Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
File:                     58256D9AC4A711EEBE4ED82BC4F9AE02.roa (raw, json)
Hash identifier:          16yzlRAUCbN2L2nGaZ3zfiT9Z4v6PepeACDznHhCgZg=
Subject key identifier:   CA:93:14:BC:6B:DB:7E:CA:3F:F0:91:97:88:E0:83:C7:FD:50:F7:FE
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       19F8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:44 +0000
ROA not before:           Thu 30 May 2024 15:52:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150099
IP address blocks:        157.10.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6648 (0x19f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:52:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0cb-9730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:d4:d6:f8:cc:eb:dc:e9:b0:f7:1b:de:cc:
                    37:97:eb:b5:4b:3f:93:23:af:62:a5:47:e9:31:db:
                    60:3f:3a:16:04:76:7c:28:f6:6d:25:14:3e:5a:f2:
                    56:06:8d:a3:04:df:74:c0:11:0f:40:ce:06:cb:fa:
                    74:0f:20:e6:1f:a7:95:4d:79:e7:ee:d5:f2:4d:f5:
                    c0:2c:9d:63:2d:a9:67:bc:fb:fb:ba:d0:e7:25:a9:
                    ca:ba:24:8b:3b:c1:ea:c4:74:b9:a8:bc:c3:67:2a:
                    16:47:16:57:04:f0:e6:15:ab:90:70:f9:5c:6c:4c:
                    94:b0:cd:ea:ec:8a:1c:da:52:b5:cc:16:52:9c:0f:
                    20:b3:48:c9:d4:e8:eb:7c:ce:72:72:ba:25:7d:9e:
                    24:c6:2b:59:d7:f1:ce:ef:a4:1a:6c:ba:5b:df:c4:
                    36:e2:72:41:48:36:60:79:f0:aa:74:e2:8c:3a:fe:
                    c0:6b:f7:6b:dc:0c:e2:6c:ab:68:ff:f6:cf:4e:58:
                    68:04:2a:d4:d7:9f:70:3b:09:9a:39:94:4c:1e:d5:
                    6e:ab:90:dc:41:ef:5a:a0:31:95:e4:2c:3f:46:86:
                    85:04:c3:4e:b8:96:b8:ea:82:06:be:ec:4e:cf:b3:
                    49:ba:ae:f9:8e:15:14:78:d1:57:d6:6a:23:29:ab:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:93:14:BC:6B:DB:7E:CA:3F:F0:91:97:88:E0:83:C7:FD:50:F7:FE
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:45:4a:31:7c:a8:58:27:f1:fe:61:05:4b:35:cc:11:51:5d:
         00:49:b3:36:6f:5a:1f:d2:ca:f6:18:5b:29:15:cb:bc:6b:72:
         00:46:0d:0c:e1:2d:97:84:84:c7:73:16:42:a6:66:e0:f0:27:
         7c:b0:b4:82:9d:6d:c4:b3:a7:51:17:b0:33:f7:ef:0a:a3:b7:
         01:d1:d6:70:30:e5:67:f8:6e:20:14:b6:a9:17:25:47:be:47:
         94:23:5f:6e:c6:ab:33:a2:05:4d:7a:c2:4c:ca:d1:03:2c:e7:
         3f:f4:47:bc:08:31:d9:39:b7:e3:e1:37:5d:ca:96:83:86:37:
         04:3e:71:94:bf:4e:8b:1e:25:31:b8:84:ec:92:8c:18:7e:bd:
         d2:c0:4f:8d:26:47:db:f4:94:00:6e:5d:65:9c:e4:c5:53:8b:
         d5:6e:ff:55:5c:5a:4b:6b:7c:2f:3b:f3:5f:a9:e5:df:53:3c:
         bd:b2:43:39:00:fa:52:4d:2d:2c:70:74:24:5d:13:eb:f8:c3:
         59:ce:c7:3a:d5:de:b7:0b:ed:4a:38:29:6a:be:d6:a3:a5:17:
         56:bf:7c:7e:d7:73:ce:a1:f0:cc:e4:6f:27:8d:c4:22:60:98:
         63:15:65:21:eb:9b:42:57:cb:ca:95:b1:7b:2e:c8:66:1a:c2:
         73:e6:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org