Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/710F6176F31411EE8671CD66C4F9AE02.roa
File:                     710F6176F31411EE8671CD66C4F9AE02.roa (raw, json)
Hash identifier:          GwRHivf1Soubq55qjO+Gxl9hqLPSnEK1aUtfGhWE+0E=
Subject key identifier:   F5:8A:03:F6:E3:AE:E9:46:ED:F6:29:4F:0A:48:E7:79:09:9E:DD:E3
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1A26
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/710F6176F31411EE8671CD66C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:53:27 +0000
ROA not before:           Thu 30 May 2024 15:53:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152565
IP address blocks:        157.20.240.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6694 (0x1a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:53:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0f7-0342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:34:a0:dc:51:9c:4d:9b:60:0a:44:e4:57:
                    47:e4:20:3d:14:b8:27:99:8e:82:92:58:d3:94:0c:
                    98:7b:ac:da:30:ef:56:26:e3:84:d0:4b:bd:48:2a:
                    b2:71:14:b0:e3:d2:3b:90:35:4a:82:0b:af:41:81:
                    96:a9:38:76:f0:f4:ee:fd:bd:34:e2:56:9f:83:33:
                    38:55:d5:e1:8f:83:dd:10:2f:73:af:c5:7e:11:61:
                    77:4b:b7:a1:b6:af:41:cd:c8:56:e0:7c:d6:03:12:
                    d9:b1:44:ae:8d:12:ce:ae:74:04:a7:0c:c9:5f:9a:
                    99:24:d3:45:87:02:82:fb:3f:44:7e:4d:46:d4:aa:
                    00:2f:b7:2f:84:a7:cc:31:2e:c7:b7:bd:29:36:e4:
                    e3:6a:f6:e3:ee:73:8a:b6:1d:1b:98:af:72:b6:03:
                    47:06:48:b1:b0:a4:5a:90:c5:37:82:67:b2:28:aa:
                    e5:36:e8:10:a6:f6:32:31:8e:1e:b8:ec:75:42:ba:
                    e9:75:ba:a7:db:f0:06:b5:f6:8d:df:17:ab:54:78:
                    04:ef:82:8a:06:06:b2:13:3f:cc:e9:c9:7d:48:d4:
                    a4:05:81:e4:92:1a:0c:20:38:c3:81:09:cc:c7:4f:
                    16:c1:cf:90:58:95:5f:fd:9f:84:be:ba:f1:0d:57:
                    b3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8A:03:F6:E3:AE:E9:46:ED:F6:29:4F:0A:48:E7:79:09:9E:DD:E3
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/710F6176F31411EE8671CD66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:da:13:1d:76:fe:96:c0:7f:5b:25:18:5e:bf:e8:44:e6:1e:
         94:8f:d8:71:56:63:16:29:c3:e7:62:e2:bb:62:cc:4b:d3:7a:
         d1:8d:96:53:79:20:c2:1c:9e:33:20:f2:90:3a:d6:a5:bc:05:
         6f:e3:28:af:a1:5c:bd:39:13:5e:e5:da:dc:c7:4a:45:93:ae:
         02:74:b8:8c:87:cb:c5:e2:4a:36:67:52:b4:ec:d9:eb:6c:ea:
         ed:a8:09:8e:29:8b:11:3b:86:77:3a:ef:45:04:38:e4:66:5c:
         87:10:c4:74:56:b2:2f:c8:b2:a8:3c:7f:56:c1:53:89:ad:16:
         e7:3f:2b:f7:ce:dd:66:d0:15:ed:e0:f6:98:67:10:88:98:3f:
         52:21:8c:d6:d3:c6:76:e4:54:75:5d:d6:67:1c:6e:bc:d9:6b:
         31:05:8c:c9:7f:43:fb:ba:9f:6e:44:e3:61:7b:63:b8:ed:5e:
         91:f4:83:30:f6:25:27:ad:42:16:1d:75:29:75:44:1c:ea:29:
         8a:63:d0:f0:ca:50:51:c3:bb:3e:bc:85:b3:33:5c:cb:45:09:
         d5:4b:ce:e1:79:ae:c9:43:16:b8:e1:20:29:42:49:f7:0c:c0:
         7b:4a:fb:c2:ab:a9:11:13:8a:6d:28:71:93:42:f7:8b:88:7c:
         fb:f9:29:20
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQwNTMwMTU1MzI3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4YTBmNy0wMzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2qc0oNxRnE2bYApE5FdH5CA9FLgnmY6CkljTlAyYe6zaMO9WJuOE0Eu9SCqy
cRSw49I7kDVKgguvQYGWqTh28PTu/b004lafgzM4VdXhj4PdEC9zr8V+EWF3S7eh
tq9BzchW4HzWAxLZsUSujRLOrnQEpwzJX5qZJNNFhwKC+z9Efk1G1KoAL7cvhKfM
MS7Ht70pNuTjavbj7nOKth0bmK9ytgNHBkixsKRakMU3gmeyKKrlNugQpvYyMY4e
uOx1Qrrpdbqn2/AGtfaN3xerVHgE74KKBgayEz/M6cl9SNSkBYHkkhoMIDjDgQnM
x08Wwc+QWJVf/Z+EvrrxDVezmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPWKA/bj
rulG7fYpTwpI53kJnt3jMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzEwRjYxNzZG
MzE0MTFFRTg2NzFDRDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGdFPAwDQYJKoZIhvcNAQELBQADggEBALTaEx12/pbAf1sl
GF6/6ETmHpSP2HFWYxYpw+di4rtizEvTetGNllN5IMIcnjMg8pA61qW8BW/jKK+h
XL05E17l2tzHSkWTrgJ0uIyHy8XiSjZnUrTs2ets6u2oCY4pixE7hnc670UEOORm
XIcQxHRWsi/Isqg8f1bBU4mtFuc/K/fO3WbQFe3g9phnEIiYP1IhjNbTxnbkVHVd
1mccbrzZazEFjMl/Q/u6n25E42F7Y7jtXpH0gzD2JSetQhYddSl1RBzqKYpj0PDK
UFHDuz68hbMzXMtFCdVLzuF5rslDFrjhIClCSfcMwHtK+8KrqRETim0ocZNC94uI
fPv5KSA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org