Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8913FB20AF7011EE9AFFFA7EC4F9AE02.roa
File:                     8913FB20AF7011EE9AFFFA7EC4F9AE02.roa (raw, json)
Hash identifier:          KEa1BWIgkvyaj60Z9fTPLCmLcuTt4kYT9u2bLZ+TsIg=
Subject key identifier:   A5:1B:D8:59:81:E3:F8:0C:2C:8F:F8:B4:88:3E:C3:88:AF:AD:46:91
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1897
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8913FB20AF7011EE9AFFFA7EC4F9AE02.roa
Signing time:             Wed 10 Jan 2024 04:27:17 +0000
ROA not before:           Wed 10 Jan 2024 04:27:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151722
IP address blocks:        157.10.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 15:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6295 (0x1897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jan 10 04:27:17 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=659e1ca4-9516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:8c:26:67:a5:f4:5c:23:88:0f:95:48:48:
                    07:ff:ae:10:30:f3:22:c7:3b:1e:b7:12:30:52:4a:
                    5d:59:c4:4c:64:05:22:a6:f1:bf:53:44:91:78:f1:
                    4c:32:92:ab:38:76:54:01:73:29:0f:ce:e2:1c:b5:
                    a8:90:01:0e:3d:5b:52:e3:a6:0a:63:37:9e:01:a1:
                    aa:5b:52:dc:f7:85:1b:fe:6a:a1:43:94:9b:1f:15:
                    a5:a6:a9:21:48:00:e0:1b:69:e7:a9:2e:91:f7:73:
                    3d:89:69:cc:ff:90:26:93:15:4a:70:f3:95:a7:8f:
                    be:be:1b:fd:b9:32:07:c1:e3:e0:2d:7c:54:4d:29:
                    19:18:20:90:72:ea:15:fe:ac:cf:ea:a7:6f:ae:c9:
                    d6:80:dc:aa:fd:3d:56:e5:1f:1f:0f:4a:41:92:64:
                    b8:fc:eb:1b:d1:e3:f9:59:a3:80:da:03:8c:f1:52:
                    2f:e8:3f:41:c6:43:f4:15:85:57:72:c5:5f:e0:6d:
                    c9:b4:c8:69:97:9d:a1:3e:83:81:30:59:94:55:82:
                    ff:67:fe:2b:fa:ba:74:96:44:24:09:b1:9a:b1:5c:
                    4c:3a:84:a8:18:9e:2c:6a:31:48:d0:68:ef:96:4a:
                    93:26:11:01:48:7e:cd:a6:55:1b:e0:58:94:6c:80:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1B:D8:59:81:E3:F8:0C:2C:8F:F8:B4:88:3E:C3:88:AF:AD:46:91
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8913FB20AF7011EE9AFFFA7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e3:00:fa:9f:d7:b5:cf:d7:ad:51:80:4a:1c:e5:7f:ae:d0:
         d1:0f:b0:8e:2a:e0:04:43:c0:8f:a5:c4:2e:33:21:f4:0a:02:
         e2:0a:0d:85:c4:4e:79:2b:98:f6:85:d0:ee:52:0c:a2:2b:7e:
         34:58:e1:c9:55:f1:77:16:c5:bd:dd:fb:92:dc:25:75:4e:bb:
         17:b5:4a:90:bf:4b:39:bd:6e:1e:19:b7:51:bc:27:29:7b:85:
         f9:ee:97:46:4f:aa:3f:31:03:e6:67:8d:da:c2:c1:b5:ba:3c:
         89:07:bd:c3:d8:10:36:7c:b3:0e:c1:6b:e6:65:b5:70:c9:15:
         c1:ef:d6:17:d6:76:87:3a:8d:fd:28:2b:b2:03:da:65:38:b9:
         65:bc:9f:ec:11:74:79:1b:53:e2:aa:1c:38:b1:b6:e7:65:e1:
         a2:c7:a0:f3:30:a1:21:a8:54:01:29:28:24:99:02:05:7a:89:
         4e:85:a6:b8:e5:82:5e:e9:30:a2:67:ee:e8:ea:2b:f8:00:d8:
         e3:a6:77:90:c4:e7:da:af:51:1d:45:0b:de:4e:10:9b:40:41:
         37:b2:51:f0:15:1b:aa:fe:f6:df:74:8c:a9:ac:19:9d:94:1a:
         95:7d:49:c1:95:7c:d2:2e:33:e0:90:2f:ce:9b:23:c1:84:54:
         b4:c9:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:24 2024 by rpki-client on console-ams.rpki-client.org