Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5B2F74AC759811EFB4EBF76EC4F9AE02.roa
File:                     5B2F74AC759811EFB4EBF76EC4F9AE02.roa (raw, json)
Hash identifier:          tQCNdJtOyIDZbzuL3J5aO9viM7c67tXI8w+BlLdCvFU=
Subject key identifier:   18:A3:24:7F:E6:BE:C8:2C:69:61:43:9F:4C:CE:C6:D8:0A:42:E6:8C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1B4F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5B2F74AC759811EFB4EBF76EC4F9AE02.roa
Signing time:             Wed 18 Sep 2024 08:31:10 +0000
ROA not before:           Wed 18 Sep 2024 08:31:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     153216
IP address blocks:        160.30.214.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6991 (0x1b4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep 18 08:31:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66ea8fce-d032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:96:53:39:bb:c5:6e:9d:7d:8d:ce:71:1f:
                    d8:48:0f:05:c0:bd:11:9a:a9:d1:1d:40:79:75:2c:
                    bf:ed:cc:ae:36:15:05:5c:e5:42:a9:a2:ed:a4:22:
                    1b:d9:3c:68:bb:4f:9f:4e:43:0c:5d:db:4a:f2:e5:
                    8b:d7:58:61:4e:64:2c:cf:6d:4f:88:18:3c:66:9a:
                    ab:7b:4d:2c:17:eb:a2:22:77:00:3d:27:5f:04:b1:
                    54:60:e2:65:ea:c0:6f:01:0b:f8:af:64:04:44:1a:
                    40:9a:2f:89:5d:b7:d4:08:66:37:cb:73:0a:a3:ba:
                    1a:13:54:b7:c5:a4:eb:35:29:1e:f4:46:8e:3e:f4:
                    54:6d:bf:4f:8e:1e:f6:ee:26:ca:38:39:54:b5:2d:
                    e3:3d:97:30:91:a0:c7:bd:a6:7a:47:da:86:dd:c2:
                    09:6f:36:b6:85:64:e0:0f:ab:26:b8:43:23:59:11:
                    75:40:d9:9e:cf:32:f6:3b:05:55:a7:10:35:58:20:
                    b1:fe:cc:e3:e3:60:f6:26:d6:87:cf:c4:c2:17:48:
                    51:43:a8:41:dd:8b:ec:10:3b:63:5c:24:32:de:d9:
                    eb:64:17:6f:8e:15:3c:10:b5:6b:6c:d2:24:0e:b9:
                    18:23:d8:e5:e2:4b:7d:bd:8d:98:a9:fa:64:a5:3a:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A3:24:7F:E6:BE:C8:2C:69:61:43:9F:4C:CE:C6:D8:0A:42:E6:8C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5B2F74AC759811EFB4EBF76EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:32:f2:4e:c5:00:3d:f3:b4:05:46:38:6e:43:e1:1b:d8:7b:
         9c:49:6a:88:9b:18:ef:26:c3:02:35:79:de:d8:26:21:27:29:
         3a:5d:29:a7:3e:e4:c4:e1:c6:e7:e7:bf:58:23:ab:e7:4b:35:
         df:a8:19:c9:bc:99:d0:a0:0f:05:0f:56:e1:b5:10:3d:c1:82:
         32:89:4f:3a:a8:62:46:2f:dd:5e:76:47:e7:6d:3a:0f:6b:d6:
         65:c5:78:e4:0b:98:3b:5c:d7:06:26:3f:07:93:d0:14:e7:d0:
         c8:00:80:0b:32:2c:88:80:44:e6:33:f4:7a:33:73:6f:84:2b:
         e6:35:e8:eb:59:0c:53:96:de:ef:bd:75:cd:da:6e:c1:6c:7c:
         25:11:12:c4:13:88:5b:d0:a9:90:8e:d6:d6:71:1c:e7:df:ad:
         d7:83:16:b5:66:26:2d:c9:b5:7c:6e:b4:b2:72:0a:91:77:51:
         ee:14:5d:66:04:e5:64:c1:7f:15:d6:26:2f:b1:14:c5:24:0e:
         f3:0a:89:43:50:c2:77:f3:82:52:e2:d3:2d:e4:2e:06:77:56:
         87:48:e5:ab:28:23:b8:9a:50:44:ac:e0:3c:df:ca:be:33:a1:
         f2:28:3e:fa:9e:9b:f0:44:27:a1:68:6b:e2:65:d4:52:ca:62:
         7d:8d:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org