Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/760623AE646111EF9977D95FC4F9AE02.roa
File:                     760623AE646111EF9977D95FC4F9AE02.roa (raw, json)
Hash identifier:          usXCy/NPIFmUm7zePOer7IIQwbXXc0CMAvrWamsWd5U=
Subject key identifier:   7F:42:12:82:CA:37:DF:99:67:F0:07:A8:7C:0C:DA:BB:09:E5:B9:13
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1BCC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/760623AE646111EF9977D95FC4F9AE02.roa
Signing time:             Tue 05 Nov 2024 06:37:39 +0000
ROA not before:           Tue 05 Nov 2024 06:37:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     139490
IP address blocks:        157.66.152.0/23 maxlen: 24
                          160.30.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7116 (0x1bcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Nov  5 06:37:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6729bd33-124b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:39:d5:46:1d:17:96:ba:2c:f5:80:b0:3e:
                    e1:f6:4e:84:1b:c5:a0:cd:c9:3a:c0:d5:ed:a5:4c:
                    d7:12:04:4b:09:1f:18:cb:36:f1:16:b0:51:2d:50:
                    3d:9c:74:1a:ec:41:a3:af:6a:83:87:e0:d4:58:f6:
                    05:f8:f8:fa:f0:3f:a8:84:d8:da:a0:cc:25:ce:fb:
                    c8:2b:27:83:d8:cf:fb:fb:25:28:f5:6f:a5:c8:57:
                    7f:62:0b:29:e7:49:3a:94:35:9f:80:60:62:20:af:
                    49:75:cf:e4:e4:d8:ad:00:b7:07:26:54:15:6c:82:
                    8e:24:e0:95:47:e9:f2:88:da:f2:5f:b2:26:24:a0:
                    35:12:f1:47:05:9c:39:5a:21:20:a7:4d:5e:4b:94:
                    63:1e:ac:de:2c:5f:34:ca:5e:e1:ea:62:ca:58:1c:
                    e3:de:9a:cc:3f:f0:19:23:d1:0b:c0:d9:4a:0f:db:
                    61:6e:5e:64:68:57:03:d8:cf:9b:22:5e:c2:e6:a8:
                    70:ba:53:61:ca:93:f3:98:04:25:f6:9e:17:97:6b:
                    eb:c9:a1:d5:c2:ba:57:d9:5d:21:5f:e0:ea:f5:d5:
                    45:4b:ff:73:cd:d7:59:4d:c0:be:1e:ec:8c:b2:17:
                    ac:06:20:2b:c8:f4:b7:d4:fa:1c:30:1c:73:82:f1:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:42:12:82:CA:37:DF:99:67:F0:07:A8:7C:0C:DA:BB:09:E5:B9:13
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/760623AE646111EF9977D95FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.152.0/23
                  160.30.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:b6:6f:cc:14:c5:dc:13:39:82:a8:33:e2:d3:29:8b:3c:30:
         1e:0e:67:3f:54:d9:6d:76:9a:ea:15:49:14:00:e5:6f:00:d9:
         44:00:1f:55:7a:26:f7:09:55:35:a8:8e:0e:e0:21:bb:d1:0b:
         da:7c:56:cd:82:6d:77:0e:f8:b4:33:3d:78:16:66:f2:e8:cb:
         c5:16:43:33:2c:3a:ed:c6:02:33:2e:44:97:2a:3d:37:33:db:
         7f:fd:a3:a5:d2:5c:96:ce:e1:64:e6:5a:25:ee:3c:9e:fa:60:
         38:73:16:b9:f5:0f:b5:10:d2:16:86:1d:0f:58:9a:99:c3:f1:
         1d:d0:69:2e:43:d5:bc:40:d3:91:0b:90:71:32:44:a6:13:61:
         d8:35:d6:34:d2:fd:d9:4e:df:6e:31:60:7a:f4:5f:dd:8b:53:
         84:a1:2c:69:67:52:3d:94:9c:58:f5:3e:52:99:28:fd:4f:bd:
         d2:42:f5:d3:40:81:28:02:ea:59:f3:ad:20:12:b9:4d:7a:c0:
         25:63:06:40:8f:ad:42:69:0f:c8:0e:4c:65:d6:6b:cd:f3:26:
         72:92:d3:97:12:f0:ec:f1:bf:56:17:67:d6:a4:0a:cb:ca:bd:
         ce:37:17:40:06:c4:52:31:4e:cd:73:ec:13:f2:14:75:3d:0e:
         65:86:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org