Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B7BC5FF86E8D11EFAA4A7516C4F9AE02.roa
File:                     B7BC5FF86E8D11EFAA4A7516C4F9AE02.roa (raw, json)
Hash identifier:          ryqhg6Istu5KA30eDCmvIMagft3cZO2mWEHMCa38/2o=
Subject key identifier:   E7:47:8C:05:99:2E:A5:32:47:DB:A6:B3:46:E6:51:35:46:7B:54:87
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1B38
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B7BC5FF86E8D11EFAA4A7516C4F9AE02.roa
Signing time:             Mon 09 Sep 2024 09:27:23 +0000
ROA not before:           Mon 09 Sep 2024 09:27:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142469
IP address blocks:        160.30.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6968 (0x1b38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep  9 09:27:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66debf7a-1539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:9d:03:e2:96:8c:02:f6:03:9b:3f:ba:de:
                    47:41:d4:f6:75:bd:ed:32:c3:7f:69:1a:2d:7f:eb:
                    b8:91:b0:ea:55:75:a2:e8:c7:c0:0a:e7:00:c3:48:
                    32:18:07:9f:2c:44:55:c0:f3:3c:06:96:f2:f9:5a:
                    56:db:9a:38:80:33:69:cd:1a:61:65:70:ed:60:06:
                    5a:c2:2e:50:58:a1:cc:27:6a:87:66:aa:aa:0e:07:
                    ff:a3:d5:3e:48:01:dc:40:44:65:b1:c0:71:97:51:
                    a6:01:dd:c5:bc:d1:e9:55:10:4c:bd:6c:8e:76:b5:
                    7e:6c:3b:0c:ef:65:9e:ed:c8:ec:90:f5:ed:e5:bb:
                    66:f8:f8:bf:85:ea:e5:de:5d:95:b0:45:ad:c7:f3:
                    b7:5a:a1:03:e7:d6:fc:64:fd:52:c5:b8:11:41:71:
                    65:86:1d:df:36:5f:78:ad:45:33:35:8f:77:f2:9b:
                    4d:e1:e5:57:50:e3:ac:ca:ed:25:d6:1a:36:88:c5:
                    52:0c:96:92:78:90:29:37:61:50:a0:d3:ee:59:a7:
                    f1:bb:ba:68:81:13:35:04:e6:4c:28:55:d3:ec:be:
                    0f:e2:8c:4e:c6:1c:39:73:5f:e0:43:66:ff:ea:70:
                    1a:3f:96:3e:64:19:ca:e2:dc:aa:ff:a8:67:34:7d:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:47:8C:05:99:2E:A5:32:47:DB:A6:B3:46:E6:51:35:46:7B:54:87
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B7BC5FF86E8D11EFAA4A7516C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:56:7a:20:ab:e9:3c:17:fc:0f:d9:d9:b3:d2:2a:f1:55:
         56:49:5c:b4:80:53:b7:d8:bd:db:31:1a:ee:80:99:30:79:34:
         b2:bc:20:6f:90:92:94:4a:8d:5b:8e:70:e2:b2:31:95:04:9c:
         27:f3:02:da:0a:c3:74:e2:fd:c0:a3:8a:21:ab:8c:81:57:2e:
         d2:7d:2a:16:5b:71:95:d7:fd:d5:49:48:d7:34:2f:1a:33:9d:
         f8:e0:45:1e:8d:38:ee:9a:3f:55:8c:59:9a:82:19:89:1f:5d:
         35:e7:ba:02:2d:ac:df:f2:3f:e1:77:66:b6:97:39:49:4e:35:
         c6:df:25:88:3c:59:ba:3c:a7:a8:f3:93:38:7d:8e:a9:bf:42:
         5e:e4:b1:26:12:8e:78:0f:89:33:72:7c:37:fa:12:a6:74:52:
         72:3f:d1:fb:73:2a:5e:db:12:d6:f8:19:f5:a8:74:0c:a2:3e:
         5a:6c:f8:90:a6:1a:df:a7:98:20:63:4c:d0:8d:f3:1f:bc:5e:
         37:d5:52:de:4d:cf:af:85:b1:0d:bc:b0:02:77:26:6d:02:0b:
         89:85:a5:17:0d:23:b9:d5:94:79:1d:87:24:12:0e:0a:9d:4e:
         6b:51:6b:ba:76:a4:70:ab:87:ca:f9:8f:16:e5:76:60:25:00:
         7c:5d:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:53 2024 by rpki-client on console-fra.rpki-client.org