Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DE386AF044DA11EFA1BF331CC4F9AE02.roa
File:                     DE386AF044DA11EFA1BF331CC4F9AE02.roa (raw, json)
Hash identifier:          u4VFzI6ViYU0thtLvrRvSVIz04OIJb7jHVUJhsXyTwU=
Subject key identifier:   92:F8:84:4D:5F:DB:A2:57:90:22:C6:C6:BA:44:41:A3:05:E4:F7:9B
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1AB5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DE386AF044DA11EFA1BF331CC4F9AE02.roa
Signing time:             Thu 18 Jul 2024 07:53:49 +0000
ROA not before:           Thu 18 Jul 2024 07:53:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152561
IP address blocks:        160.25.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6837 (0x1ab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul 18 07:53:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6698ca0d-1de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:11:51:fa:f2:5f:23:f8:fe:c6:ba:3b:3f:
                    a6:ed:17:5e:d2:fe:06:7f:67:04:d3:37:9d:f0:51:
                    a2:f7:f7:b5:57:80:bb:4b:f0:e1:ee:bc:aa:28:fb:
                    dc:34:b1:e0:73:aa:00:52:5a:bb:70:63:ca:bf:72:
                    ec:72:6b:60:72:8f:ed:21:07:79:57:82:2f:32:f4:
                    f9:e2:46:7d:f4:df:69:10:b8:8a:09:30:62:2f:93:
                    00:4f:c6:40:d1:fc:10:43:5d:0c:23:b6:b1:9a:7b:
                    50:5b:0c:3f:38:8b:a6:d6:10:78:62:f7:50:06:62:
                    21:ff:8f:3a:dc:a2:70:a1:08:af:48:d2:67:53:e9:
                    92:cc:03:06:0f:8b:79:42:e3:0c:0a:9c:01:42:2d:
                    ca:65:0f:66:01:cf:40:0e:c3:11:06:5e:47:cd:cf:
                    7f:14:15:da:9f:46:79:96:33:74:43:8d:df:0c:02:
                    7a:22:bc:c5:82:cf:40:8f:98:61:33:93:d1:00:73:
                    4b:e1:9b:75:18:00:a1:9e:e8:03:db:f0:47:6e:38:
                    d7:e2:e1:4a:2c:7e:5c:18:22:98:e5:45:dd:f3:4a:
                    84:9d:67:fb:df:fe:88:ec:50:4e:b6:bc:8f:28:04:
                    2c:1f:b7:57:c2:9a:f7:5a:e7:54:9f:a3:6b:4b:2f:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:84:4D:5F:DB:A2:57:90:22:C6:C6:BA:44:41:A3:05:E4:F7:9B
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DE386AF044DA11EFA1BF331CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:33:cc:6a:40:bc:1a:c5:a6:08:ee:54:20:6c:f1:fa:2b:
         81:a0:df:8d:6d:42:09:e9:92:1e:29:e8:8a:a9:00:a5:df:b6:
         0e:1e:a7:89:df:67:c0:60:e3:52:5b:5c:c9:ef:40:e3:57:37:
         87:f0:b9:a9:f4:c7:25:24:82:2c:46:9c:64:1f:5a:b1:52:fd:
         8f:88:2a:e1:46:ee:e1:cc:1e:83:96:ea:41:6d:9b:06:b3:60:
         f3:8d:82:b7:eb:f4:e9:bb:4e:b0:ee:f0:df:f3:14:ab:a2:fb:
         fe:4c:fe:65:c8:99:e5:d6:42:8c:02:70:e4:c8:2d:86:ff:ba:
         82:24:37:33:cb:c1:86:5b:1a:91:75:1a:58:65:6e:00:e5:38:
         87:fa:ae:ce:fc:99:b6:f0:fa:45:6b:40:4f:f6:04:d4:a4:f9:
         c1:bd:cd:79:cc:aa:3f:03:62:cc:14:20:2d:ee:21:24:f2:29:
         21:9e:fd:9d:f6:c9:c9:be:74:0f:bd:bc:72:ea:9a:3e:be:da:
         fd:74:37:2b:e9:d9:37:c7:b0:3d:99:8f:15:9b:4a:b5:c5:34:
         1f:bb:ec:a1:5a:a7:08:1e:1f:bd:21:08:ee:89:6c:a6:91:34:
         3b:00:18:93:53:fa:28:6e:b7:39:6b:45:b3:a4:2b:cd:5f:3c:
         bb:03:49:8f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQwNzE4MDc1MzQ5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njk4Y2EwZC0xZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApYERUfryXyP4/sa6Oz+m7Rde0v4Gf2cE0zed8FGi9/e1V4C7S/Dh7ryqKPvc
NLHgc6oAUlq7cGPKv3Lscmtgco/tIQd5V4IvMvT54kZ99N9pELiKCTBiL5MAT8ZA
0fwQQ10MI7axmntQWww/OIum1hB4YvdQBmIh/4863KJwoQivSNJnU+mSzAMGD4t5
QuMMCpwBQi3KZQ9mAc9ADsMRBl5Hzc9/FBXan0Z5ljN0Q43fDAJ6IrzFgs9Aj5hh
M5PRAHNL4Zt1GAChnugD2/BHbjjX4uFKLH5cGCKY5UXd80qEnWf73/6I7FBOtryP
KAQsH7dXwpr3WudUn6NrSy8MOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJL4hE1f
26JXkCLGxrpEQaMF5PebMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREUzODZBRjA0
NERBMTFFRkExQkYzMzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgGW4wDQYJKoZIhvcNAQELBQADggEBAHWhM8xqQLwaxaYI
7lQgbPH6K4Gg341tQgnpkh4p6IqpAKXftg4ep4nfZ8Bg41JbXMnvQONXN4fwuan0
xyUkgixGnGQfWrFS/Y+IKuFG7uHMHoOW6kFtmwazYPONgrfr9Om7TrDu8N/zFKui
+/5M/mXImeXWQowCcOTILYb/uoIkNzPLwYZbGpF1GlhlbgDlOIf6rs78mbbw+kVr
QE/2BNSk+cG9zXnMqj8DYswUIC3uISTyKSGe/Z32ycm+dA+9vHLqmj6+2v10Nyvp
2TfHsD2ZjxWbSrXFNB+77KFapwgeH70hCO6JbKaRNDsAGJNT+ihutzlrRbOkK81f
PLsDSY8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:53 2024 by rpki-client on console-fra.rpki-client.org