Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6EFBB4C68D2D11EF81C1CA65C4F9AE02.roa
File:                     6EFBB4C68D2D11EF81C1CA65C4F9AE02.roa (raw, json)
Hash identifier:          Ren9PLWUqr8dj5QsWiNtnz4ueMba1KPBajYNPqyt9rM=
Subject key identifier:   5C:A9:FC:39:AD:83:82:65:1E:4F:70:FD:B6:97:9E:BE:75:D4:49:70
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1BA5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6EFBB4C68D2D11EF81C1CA65C4F9AE02.roa
Signing time:             Fri 18 Oct 2024 08:46:15 +0000
ROA not before:           Fri 18 Oct 2024 08:46:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        160.187.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7077 (0x1ba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Oct 18 08:46:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67122056-b9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:5b:88:14:67:20:1d:82:f1:86:c6:8f:83:
                    c7:9d:b8:33:a9:72:c0:01:af:4d:e4:de:54:5a:6f:
                    e2:a7:97:25:b8:e7:18:8f:87:22:7a:ca:7e:40:b9:
                    64:e0:3d:3c:9c:51:ab:d6:dc:cf:d8:7e:92:09:39:
                    e3:33:6e:7c:bf:3e:76:0d:32:0d:bc:fc:eb:d8:6f:
                    ea:f4:df:61:85:78:6c:79:68:a0:52:e1:5d:80:49:
                    98:ee:ed:39:22:d4:85:1b:45:9d:d0:e4:94:7c:c9:
                    76:57:72:0b:e8:4d:59:8f:46:8f:3c:ec:6a:5b:69:
                    99:b9:ec:f5:74:47:12:96:67:5a:9c:f5:39:6f:02:
                    f2:2a:cf:da:eb:71:57:fc:60:cb:fc:b0:cc:6a:25:
                    72:2e:89:41:27:3b:4b:f3:ed:dc:73:59:6e:fd:3c:
                    30:f6:a9:ad:88:0c:43:8e:ff:7e:67:02:17:43:c8:
                    13:55:19:d3:f6:a9:47:10:61:6c:d1:20:cb:2f:97:
                    10:b4:4e:89:2b:c6:5c:d3:cd:24:2e:6b:21:b4:51:
                    73:2a:35:0d:84:6e:e3:37:06:14:d7:8d:12:06:42:
                    d8:cc:76:c4:71:f3:13:17:b7:1b:c4:23:63:a9:73:
                    7d:ee:db:53:bd:17:ea:ba:59:03:8e:25:f6:46:15:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A9:FC:39:AD:83:82:65:1E:4F:70:FD:B6:97:9E:BE:75:D4:49:70
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6EFBB4C68D2D11EF81C1CA65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:0a:f8:18:82:c8:2e:ad:1b:2d:10:0c:13:5e:12:f1:17:c2:
         b8:13:a6:2e:1a:c9:69:cb:ce:51:94:cf:77:59:13:58:6e:e8:
         1a:60:9d:a1:2a:ab:31:61:dc:05:0d:05:5f:48:99:af:19:d8:
         d7:50:17:36:39:62:44:a7:66:c4:79:b3:52:db:a7:a6:55:bd:
         48:bd:6b:76:8f:d4:02:00:da:03:93:f1:49:23:d7:af:b1:02:
         24:cf:25:72:69:ab:be:59:bc:da:89:c4:f5:19:f9:aa:b7:f4:
         2e:b5:d2:d7:ba:ac:39:12:cb:d9:74:1f:76:b1:ec:51:03:8c:
         95:3e:02:09:3c:bd:76:16:e9:7d:09:2c:d4:9f:e5:7a:4c:20:
         75:8d:8d:57:44:c0:5d:7b:32:df:ad:a1:ed:45:f9:d6:28:b6:
         bb:50:01:72:ad:d0:52:7d:7a:f8:c4:52:0a:0e:ed:ca:4e:d5:
         a2:5c:03:ca:2c:96:1f:8f:90:85:7c:ab:cb:ba:9e:3f:74:31:
         07:d2:10:6e:f1:00:99:83:7e:d4:46:ff:ef:d2:62:e3:1d:85:
         82:cb:c9:f0:72:83:55:d5:4f:0c:8b:06:49:8d:ae:ac:35:71:
         1d:75:ad:00:5b:82:03:4c:9c:15:3c:5e:2a:6f:1f:52:71:99:
         89:67:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:29 2024 by rpki-client on console-fra.rpki-client.org