Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
File:                     BE63E1C2FE1D11EE9E701774C4F9AE02.roa (raw, json)
Hash identifier:          oGIqh9S0MpzX9n7MXgah+aw/64qK8M0gziNGFc58g5Y=
Subject key identifier:   58:26:36:80:1E:A5:B9:0D:12:3A:CF:18:C8:DA:EA:3F:8F:4E:DF:92
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       19E2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:23 +0000
ROA not before:           Thu 30 May 2024 15:52:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134926
IP address blocks:        157.20.214.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6626 (0x19e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:52:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0b7-924f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:61:53:5f:bc:05:1e:f5:6e:01:f9:7e:49:
                    fe:f3:3b:23:b6:bd:d2:f9:45:98:d1:f3:0e:24:0f:
                    6e:21:75:04:32:50:7a:5b:02:02:23:1b:ef:24:56:
                    24:63:01:aa:2f:cc:f2:c3:22:7f:77:ff:68:51:57:
                    01:16:ef:76:98:ea:0d:0e:a5:fc:bd:f0:26:52:7f:
                    b8:ed:f8:77:4c:18:90:aa:00:9a:76:63:d8:f9:6d:
                    a3:4d:d2:67:67:b1:e3:0c:a5:81:a0:93:0c:b1:4b:
                    13:69:79:ae:b4:fe:74:38:44:9c:b6:2d:05:42:09:
                    c8:bd:8e:eb:c2:4d:da:a2:dd:7b:c5:b0:df:34:34:
                    35:a2:de:4e:6f:47:f6:49:f1:ac:3f:45:c3:99:c7:
                    4b:e1:6c:27:bf:5a:e0:38:3b:89:47:41:85:7d:37:
                    92:41:6c:86:1e:01:98:39:99:fb:24:fd:fb:a5:a3:
                    75:8a:d8:3e:46:ea:6a:ed:f8:81:25:c4:34:e8:27:
                    d3:d8:44:e4:c0:7b:3e:23:fa:31:fe:1f:35:fd:35:
                    08:86:4e:77:8c:6f:57:f3:85:f1:aa:d7:66:d2:fd:
                    d0:4f:bb:d1:7e:bf:ca:c8:37:4c:50:41:9c:80:b3:
                    78:c2:31:68:b0:23:2e:48:02:2d:21:01:da:32:83:
                    c6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:26:36:80:1E:A5:B9:0D:12:3A:CF:18:C8:DA:EA:3F:8F:4E:DF:92
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:37:e4:39:6d:cd:93:f2:e7:2a:f5:3d:65:d2:ec:b1:45:c0:
         2b:e6:eb:e4:04:95:94:d3:1c:c3:d8:98:08:b4:6b:aa:da:74:
         a1:dd:e4:c8:c7:af:c2:ee:70:46:f7:9a:fe:48:cd:a9:2c:bd:
         22:b5:58:de:72:2c:18:77:6d:f2:e4:0e:03:30:c2:93:a3:6d:
         e3:4b:8b:e1:bc:9f:d2:b5:ed:76:b8:7b:13:50:43:21:90:0a:
         ad:e3:18:3d:9f:1e:a1:5a:8b:e7:c3:6e:c4:0d:85:ff:b6:08:
         ae:ec:0d:31:85:17:78:d0:33:cb:33:91:3e:13:67:2b:01:d8:
         5c:ab:e9:ef:f3:b8:f2:2f:39:04:4b:b9:0d:3b:27:77:51:55:
         42:ab:f0:a8:a3:bd:bc:f6:78:bb:b8:96:e5:93:5f:bb:fa:6b:
         97:c1:06:ae:c0:34:2f:2f:5f:81:23:82:c9:91:30:a5:cd:9a:
         16:cd:39:91:c5:3b:b4:26:1f:d2:1e:b5:c2:c2:78:6c:9e:92:
         2d:2a:e8:7d:6f:20:09:99:e4:93:4b:98:e0:9f:3a:16:70:b2:
         fc:63:d2:f6:aa:61:ce:55:d3:7f:82:6f:c4:f9:c1:58:bc:fc:
         f4:d6:9b:ed:7b:d0:11:98:48:6e:4d:fe:c6:1e:aa:e7:0a:82:
         ce:69:c1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org