Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E47A5F706C3211EF8D285C31C4F9AE02.roa
File:                     E47A5F706C3211EF8D285C31C4F9AE02.roa (raw, json)
Hash identifier:          BL1o1+Mm+1sVNNYvyEFmrrjqRXozfywTOny8ITOLIaA=
Subject key identifier:   E3:F5:35:66:99:9F:E4:B5:94:1B:B5:92:CA:4F:2C:24:91:84:B6:0B
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1B33
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E47A5F706C3211EF8D285C31C4F9AE02.roa
Signing time:             Fri 06 Sep 2024 09:32:11 +0000
ROA not before:           Fri 06 Sep 2024 09:32:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9830
IP address blocks:        160.30.216.0/24 maxlen: 24
                          160.30.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6963 (0x1b33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep  6 09:32:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66dacc1b-0b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:9f:d5:65:c7:cb:76:b0:cb:5f:12:b4:6b:
                    0a:8d:ad:41:20:91:90:c7:29:59:fc:c0:98:24:93:
                    20:a7:d4:0d:8f:34:4f:66:5d:a6:08:1c:fa:48:7e:
                    e4:8e:83:40:7a:27:9c:af:40:9e:7a:9b:7b:ca:02:
                    fd:72:2b:79:26:21:51:e4:21:83:2c:ab:88:ff:ef:
                    95:d0:17:fe:be:65:c0:b7:59:3a:6c:71:eb:7e:ea:
                    bd:e8:ef:e6:eb:a5:e7:56:c3:5c:99:78:29:ad:3b:
                    8c:41:94:d1:93:18:fa:19:d1:98:89:bc:02:26:2e:
                    84:4e:34:f8:73:10:59:56:be:7b:68:65:92:7c:c6:
                    ed:ec:09:cf:a1:2c:01:9f:e4:b2:f5:8a:ea:6f:5b:
                    a2:6a:d7:81:4c:87:76:25:d8:95:52:6f:7f:af:3e:
                    9e:4c:00:f5:98:5e:84:4a:14:a7:4e:12:18:d9:a5:
                    55:d3:b5:14:4a:08:a0:bd:df:b8:5f:03:a1:f8:30:
                    a9:5c:8b:21:fc:47:f6:f7:71:03:bb:ea:96:c4:09:
                    0b:66:c8:4e:c1:8c:89:ec:3b:64:a3:dd:e4:0b:3c:
                    5a:2a:e1:1f:ee:c8:2c:4c:15:45:47:79:85:11:12:
                    81:b5:ac:a8:cb:ad:76:a6:ba:e6:69:7d:2d:34:91:
                    48:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F5:35:66:99:9F:E4:B5:94:1B:B5:92:CA:4F:2C:24:91:84:B6:0B
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E47A5F706C3211EF8D285C31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:f9:0d:3c:2b:6e:03:25:c6:d1:e4:3a:98:0c:36:7a:49:8e:
         f2:0e:2d:d9:03:0a:30:de:80:91:cd:90:ce:7d:1d:7e:b6:ec:
         a3:e2:e8:a9:3a:67:d5:8d:e9:9b:d6:39:56:f0:62:24:d1:86:
         eb:13:5e:2a:db:39:84:ab:9f:5b:4f:60:b0:a4:38:22:cd:cd:
         79:ff:b6:c6:6c:50:a7:6e:cd:24:e4:2b:b6:7d:a2:d9:68:8b:
         3f:fb:89:db:ec:24:72:97:1c:2b:e4:f2:d9:b9:f8:65:0c:0d:
         74:47:86:e0:6f:11:e4:7f:d0:6a:9d:e4:ae:69:ef:3d:99:23:
         54:4b:b4:72:10:ac:98:ef:1a:91:29:ae:31:ff:cd:27:e1:cb:
         ff:a8:e4:22:07:38:09:71:52:63:f7:12:bf:a4:7f:7a:14:02:
         38:f5:fc:54:d9:8b:6a:05:52:c8:e8:ec:62:05:fb:f0:b1:a9:
         08:f6:de:c4:9f:e3:2c:98:a4:0e:66:2c:dc:fe:fc:12:aa:15:
         fa:4b:56:77:ac:df:4b:0f:37:c4:28:f8:0c:ed:3e:30:8c:26:
         b7:fd:95:be:51:97:9d:10:db:43:39:14:20:1c:2d:a7:03:73:
         c6:76:a8:90:c3:7e:73:19:93:12:d0:a0:63:28:f9:5d:b5:f5:
         3e:f0:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org