Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D55B660C345011EF8A3C1274C4F9AE02.roa
File:                     D55B660C345011EF8A3C1274C4F9AE02.roa (raw, json)
Hash identifier:          UJMQIHS0x9DDV/PeqpEdOcYKhKVcRz4WBtrHX1LeviQ=
Subject key identifier:   6A:5E:07:42:24:DF:FB:33:36:C7:C4:8F:A0:13:94:EA:4A:D2:18:AF
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1A72
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D55B660C345011EF8A3C1274C4F9AE02.roa
Signing time:             Thu 27 Jun 2024 06:45:25 +0000
ROA not before:           Thu 27 Jun 2024 06:45:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152547
IP address blocks:        160.22.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6770 (0x1a72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun 27 06:45:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=667d0a85-d1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:77:f2:e9:3b:ce:84:b7:a5:5e:0c:9c:51:
                    3f:51:1c:00:b6:a7:38:1e:f0:2f:48:8a:c4:e5:21:
                    86:81:b5:23:87:af:da:53:fa:27:29:f6:1d:de:70:
                    62:9a:9e:d4:2d:34:3c:ec:2a:3d:76:a4:a6:8e:db:
                    ac:8e:68:cc:dc:50:e3:29:76:5a:35:ac:ed:3a:82:
                    83:0f:18:5d:ee:c5:ad:5e:8b:12:16:b6:8c:68:c1:
                    f0:c1:12:d4:99:0b:8e:34:3e:c2:65:6a:88:9b:0d:
                    cb:a9:c3:d9:1e:83:cd:c0:c0:fb:98:86:c6:4c:84:
                    a6:66:0b:b1:f8:a0:d7:aa:32:e4:f4:b7:32:56:74:
                    b7:d4:fb:99:9e:29:53:cd:e1:63:06:a5:f7:27:c4:
                    7d:19:f3:1c:ed:2a:19:85:f3:c3:82:f4:bb:79:15:
                    a1:c0:d1:01:2e:52:9c:5b:f0:8a:7d:a6:8c:c6:e0:
                    d6:91:14:43:a0:0b:02:c6:ec:59:13:05:81:ee:ec:
                    e7:ab:79:2c:9a:40:e0:da:f9:5e:a6:fe:4d:69:23:
                    65:cf:cc:32:cb:84:51:39:d0:f6:7c:a6:22:76:94:
                    0d:41:23:0e:09:83:0d:22:d0:31:9f:04:36:f2:70:
                    5a:0b:10:d5:93:4d:19:8f:bd:6c:7d:a2:75:e6:99:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5E:07:42:24:DF:FB:33:36:C7:C4:8F:A0:13:94:EA:4A:D2:18:AF
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D55B660C345011EF8A3C1274C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:a6:39:0b:41:d7:41:62:1d:f9:17:5c:05:d8:62:c2:65:43:
         b1:cd:f8:15:47:d2:07:1b:6e:a4:d1:28:ce:db:b5:13:1e:41:
         67:2d:31:0b:30:6d:af:0f:40:dd:f2:f9:ad:13:0e:77:25:c3:
         c6:ef:09:78:9b:92:61:61:fe:0b:c8:8b:11:91:56:42:29:28:
         00:74:ca:40:af:15:2e:a2:88:85:14:9c:12:90:11:be:12:e6:
         b8:32:eb:f6:a0:63:95:5d:c4:9d:1b:b8:c5:ea:9f:b0:37:cb:
         f0:77:d5:88:70:53:5b:d6:a5:9b:4d:c3:ab:2c:ee:47:45:29:
         9f:05:25:43:e0:a7:9a:f6:1f:cb:04:8d:11:e8:6a:dc:d4:95:
         04:f0:12:3d:42:9f:2a:73:39:cb:c5:12:8b:81:e0:86:4a:ad:
         9e:20:0b:d1:86:88:26:ef:9b:8f:39:01:e1:1a:67:8a:24:4d:
         3e:85:7d:05:ab:93:8c:8f:13:a1:52:4e:37:26:93:12:49:8c:
         33:64:8c:90:71:46:9f:e4:de:0e:dc:24:10:3a:2e:b6:e4:81:
         3e:47:4b:00:f8:80:6a:54:ac:d8:46:d6:4d:e6:00:47:bc:01:
         0f:91:35:c0:92:b5:a5:8b:20:cc:af:33:9f:d6:1d:f2:7b:80:
         92:b2:be:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:53 2024 by rpki-client on console-fra.rpki-client.org