:aa:1f:9e:44:9f:06:
         8b:94:d7:7a:1f:3f:83:cd:89:12:dc:f2:64:74:b9:b9:d5:52:
         52:07:97:e5:a1:c5:e0:7d:71:f4:05:3a:e0:f8:7a:e4:2c:2a:
         a5:7d:45:cc:fa:e5:bf:51:f4:8a:d7:97:02:b0:2e:d8:d6:72:
         7c:2f:0b:02:85:21:5e:97:c1:bc:c6:fc:90:ae:0e:53:60:41:
         e8:10:11:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:24 2024 by rpki-client on console-ams.rpki-client.org