Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E1D81CF402E611EFB31F717BC4F9AE02.roa
File:                     E1D81CF402E611EFB31F717BC4F9AE02.roa (raw, json)
Hash identifier:          peK3kA/ewiFi6g7YyqztwQ0P1owhD9LYp1VeShwqcEc=
Subject key identifier:   3A:61:80:87:97:0A:03:C2:65:B6:CB:0D:25:D6:16:8A:A7:25:E3:33
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       198C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E1D81CF402E611EFB31F717BC4F9AE02.roa
Signing time:             Thu 25 Apr 2024 09:33:33 +0000
ROA not before:           Thu 25 Apr 2024 09:33:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     132323
IP address blocks:        157.10.60.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6540 (0x198c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Apr 25 09:33:33 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=662a236c-5916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:d6:36:21:1d:61:07:37:8b:2e:44:c6:60:
                    55:e7:6c:3b:00:52:02:4c:34:3c:1f:40:3a:0c:4f:
                    47:9c:5d:72:67:34:27:05:1c:c0:06:a4:1f:ef:87:
                    eb:84:90:14:88:11:42:1a:97:76:d5:f8:4a:ca:4f:
                    0f:b3:10:5d:ca:dd:4e:ee:bd:02:85:82:92:9a:5f:
                    a3:2c:d2:b2:5b:86:64:ca:5b:a7:ae:6b:4b:9a:e7:
                    52:b0:5c:27:45:e9:a5:d6:de:25:ff:8b:de:26:26:
                    08:5f:f2:24:6f:ac:cf:e1:0b:9c:57:5d:d2:4b:12:
                    6e:f5:02:1d:f0:92:ac:0e:d0:17:94:3e:e6:73:94:
                    95:65:d6:dd:f1:d7:df:a9:81:67:48:00:35:ab:b6:
                    9e:d1:5a:0a:5f:9c:d2:be:5b:79:99:ed:39:04:c0:
                    86:d3:78:d2:a6:17:47:9d:6c:7d:5f:4d:ab:f9:a9:
                    83:07:5d:db:6b:37:e8:93:c5:13:f5:7d:0b:c8:63:
                    03:a0:48:ad:72:be:25:02:80:79:2f:9b:06:35:6a:
                    4c:44:82:aa:ec:92:f9:a5:a5:02:70:96:6b:49:81:
                    47:2f:37:85:20:4d:53:2b:02:82:25:f0:79:a6:10:
                    63:c0:63:e7:f4:04:ff:26:7f:14:a2:25:56:79:89:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:61:80:87:97:0A:03:C2:65:B6:CB:0D:25:D6:16:8A:A7:25:E3:33
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E1D81CF402E611EFB31F717BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:49:1a:5d:fc:c3:2f:95:1c:47:1a:91:71:c9:29:09:98:17:
         5a:df:76:65:33:c2:16:80:08:61:c3:63:3b:85:5b:c0:2f:a4:
         a0:7c:cb:80:ad:db:4b:12:12:c6:f2:24:03:c9:13:0f:fe:4c:
         91:f2:6b:85:87:af:f3:85:ce:d8:92:74:b7:05:93:3d:dd:86:
         23:6c:4b:58:f6:f7:f2:61:5e:86:af:20:1b:c3:d3:15:ff:e4:
         7a:c2:9c:22:93:fd:7e:9b:ed:c4:11:f0:83:b6:cd:c7:4d:16:
         77:72:78:6f:03:d2:68:b5:73:b0:c9:5c:f4:0b:cd:17:6d:be:
         62:b6:f4:55:55:45:de:ea:e5:7e:f8:43:0b:0e:ca:2c:77:35:
         31:de:90:83:dd:08:37:59:c8:e4:53:2e:c9:c9:94:6b:46:c7:
         86:71:bf:2a:9d:06:4d:23:93:a1:bf:c9:c8:3e:c7:19:af:cd:
         26:d8:13:90:b9:6b:da:43:36:b9:7f:93:60:0d:c9:9f:c0:fa:
         4c:1e:d3:5a:7b:c6:a2:f8:60:55:2f:ab:07:8f:fd:26:0d:46:
         4f:e5:e9:8c:81:35:75:2d:fa:8d:8b:b7:ea:aa:0c:38:cb:5a:
         a9:43:db:ed:97:46:92:a4:3e:b8:01:99:5a:01:26:80:0e:f8:
         a9:63:65:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org