Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A1BA2F2A58B11EF858D0F53C4F9AE02.roa
File:                     5A1BA2F2A58B11EF858D0F53C4F9AE02.roa (raw, json)
Hash identifier:          5wN+xyRkxzC1KSxjQknWFCxm5SRpuMOznpqM3fGfwcw=
Subject key identifier:   D8:EC:B2:78:D9:29:44:C0:22:EC:02:1E:38:A7:5B:54:A8:EE:D2:C9
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1BE9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A1BA2F2A58B11EF858D0F53C4F9AE02.roa
Signing time:             Mon 18 Nov 2024 08:59:01 +0000
ROA not before:           Mon 18 Nov 2024 08:59:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     141881
IP address blocks:        160.191.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7145 (0x1be9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Nov 18 08:59:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=673b01d4-8507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cd:f9:45:0f:94:2f:08:b6:53:f9:d5:88:62:
                    aa:4e:66:e5:1e:09:29:c3:4d:7a:0e:0a:37:80:26:
                    cd:ab:d2:d8:31:fd:5d:2d:99:2f:c1:93:c4:a0:dc:
                    75:85:83:da:fc:14:84:ec:0e:99:db:68:12:16:fc:
                    98:14:98:ca:9b:61:07:49:38:2a:e1:92:df:fd:f9:
                    d8:79:f7:ad:0c:9f:9a:b5:98:b0:68:42:14:02:96:
                    eb:8c:83:9c:09:62:f1:45:b5:50:f2:06:33:d4:50:
                    ee:9d:59:61:af:15:21:ad:cf:4a:69:c9:37:e4:4b:
                    5e:06:a1:43:9a:77:4d:5c:02:0b:18:94:3d:18:d6:
                    ce:36:e5:44:53:df:c9:a4:c7:c3:b3:ec:69:9b:03:
                    2e:3a:b7:ff:0c:af:75:bd:0e:db:27:d2:a9:f7:8f:
                    0a:db:f1:ae:68:e2:eb:66:07:b2:f3:0b:a0:d9:ca:
                    65:a1:bb:6d:33:e1:12:14:cc:99:d4:02:c7:fb:dd:
                    d8:75:2b:ee:d0:c4:b1:89:a0:d7:3c:cd:ec:8f:37:
                    56:b9:67:b5:5e:84:19:88:d3:f6:a2:46:67:ca:56:
                    67:b3:16:b4:f5:b3:7e:cf:4f:04:bf:e3:1e:1b:42:
                    b0:07:2d:14:db:1c:77:31:53:ae:75:22:d0:fa:66:
                    85:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EC:B2:78:D9:29:44:C0:22:EC:02:1E:38:A7:5B:54:A8:EE:D2:C9
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A1BA2F2A58B11EF858D0F53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:94:6e:66:fd:51:bd:a6:64:96:03:f0:5f:1e:c8:b3:8a:
         f0:13:19:6e:7b:d2:5f:e8:f5:32:b5:0f:e0:0c:7e:ae:68:69:
         8f:a4:1e:b5:af:b0:44:5b:d9:35:8d:76:bd:3b:fb:42:15:b9:
         c9:13:4d:46:68:1e:cc:88:39:b7:1f:ba:43:b7:85:2f:5b:ca:
         33:d7:06:ee:71:0d:30:e5:52:5e:ab:b5:55:20:60:f9:23:36:
         70:c3:fd:a0:d0:c6:78:90:3a:a9:42:29:c6:41:ab:b5:52:b7:
         f9:00:1d:ab:47:55:3a:ce:17:d9:47:7a:ec:5c:2e:a8:54:fb:
         81:c9:b3:1f:ab:da:c0:d0:3d:62:30:ec:cb:c1:c6:a4:45:ce:
         b0:9e:fc:15:b1:e1:eb:40:d5:e3:19:e5:95:b0:25:1b:cc:3c:
         92:5a:c7:b8:6d:ea:55:76:f6:ed:6e:6c:b4:4a:aa:ec:56:7b:
         a4:23:e3:a1:14:ff:af:77:c9:0a:b4:13:bf:3c:dd:00:86:c5:
         5f:98:d3:6b:c4:1d:9c:f5:03:5c:2f:42:c6:48:36:cf:54:26:
         fb:70:20:25:c5:15:2f:36:33:18:8b:67:52:ab:33:33:ce:34:
         88:90:09:59:99:b5:00:5a:ba:ee:87:32:ab:a1:c7:e3:b7:f4:
         31:ff:70:a7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICG+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQxMTE4MDg1OTAwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzNiMDFkNC04NTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9c35RQ+ULwi2U/nViGKqTmblHgkpw016Dgo3gCbNq9LYMf1dLZkvwZPEoNx1
hYPa/BSE7A6Z22gSFvyYFJjKm2EHSTgq4ZLf/fnYefetDJ+atZiwaEIUApbrjIOc
CWLxRbVQ8gYz1FDunVlhrxUhrc9Kack35EteBqFDmndNXAILGJQ9GNbONuVEU9/J
pMfDs+xpmwMuOrf/DK91vQ7bJ9Kp948K2/GuaOLrZgey8wug2cplobttM+ESFMyZ
1ALH+93YdSvu0MSxiaDXPM3sjzdWuWe1XoQZiNP2okZnylZnsxa09bN+z08Ev+Me
G0KwBy0U2xx3MVOudSLQ+maF5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNjssnjZ
KUTAIuwCHjinW1So7tLJMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUExQkEyRjJB
NThCMTFFRjg1OEQwRjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgv/YwDQYJKoZIhvcNAQELBQADggEBABLnlG5m/VG9pmSW
A/BfHsizivATGW570l/o9TK1D+AMfq5oaY+kHrWvsERb2TWNdr07+0IVuckTTUZo
HsyIObcfukO3hS9byjPXBu5xDTDlUl6rtVUgYPkjNnDD/aDQxniQOqlCKcZBq7VS
t/kAHatHVTrOF9lHeuxcLqhU+4HJsx+r2sDQPWIw7MvBxqRFzrCe/BWx4etA1eMZ
5ZWwJRvMPJJax7ht6lV29u1ubLRKquxWe6Qj46EU/693yQq0E7883QCGxV+Y02vE
HZz1A1wvQsZINs9UJvtwICXFFS82MxiLZ1KrMzPONIiQCVmZtQBauu6HMquhx+O3
9DH/cKc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org