Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/632D1A30B90D11EE8111F338C4F9AE02.roa
File:                     632D1A30B90D11EE8111F338C4F9AE02.roa (raw, json)
Hash identifier:          lZo76vBSMr8K3u5GBZLDQfqus4yke5N5cRj0953aTpc=
Subject key identifier:   D7:1F:CD:0B:80:DF:CE:FF:F2:35:65:15:CC:5E:48:A6:9C:4B:82:DD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1A0A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/632D1A30B90D11EE8111F338C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:53:00 +0000
ROA not before:           Thu 30 May 2024 15:53:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     151735
IP address blocks:        157.10.240.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6666 (0x1a0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:53:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0dc-3f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:0a:5c:d6:35:76:7f:45:76:89:5e:88:b1:
                    c5:3a:9a:c9:59:98:d1:bc:5e:49:ef:b7:63:e8:7c:
                    a6:28:f8:f5:7b:5e:35:e7:ef:59:85:63:38:4f:7c:
                    ca:c9:a1:ca:f7:9e:58:50:a8:bc:fb:d8:70:a8:7f:
                    98:4f:f2:5d:dd:07:9f:ba:35:6b:73:23:cb:82:d2:
                    9c:4f:6b:cd:2c:44:7b:f0:62:fd:c9:1f:a6:0f:94:
                    51:d4:6b:fd:8a:26:d7:af:c6:3c:63:81:06:81:75:
                    01:87:3e:41:ec:fd:cc:fe:40:b3:07:27:a8:e7:53:
                    3b:cb:9a:ec:90:de:66:64:52:26:44:db:c7:da:b7:
                    8e:7a:88:5c:7b:ce:f8:25:e8:1d:62:5a:1c:ce:e3:
                    53:d4:3c:87:de:75:14:f0:cd:2e:92:49:ff:ba:66:
                    34:53:ae:1b:11:c0:3c:63:73:61:79:5d:25:7b:26:
                    ff:0a:b7:1b:e2:f4:d8:c8:cd:04:8b:10:e0:7c:8d:
                    ed:ba:14:a3:a7:8f:98:73:60:cb:e6:dd:66:bc:5b:
                    96:cc:1b:85:63:9d:39:01:92:61:cf:a8:2c:6b:72:
                    44:fe:d2:6c:1a:29:1c:a0:b0:c7:c5:d1:b5:e9:e8:
                    5b:25:f8:e9:b6:e4:7f:63:4f:83:e1:85:1e:8f:37:
                    99:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1F:CD:0B:80:DF:CE:FF:F2:35:65:15:CC:5E:48:A6:9C:4B:82:DD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/632D1A30B90D11EE8111F338C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:eb:74:fb:09:99:71:59:f6:2d:2e:bd:2c:09:f4:46:0c:95:
         82:f1:29:9d:7f:5c:8f:92:09:b9:25:72:be:38:52:a6:50:85:
         65:25:04:36:7c:a3:90:78:c9:a8:80:c3:2a:12:9d:36:26:c8:
         84:53:dd:d4:df:7c:54:a0:a1:a6:f7:25:ab:84:5f:99:91:e4:
         b4:3a:73:8a:15:81:40:74:72:84:df:93:ed:11:a5:02:08:5e:
         b3:7c:15:cf:a0:22:66:54:4a:1c:e6:71:6c:2f:f6:2f:c0:cc:
         b5:40:75:f5:6d:58:3b:d7:bb:b7:5d:82:55:ab:83:0e:54:59:
         bc:f1:87:17:87:2d:ea:52:63:9c:4c:f2:5e:7d:c8:50:95:75:
         9e:77:9b:3e:b7:32:48:1c:eb:46:25:0a:81:31:44:58:53:a4:
         7d:a4:c7:41:ce:83:54:82:b5:88:15:69:cd:51:7d:53:dd:34:
         0b:b3:43:2f:d6:f7:b8:f1:5c:dd:b5:4f:a4:29:36:df:fc:68:
         f9:9c:d0:8f:fc:e1:a4:00:a0:42:c2:76:c8:2d:f1:1e:a0:d4:
         32:5b:df:b1:43:91:5d:03:55:a3:ab:d3:b2:ad:06:da:88:8c:
         b7:05:b1:be:50:f1:b9:68:b5:71:5a:fa:6e:e7:1f:8e:cc:77:
         ec:fe:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org