Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9F252B5206EE11EFB5315743C4F9AE02.roa
File:                     9F252B5206EE11EFB5315743C4F9AE02.roa (raw, json)
Hash identifier:          cpqZy047HXfh5tA79C22UiBxA8UfXphY2M1Q1zz9Sv8=
Subject key identifier:   13:DC:CA:0D:E5:AD:36:E9:FC:4B:5F:0F:50:89:12:4F:FC:A9:28:E2
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1993
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9F252B5206EE11EFB5315743C4F9AE02.roa
Signing time:             Tue 30 Apr 2024 12:39:01 +0000
ROA not before:           Tue 30 Apr 2024 12:39:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136362
IP address blocks:        157.66.102.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6547 (0x1993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Apr 30 12:39:01 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6630e665-6dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:88:af:31:4d:69:f2:90:fc:5b:26:b7:71:
                    61:04:89:60:f3:b3:c4:ae:3b:89:31:39:3a:7e:49:
                    83:47:8c:60:92:93:38:2e:9f:74:1f:73:c5:90:75:
                    12:ba:38:59:b0:5b:34:6d:81:7e:69:b2:e3:46:cc:
                    b2:d7:d9:83:3d:aa:59:77:af:fe:d4:c0:0e:ad:c8:
                    eb:89:73:f4:40:41:a0:83:25:97:8a:5e:c2:60:af:
                    27:1b:d9:b3:a9:ef:2f:d9:6c:f5:f2:14:fb:dc:83:
                    00:83:d1:97:fc:2a:cc:5a:a4:98:c2:f5:11:3e:c9:
                    e8:98:d0:3f:b7:df:79:9a:25:28:77:0c:3b:cd:07:
                    7c:48:3b:b1:2e:52:95:fa:d0:87:be:f5:e3:fb:ff:
                    f2:18:7a:7e:94:2a:07:04:8f:8d:d4:e5:a7:d9:1e:
                    ad:37:d4:fc:e0:39:3a:03:b2:fe:02:a8:52:0a:e7:
                    3b:48:34:da:53:c7:7b:ec:de:27:9b:ea:34:2b:78:
                    41:8a:f3:9b:1c:3d:21:12:ab:34:65:6b:62:71:e0:
                    43:f7:50:7e:d2:64:19:2f:55:8d:cf:6b:95:13:8e:
                    f3:3a:ef:04:89:c3:fe:43:47:5c:2c:d6:db:ec:48:
                    64:2e:ef:59:49:d0:11:e3:cc:5d:7a:0a:0c:f3:e4:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DC:CA:0D:E5:AD:36:E9:FC:4B:5F:0F:50:89:12:4F:FC:A9:28:E2
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9F252B5206EE11EFB5315743C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:16:4c:ff:5c:12:cf:ee:87:3b:7e:50:da:dc:35:22:96:
         0b:f2:ce:2f:72:12:40:7d:06:7b:ba:ba:ce:c0:61:77:f1:d3:
         b5:b5:b0:13:c0:48:dd:3c:32:f4:1c:7d:6c:db:69:05:62:c5:
         d9:c7:d5:24:e9:75:27:c0:36:48:60:75:3e:6a:fe:a8:5e:06:
         ef:01:be:6e:4d:b8:7e:7a:5b:b1:a4:05:eb:58:a7:17:c6:88:
         91:ea:a0:09:54:a7:61:38:59:64:b7:3f:03:75:4c:fc:97:7e:
         bd:3d:6b:d0:14:0d:30:28:d3:db:62:1b:da:ad:84:ea:83:f4:
         a8:4c:33:44:8d:e4:b4:0b:e1:d2:85:29:d6:3c:9d:57:0d:ab:
         9f:53:46:74:86:92:78:68:5c:ea:08:13:e6:20:e0:fe:5d:70:
         5d:af:b2:10:13:fd:f6:ac:7c:ea:b9:bd:66:d7:f3:a5:b3:bc:
         1c:55:74:9e:78:1d:bf:78:b8:39:2c:7a:26:c7:32:fa:2f:69:
         74:4e:ef:93:64:95:46:6a:03:8d:56:50:9b:7c:70:d4:a1:25:
         f8:cc:bb:3a:15:dc:a1:00:1a:ee:dc:9a:13:37:7d:d2:05:aa:
         ec:b4:d4:ca:44:bf:71:95:7f:28:c1:7d:3e:e7:2a:2a:1a:c4:
         21:97:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org