Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/62A457EACA4C11EE91F0C40AC4F9AE02.roa
File:                     62A457EACA4C11EE91F0C40AC4F9AE02.roa (raw, json)
Hash identifier:          SwYQJwiQt72EaK/iVBQbjsW+dEjaq45vdEmk4dtOi7Q=
Subject key identifier:   CE:A5:D7:01:0C:EA:1E:57:15:EB:21:99:23:BA:09:B1:CD:99:28:4A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       18E1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/62A457EACA4C11EE91F0C40AC4F9AE02.roa
Signing time:             Tue 13 Feb 2024 08:46:32 +0000
ROA not before:           Tue 13 Feb 2024 08:46:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151750
IP address blocks:        157.15.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6369 (0x18e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Feb 13 08:46:32 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65cb2c67-aa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3a:33:23:fd:eb:33:d4:62:d0:cd:76:32:be:
                    56:48:fa:ff:23:71:d7:5b:c5:31:e2:51:01:35:29:
                    b8:13:46:0c:09:60:b8:23:9f:9e:6c:2e:50:c6:03:
                    fb:b8:89:7a:7b:bf:de:1f:dc:bf:ff:b7:af:db:cf:
                    dd:8e:b3:f2:12:30:94:75:80:ae:34:53:e9:da:dc:
                    a0:11:97:38:46:82:30:84:ec:06:d1:0e:12:ee:20:
                    5e:5f:48:21:0f:6b:7f:24:d4:86:cd:13:ea:5d:df:
                    84:56:c6:c6:3b:73:d5:4f:03:6e:be:ed:68:f1:9d:
                    f3:cb:57:67:76:e6:f2:d2:f7:74:a4:75:9e:06:48:
                    be:8f:6f:4d:fa:3f:c1:d4:a3:2a:b4:67:7a:c9:24:
                    31:1e:5d:8a:fa:03:11:16:f2:84:09:9b:d5:3d:d4:
                    ab:d3:cd:22:3e:ee:3c:4a:97:31:63:d4:68:8e:f6:
                    fa:d4:86:a1:be:8b:18:95:01:41:e8:c4:d3:8b:cf:
                    4e:1b:01:20:c7:d0:66:54:e8:ca:20:51:aa:53:ee:
                    ce:3b:81:8d:79:17:f4:d1:c6:c5:cd:cb:de:8c:5a:
                    5f:94:62:fb:6a:62:10:43:ea:3a:9f:7f:1c:f9:47:
                    a7:bd:51:8b:7a:9c:2e:9b:f5:ec:2f:61:d7:46:61:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A5:D7:01:0C:EA:1E:57:15:EB:21:99:23:BA:09:B1:CD:99:28:4A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/62A457EACA4C11EE91F0C40AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:bb:ec:b6:f8:99:b1:49:5c:9d:88:48:b1:22:62:ef:f2:e7:
         26:6c:b7:79:0c:fd:ee:c2:06:fa:9d:ff:a9:7b:04:ec:4c:d9:
         a3:1a:8b:5a:5e:99:5a:f5:05:91:5e:d8:0b:82:8d:ae:80:39:
         47:16:a0:4e:a5:cc:d2:23:9e:9f:cd:07:d9:e0:f8:dc:0b:86:
         9e:de:8e:e6:dc:c3:3a:23:8d:d9:5c:86:39:db:8a:e3:1c:e7:
         aa:cb:1f:7a:87:87:09:d4:b2:d5:3a:13:09:2a:83:b5:38:c1:
         1a:1b:23:b4:63:b7:0e:c3:a1:d0:59:f8:4c:e4:a2:1d:17:a5:
         e3:00:81:89:79:17:6c:61:af:db:e3:ec:f0:b9:8f:00:6c:ae:
         5a:ef:e9:33:d5:9d:6d:df:92:4b:e1:7c:99:3b:00:19:9a:77:
         a5:09:2d:22:f2:7a:e4:64:f4:01:e1:d8:ec:87:94:ba:9b:09:
         84:87:45:7b:53:83:4a:2c:de:7c:7c:c0:30:af:f0:95:fb:ed:
         d1:d9:a7:a7:46:26:cb:67:a4:0c:21:7f:67:d9:e6:23:05:b7:
         e2:c9:f4:e1:4f:8f:41:41:0f:5f:b1:67:dc:e2:35:3a:b1:eb:
         0d:8c:b4:ad:70:35:ab:f6:37:10:4c:7c:f0:5c:5e:8d:5f:4e:
         9c:92:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org