Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/981259BEE02B11EEB402C50AC4F9AE02.roa
File:                     981259BEE02B11EEB402C50AC4F9AE02.roa (raw, json)
Hash identifier:          c2h/KjLs0xQxeQPqw6WiIKf+2bVBFZ+tHIxzXmehJ4E=
Subject key identifier:   2A:46:05:35:EB:9D:1C:24:94:2D:44:1F:48:04:FC:C0:01:BE:8E:8B
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       19F7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/981259BEE02B11EEB402C50AC4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:43 +0000
ROA not before:           Thu 30 May 2024 15:52:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149591
IP address blocks:        157.20.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6647 (0x19f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:52:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0cb-46bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8f:c0:a1:b4:87:fc:c8:16:f9:4f:c0:83:4e:
                    13:20:19:2d:3c:11:e8:da:a7:48:30:30:e0:54:15:
                    43:ca:08:30:8f:a0:e5:a2:f4:12:4f:66:3b:b0:05:
                    09:01:d1:9b:e0:e7:b1:f0:ef:06:fd:c6:74:04:cf:
                    be:d1:54:07:1d:fe:9f:23:02:7c:7c:a2:61:3d:0a:
                    33:1e:d9:36:92:f8:fa:d6:ab:d9:a7:54:fb:29:95:
                    03:bb:90:12:2b:f9:4d:bd:3e:bc:01:d3:27:cc:f6:
                    88:78:a0:d4:3a:61:2e:e1:c9:9b:74:e7:d9:e9:14:
                    c1:73:03:05:c4:25:f4:d6:e5:13:c7:7d:89:8b:92:
                    7a:f0:52:07:e6:c2:c2:95:27:ea:43:e0:94:ca:35:
                    a9:b9:4c:51:a1:c5:48:d8:f8:8e:4b:22:49:35:e7:
                    37:f6:b1:a6:d2:c2:a9:8b:dc:6d:f3:b6:d9:6a:62:
                    8a:8f:fe:cc:ae:a5:70:b5:28:29:80:e7:6b:fe:e5:
                    e9:2c:23:7a:cd:d8:03:4a:e5:d4:9f:cc:d9:34:f5:
                    98:f0:1a:c9:d8:e8:fa:bd:42:02:8f:43:88:69:a0:
                    a2:30:3f:97:4d:de:b2:89:f7:11:8e:a6:59:25:af:
                    23:9d:c3:51:05:c0:37:97:d0:a8:2f:31:c1:02:8b:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:46:05:35:EB:9D:1C:24:94:2D:44:1F:48:04:FC:C0:01:BE:8E:8B
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/981259BEE02B11EEB402C50AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ff:16:b2:3d:66:14:38:10:f3:c5:41:f2:80:21:ea:61:dd:
         67:fb:3b:f6:d7:ef:91:d2:12:c0:21:89:27:45:3e:b4:d5:4c:
         71:f0:1d:81:97:61:a4:ff:fa:db:87:11:ce:c2:0f:79:8c:17:
         b5:d9:e5:4b:40:8e:32:92:62:c5:83:31:58:d9:0a:34:e2:18:
         83:8d:0a:88:48:dd:5c:4a:2f:35:48:f9:e5:fc:78:8e:03:d1:
         e2:34:55:3b:57:da:50:df:cd:0b:39:01:44:ad:2c:a0:a2:77:
         80:94:9d:8f:7e:14:85:cb:23:60:9f:1d:b6:06:9f:69:a8:8b:
         6a:1c:89:74:fd:4b:06:7f:12:06:2b:5f:f5:ba:b8:32:0b:a4:
         04:a6:3c:cc:34:17:fa:be:72:db:ce:73:7d:f7:eb:97:77:28:
         4c:0d:1b:77:cd:a3:22:c4:31:5d:5b:fb:2e:cf:9d:33:14:bd:
         08:3a:c8:75:6e:d7:95:ee:39:e5:ac:41:60:a6:40:a4:96:27:
         c7:19:85:25:2f:4e:a4:b0:8a:a8:2b:5e:61:2d:79:33:c7:5e:
         70:d5:e5:0f:7c:32:60:b7:2c:14:38:22:c1:b1:70:9a:ac:11:
         14:64:26:b7:c7:fa:c1:05:53:1d:74:f2:d3:2e:76:f2:18:2e:
         c1:84:4b:da
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQwNTMwMTU1MjQzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4YTBjYi00NmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApo/AobSH/MgW+U/Ag04TIBktPBHo2qdIMDDgVBVDyggwj6DlovQST2Y7sAUJ
AdGb4Oex8O8G/cZ0BM++0VQHHf6fIwJ8fKJhPQozHtk2kvj61qvZp1T7KZUDu5AS
K/lNvT68AdMnzPaIeKDUOmEu4cmbdOfZ6RTBcwMFxCX01uUTx32Ji5J68FIH5sLC
lSfqQ+CUyjWpuUxRocVI2PiOSyJJNec39rGm0sKpi9xt87bZamKKj/7MrqVwtSgp
gOdr/uXpLCN6zdgDSuXUn8zZNPWY8BrJ2Oj6vUICj0OIaaCiMD+XTd6yifcRjqZZ
Ja8jncNRBcA3l9CoLzHBAovMtQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCpGBTXr
nRwklC1EH0gE/MABvo6LMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTgxMjU5QkVF
MDJCMTFFRUI0MDJDNTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACdFMAwDQYJKoZIhvcNAQELBQADggEBAH3/FrI9ZhQ4EPPF
QfKAIeph3Wf7O/bX75HSEsAhiSdFPrTVTHHwHYGXYaT/+tuHEc7CD3mMF7XZ5UtA
jjKSYsWDMVjZCjTiGIONCohI3VxKLzVI+eX8eI4D0eI0VTtX2lDfzQs5AUStLKCi
d4CUnY9+FIXLI2CfHbYGn2moi2ociXT9SwZ/EgYrX/W6uDILpASmPMw0F/q+ctvO
c33365d3KEwNG3fNoyLEMV1b+y7PnTMUvQg6yHVu15XuOeWsQWCmQKSWJ8cZhSUv
TqSwiqgrXmEteTPHXnDV5Q98MmC3LBQ4IsGxcJqsERRkJrfH+sEFUx108tMudvIY
LsGES9o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org