Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5C399D6A6C2311EF98DCE774C4F9AE02.roa
File:                     5C399D6A6C2311EF98DCE774C4F9AE02.roa (raw, json)
Hash identifier:          gmhKAQEXvsZ8NfkdZ7OhvfCfHcuW/8g2LBKrWeWDutI=
Subject key identifier:   B7:5C:65:76:44:8D:FF:60:EB:69:3A:9B:6B:31:48:83:64:88:E5:60
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1B45
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5C399D6A6C2311EF98DCE774C4F9AE02.roa
Signing time:             Fri 13 Sep 2024 05:28:16 +0000
ROA not before:           Fri 13 Sep 2024 05:28:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152508
IP address blocks:        160.25.30.0/24 maxlen: 24
                          160.25.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6981 (0x1b45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep 13 05:28:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66e3cd70-a8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:48:e9:5f:b9:50:a6:a2:e7:6f:be:49:c3:d6:
                    6e:d2:f2:e6:1b:fc:7a:13:db:03:9a:6e:c5:a1:63:
                    1c:58:ab:c1:4a:dc:a6:f5:ed:74:91:b9:be:25:3a:
                    68:5a:30:40:f1:77:1d:24:13:de:29:5e:be:18:b0:
                    17:e7:ba:e9:08:6e:c9:26:f8:df:ce:30:06:90:35:
                    48:98:ae:8b:05:20:87:9b:95:83:f3:b6:19:6a:74:
                    d2:f1:f4:f3:65:22:c7:e0:da:e5:89:a8:c9:99:ae:
                    a7:91:f7:dc:7d:a2:21:59:3d:b3:5a:75:f8:6f:58:
                    df:92:ff:a8:f0:a4:ad:08:9b:27:74:cf:23:f0:d4:
                    81:ab:27:f9:c6:46:50:ee:f0:43:4f:bf:15:18:74:
                    55:b3:e8:50:ca:1d:2d:82:87:58:4e:37:ba:23:da:
                    c0:27:e2:2a:09:6d:75:e5:39:9f:b1:eb:a2:7b:d1:
                    02:b7:aa:cb:d4:d9:57:67:27:36:7a:1b:db:25:5b:
                    ab:46:86:9c:72:c3:f2:bf:fa:b7:a0:99:f8:bf:94:
                    96:1b:47:7a:dd:56:4f:28:17:d5:7c:57:5b:3f:2f:
                    9a:2b:96:b2:3e:fe:50:e7:c3:7c:e0:48:1c:a3:52:
                    a3:a4:9a:1c:17:8e:85:b5:df:15:fe:a1:c6:2b:25:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5C:65:76:44:8D:FF:60:EB:69:3A:9B:6B:31:48:83:64:88:E5:60
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5C399D6A6C2311EF98DCE774C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:dd:b5:8c:e1:7d:1e:04:61:d3:d4:f2:87:b7:35:d4:16:92:
         f3:cf:29:5a:32:9f:9f:0e:38:f0:dd:83:7c:2b:51:3e:81:66:
         b2:a2:80:e3:31:b1:f9:e8:1c:76:06:9f:bf:2a:3f:85:db:1f:
         bc:42:1a:60:aa:b2:3d:f7:16:db:dd:60:d9:2f:c8:03:b8:31:
         91:f9:0f:d8:a2:c6:3d:ac:f2:b9:fd:fa:9e:a1:cc:39:29:c6:
         6e:12:7a:de:47:29:9f:ec:bc:f4:52:b5:30:f2:b3:9b:b1:19:
         b5:81:4b:c4:95:2d:0f:e5:64:3a:6b:15:68:4c:9b:e7:af:43:
         1b:2a:7a:23:84:84:45:84:1f:f6:b2:7c:87:43:15:f4:e4:17:
         91:f7:a4:2d:b6:ee:83:93:d9:57:9b:b1:60:51:a5:f4:1b:c7:
         d7:35:53:30:c9:73:46:86:ff:7d:66:d4:2e:0c:b2:59:0e:d9:
         5a:94:0d:b8:dd:30:2c:1b:34:3c:9c:2f:17:16:e8:2a:9b:53:
         1d:3d:1f:d7:0c:9c:df:62:37:0d:da:f4:06:68:8e:05:5f:a9:
         9b:64:6d:c3:b8:e2:50:7a:ad:9e:36:e4:2f:bf:57:8a:82:4a:
         da:13:e7:2a:a1:04:69:43:64:56:d7:aa:ba:92:1b:17:8e:12:
         b9:51:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org