Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/625724D45DEF11EF9DFCB731C4F9AE02.roa
File:                     625724D45DEF11EF9DFCB731C4F9AE02.roa (raw, json)
Hash identifier:          G1NgdLFpnwQMGmBb7MPbHJ8aCabpS7A5oeELZx0/3t0=
Subject key identifier:   5D:BB:A1:B5:32:0B:2C:6E:58:EC:90:B8:CB:9F:80:34:81:8D:C3:EC
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1B0C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/625724D45DEF11EF9DFCB731C4F9AE02.roa
Signing time:             Mon 19 Aug 2024 05:53:40 +0000
ROA not before:           Mon 19 Aug 2024 05:53:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152549
IP address blocks:        160.22.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6924 (0x1b0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Aug 19 05:53:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66c2dde4-36e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:7e:31:6e:b6:3d:41:16:ec:6b:bb:c9:74:
                    f6:47:e2:41:28:24:16:46:04:ec:29:c1:da:77:42:
                    5f:57:bd:05:7c:2e:24:be:6a:26:4e:28:39:90:03:
                    e7:86:e9:09:eb:15:56:63:f0:01:bf:b1:0f:ad:8d:
                    43:12:f1:4b:87:42:b0:e8:0e:4b:60:e1:6f:e8:98:
                    d8:0c:c6:35:b4:c6:cc:42:c1:9e:90:58:88:89:ce:
                    d0:1a:47:87:cf:32:4a:10:25:c5:79:e5:94:34:9a:
                    c4:28:c6:16:26:3f:e2:aa:84:95:d1:0b:60:ac:0c:
                    00:d9:3a:ee:bc:d5:0d:56:72:6b:d9:95:be:dd:05:
                    76:fe:38:fa:4d:b2:00:f1:43:6e:3e:f9:09:bb:b3:
                    6c:bf:64:1a:d7:a9:be:ec:e4:12:0b:4f:71:a1:17:
                    8f:c3:d0:d7:8f:06:88:f7:ab:d6:d0:0a:03:e0:55:
                    07:7b:7f:34:1d:06:c8:fc:9a:0a:04:c0:06:93:dc:
                    21:48:a4:a1:eb:c9:71:0d:98:6e:fa:31:63:31:bb:
                    aa:33:69:4a:4f:e9:3f:64:83:79:ae:a4:20:09:e2:
                    c0:f3:e7:c0:96:85:6c:12:df:3c:02:8c:1b:de:35:
                    51:91:6f:b5:0e:25:11:77:9d:b7:45:f2:fe:f2:28:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BB:A1:B5:32:0B:2C:6E:58:EC:90:B8:CB:9F:80:34:81:8D:C3:EC
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/625724D45DEF11EF9DFCB731C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:20:f8:67:32:06:2a:70:e4:52:07:de:13:a9:6f:67:31:4b:
         0f:ab:91:df:a6:51:4c:14:c6:97:a7:05:63:8c:0c:9a:33:f0:
         5b:1c:73:36:26:29:c4:cb:2d:fa:a3:16:59:fb:63:c5:71:90:
         c6:59:18:97:5d:ca:e1:26:93:dc:4e:0e:77:0b:c2:3c:ce:39:
         6a:0f:d2:33:1e:8f:21:d0:e2:55:b9:f8:d7:a6:75:9f:b0:0e:
         c5:a4:e7:bc:38:8b:2d:d4:4e:cf:65:c8:8e:1e:88:da:98:29:
         97:b0:ea:64:f2:9c:10:ed:43:dc:be:99:f9:dc:6e:24:94:1f:
         86:76:74:dd:42:f9:a6:37:0d:67:eb:fd:74:a1:af:3d:cb:aa:
         bc:b6:9f:3a:56:5f:80:be:87:ab:51:5a:51:b9:b2:17:a5:33:
         d1:35:93:b6:46:ad:5f:97:c5:62:b1:4e:63:b1:c8:e1:94:50:
         1b:fb:4b:a7:75:4e:61:e7:83:45:5f:be:ad:2c:4b:20:73:45:
         01:3f:a6:7a:35:ea:72:cf:14:eb:b6:15:c9:c2:6c:a3:c6:04:
         09:c1:ac:fd:0c:6f:58:e8:c2:c7:a2:f4:76:b0:4f:21:cf:98:
         3d:b4:5d:70:4c:4a:9a:10:3e:37:ee:bb:b5:fd:57:ab:d4:33:
         00:ff:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org