Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A161B3B8C0D511EEB0307181C4F9AE02.roa
File:                     A161B3B8C0D511EEB0307181C4F9AE02.roa (raw, json)
Hash identifier:          tthuyFrI2yFDSPR30CO6JYXj5kU3+hLtz65Wwaf1usI=
Subject key identifier:   FA:E5:D5:1C:48:11:F2:A8:07:C9:FC:05:12:8B:DE:FD:2C:EA:97:34
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1A05
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A161B3B8C0D511EEB0307181C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:55 +0000
ROA not before:           Thu 30 May 2024 15:52:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     151729
IP address blocks:        157.10.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6661 (0x1a05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:52:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0d7-825e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:bc:88:da:e9:d1:fe:c1:34:b3:29:5c:1a:
                    e1:b2:bc:ac:00:b6:58:67:c2:37:23:30:10:86:e4:
                    f6:76:b2:ec:66:2f:d6:a5:23:c4:db:ec:d5:bc:33:
                    75:c5:7c:af:c3:71:e1:77:36:ff:a4:b9:cc:d0:7a:
                    70:98:f3:b8:14:e0:1a:a2:51:7e:3e:94:9c:9a:8b:
                    41:82:05:64:73:ff:6f:e4:44:f1:f2:4f:cf:f7:62:
                    b4:49:77:c5:6a:15:84:8c:47:f8:cd:ee:53:0e:88:
                    5f:fc:b1:f1:05:e4:17:3c:3e:14:d6:09:36:31:ec:
                    94:13:b5:d8:3e:4b:cc:62:a2:31:4c:ae:47:da:7a:
                    9d:bf:47:fb:39:2d:71:9d:91:36:f8:7f:86:48:12:
                    9c:8c:aa:a8:9a:b0:42:3a:ad:c6:99:34:19:35:f5:
                    51:00:6c:c1:57:75:ab:81:3d:91:14:9d:42:dc:69:
                    da:28:61:34:f9:59:fd:c1:b0:e0:2f:60:e6:0a:ba:
                    fb:00:1a:f3:ae:3f:e2:85:f0:c1:8d:9a:30:8a:7a:
                    91:e1:cc:64:51:78:5c:db:1b:f4:ea:fd:4d:3c:29:
                    5d:3f:c5:03:26:54:ea:bf:bc:87:9d:7c:90:a4:24:
                    49:f2:53:07:4e:58:5c:3c:f8:aa:c6:3b:79:0a:02:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E5:D5:1C:48:11:F2:A8:07:C9:FC:05:12:8B:DE:FD:2C:EA:97:34
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A161B3B8C0D511EEB0307181C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:ec:bb:57:f8:29:6a:78:2c:15:f3:ca:7a:ad:ae:fc:c1:6a:
         45:22:d6:ea:a8:49:d6:ad:cb:ba:3e:b3:63:66:a3:00:e8:b9:
         a5:77:cb:1a:8b:f1:a1:cf:bc:42:62:d4:0d:93:2b:e0:ea:22:
         01:42:b7:9c:c9:d4:3e:6a:1c:27:b1:37:3c:b0:0f:3e:33:6a:
         a8:c4:4c:07:3d:39:d8:32:f0:1c:a6:03:a3:1e:65:c2:3c:1b:
         dc:47:f2:90:3d:3f:f2:c9:e5:45:15:9d:84:0c:f6:b6:60:9e:
         9d:2e:e0:47:c0:ff:8c:41:40:94:65:7f:f8:a4:c5:15:69:af:
         6e:a3:d4:55:90:b8:46:4b:35:39:22:d6:65:8a:2c:c2:87:81:
         06:9e:bc:f5:da:9b:a1:bf:f8:06:c5:d6:7b:52:7a:04:67:ef:
         ef:35:c0:76:c8:f9:55:f5:6e:9f:5c:79:5f:52:f7:ca:93:c3:
         84:7e:78:a3:2b:56:53:99:5a:40:53:4a:a8:ac:fe:d3:33:cb:
         18:be:a0:34:4b:a4:8a:b0:1b:a3:a3:c2:73:34:83:0f:fa:14:
         d4:1d:14:3e:76:cc:22:27:58:1f:8f:9d:7d:d8:b7:c3:e5:d8:
         05:70:fd:c9:1b:ff:57:89:4c:59:22:a1:74:0a:ab:15:f7:bd:
         c8:f0:41:ad
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQwNTMwMTU1MjU1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4YTBkNy04MjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqy28iNrp0f7BNLMpXBrhsrysALZYZ8I3IzAQhuT2drLsZi/WpSPE2+zVvDN1
xXyvw3Hhdzb/pLnM0HpwmPO4FOAaolF+PpScmotBggVkc/9v5ETx8k/P92K0SXfF
ahWEjEf4ze5TDohf/LHxBeQXPD4U1gk2MeyUE7XYPkvMYqIxTK5H2nqdv0f7OS1x
nZE2+H+GSBKcjKqomrBCOq3GmTQZNfVRAGzBV3WrgT2RFJ1C3GnaKGE0+Vn9wbDg
L2DmCrr7ABrzrj/ihfDBjZowinqR4cxkUXhc2xv06v1NPCldP8UDJlTqv7yHnXyQ
pCRJ8lMHTlhcPPiqxjt5CgIi2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFPrl1RxI
EfKoB8n8BRKL3v0s6pc0MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTE2MUIzQjhD
MEQ1MTFFRUIwMzA3MTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGdCvgwDQYJKoZIhvcNAQELBQADggEBAK3su1f4KWp4LBXz
ynqtrvzBakUi1uqoSdaty7o+s2NmowDouaV3yxqL8aHPvEJi1A2TK+DqIgFCt5zJ
1D5qHCexNzywDz4zaqjETAc9Odgy8BymA6MeZcI8G9xH8pA9P/LJ5UUVnYQM9rZg
np0u4EfA/4xBQJRlf/ikxRVpr26j1FWQuEZLNTki1mWKLMKHgQaevPXam6G/+AbF
1ntSegRn7+81wHbI+VX1bp9ceV9S98qTw4R+eKMrVlOZWkBTSqis/tMzyxi+oDRL
pIqwG6OjwnM0gw/6FNQdFD52zCInWB+PnX3Yt8Pl2AVw/ckb/1eJTFkioXQKqxX3
vcjwQa0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org