Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9F252B5206EE11EFB5315743C4F9AE02.roa
File:                     9F252B5206EE11EFB5315743C4F9AE02.roa (raw, json)
Hash identifier:          qUET+Prt7q+V0y1PmegDXWDeekMzGS4OA5cKgrv2cQs=
Subject key identifier:   E0:64:4A:9D:4A:EB:83:43:F5:52:B7:BD:E7:49:02:10:D6:40:F2:8D
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       19E6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9F252B5206EE11EFB5315743C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:28 +0000
ROA not before:           Thu 30 May 2024 15:52:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     136362
IP address blocks:        157.66.102.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6630 (0x19e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:52:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0bb-3117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:96:00:41:f2:25:b1:5d:a4:e1:08:05:0b:
                    41:81:54:57:75:4c:ed:29:21:fb:6a:57:3c:27:ae:
                    e6:0d:16:e7:41:77:00:0c:a8:88:ec:fb:03:63:10:
                    5f:92:47:1b:ef:25:ef:3b:f4:5c:b1:1d:5e:fd:55:
                    27:85:a5:17:4b:4d:11:c8:40:f3:41:c5:21:80:d1:
                    99:81:e5:61:3c:25:c0:73:46:18:00:3d:65:69:e4:
                    22:01:d3:8e:12:4e:81:63:a9:98:50:c0:2e:c8:84:
                    df:4d:66:ed:44:08:f6:9d:44:05:72:db:38:69:ea:
                    82:58:c8:57:02:03:5e:4e:13:d0:3d:2a:4e:b0:dd:
                    ee:7e:64:9a:e7:51:d0:d5:5c:87:ff:14:00:a3:0b:
                    e1:58:b5:64:0f:84:53:e2:cc:31:ea:d6:42:a0:36:
                    2e:ad:e8:4e:dd:56:11:a1:6d:da:28:a8:3a:f5:79:
                    53:69:6b:31:8d:34:c2:4d:68:3b:9f:21:ab:f4:69:
                    76:c9:e3:17:12:0b:e3:34:f0:69:21:1d:8c:e3:61:
                    63:ec:be:5b:f4:ad:ef:ce:6c:42:d5:d4:b0:7c:f2:
                    0f:64:5c:45:45:63:44:73:4e:56:d9:7e:f4:0b:23:
                    5a:6a:f6:ee:cc:19:e8:32:f4:8c:24:ac:7c:8f:86:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:64:4A:9D:4A:EB:83:43:F5:52:B7:BD:E7:49:02:10:D6:40:F2:8D
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9F252B5206EE11EFB5315743C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:81:5b:82:6f:e9:61:fc:1f:38:bf:9d:0b:4a:c2:e1:21:f9:
         a7:3f:8c:fe:32:54:8a:4c:d1:70:f1:9b:7e:f5:9b:74:65:79:
         cb:50:3e:65:44:06:1f:78:75:40:87:53:f5:69:13:91:09:b5:
         b8:1b:5f:2f:27:66:6e:17:c3:8d:0b:ea:bc:be:7c:1f:f5:c6:
         59:42:d5:ca:48:fd:0b:df:67:b4:6b:f8:11:02:f8:77:c5:0c:
         6e:d7:ab:1a:45:ed:08:d0:9c:5b:e6:5f:ec:37:6a:51:12:ec:
         21:1a:c9:ab:cb:e8:f8:60:f6:dd:33:e0:40:a5:d4:e9:b1:64:
         c8:da:2f:d8:f7:29:7e:a2:ec:b5:b5:b0:39:d3:1e:18:5c:d7:
         91:07:9f:80:f7:76:43:12:98:fe:99:1b:d2:f3:40:a3:32:73:
         60:8a:5c:ad:d4:1c:cb:ce:3d:91:77:a4:85:a2:07:3b:dc:db:
         ad:77:09:1b:eb:88:93:b3:13:7a:a7:90:ce:92:27:4a:a3:67:
         1f:ed:b8:c2:8a:9e:af:0f:1f:37:48:b2:92:b8:6c:18:6a:65:
         7b:4d:21:c8:77:32:74:93:1f:4f:cb:6d:82:65:38:f0:28:2b:
         10:b1:30:89:00:e7:55:3e:0c:83:c1:4a:97:3f:d7:cc:3b:8e:
         27:d9:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org