Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E5C145586B5411EFAD68A564C4F9AE02.roa
File:                     E5C145586B5411EFAD68A564C4F9AE02.roa (raw, json)
Hash identifier:          vw4fIq6FxDco5GgBxpNa8dHQOtILVXkHdDn+jgOEYoc=
Subject key identifier:   61:6A:6E:35:C4:03:98:7D:4B:2A:72:A3:BC:58:3F:1A:6D:E1:1C:04
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1B2B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E5C145586B5411EFAD68A564C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 07:03:05 +0000
ROA not before:           Thu 05 Sep 2024 07:03:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     153210
IP address blocks:        160.30.244.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6955 (0x1b2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep  5 07:03:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66d957a9-336c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:8f:45:b4:81:9a:ef:2f:1b:1b:28:38:d8:
                    66:49:23:03:27:91:c3:72:76:07:4a:49:76:73:17:
                    0d:ad:61:6b:e0:b4:a5:51:ff:61:f0:56:cf:32:e8:
                    69:c7:c6:1d:d3:de:a4:2a:7e:e1:5b:b6:1d:81:51:
                    86:26:b5:fd:a3:d8:de:a8:29:e0:54:9b:e3:aa:04:
                    19:95:24:60:91:e4:eb:fb:0d:95:2f:3c:27:f7:e9:
                    26:6e:17:df:29:00:55:50:2f:ca:90:fc:84:ea:0d:
                    f7:76:0a:01:f2:8e:31:76:37:b1:8a:c4:31:c6:69:
                    3a:20:9a:78:ff:f2:9c:6d:c0:83:c4:d6:23:62:ae:
                    a4:bb:ed:26:fa:e3:d2:ab:7a:f2:80:9a:ec:71:6a:
                    d4:08:26:9c:cc:03:fe:d1:e7:76:8a:8f:c2:15:cb:
                    76:87:53:ea:d1:36:47:79:06:ad:6f:9e:eb:77:b3:
                    78:11:f0:7a:db:47:fa:ec:8d:e4:27:bd:9a:9d:e9:
                    30:d9:89:2e:8a:f1:cf:e2:40:d4:49:db:c8:9f:72:
                    27:63:6b:49:37:29:79:7e:26:e4:97:af:f6:63:f0:
                    5d:5b:8f:f8:16:66:da:21:2a:89:33:12:bd:90:8b:
                    4e:45:ba:94:39:b3:82:24:78:7e:c5:d5:6f:78:8a:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6A:6E:35:C4:03:98:7D:4B:2A:72:A3:BC:58:3F:1A:6D:E1:1C:04
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E5C145586B5411EFAD68A564C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:56:cb:92:f9:fa:0d:95:88:57:64:7d:dd:a8:e3:29:9f:74:
         c0:07:a3:a6:69:aa:64:f1:98:bf:37:71:48:78:d6:cd:8c:38:
         7e:f6:05:a2:a7:4c:cc:0c:53:4f:ad:ca:43:78:a6:a0:33:6d:
         99:85:37:58:6b:2c:d1:ee:ea:59:e4:b8:15:8a:3c:82:11:6a:
         b5:fb:85:0e:36:b3:50:a0:21:5e:30:55:55:ab:b8:9b:11:5a:
         c0:ea:70:72:b1:3a:74:67:bd:5f:54:ab:6d:ca:f5:a2:67:47:
         db:8c:71:63:30:7e:ef:f0:b3:a0:c4:8b:7d:72:2d:b0:9e:60:
         53:65:e2:8f:a4:72:56:95:ad:42:6d:88:c3:7c:cc:eb:10:63:
         64:47:c4:c2:44:63:be:3d:77:b7:3b:ac:5a:f8:ed:35:5a:da:
         51:c9:3f:52:cb:31:79:90:be:a2:d0:ef:f7:7d:92:e9:99:2a:
         00:21:6e:8b:ca:a7:3e:fa:b2:67:9f:72:a2:1b:55:64:61:8d:
         08:e1:e9:4d:91:ae:d4:13:43:c8:7c:4a:3c:bd:b2:1e:a8:2e:
         d3:86:30:f7:f7:05:10:aa:3e:4b:e1:df:ff:52:0f:d6:67:31:
         b9:0c:0f:26:0d:5a:d5:02:11:6f:6a:c8:1e:6f:ef:2c:ca:31:
         95:8e:de:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:53 2024 by rpki-client on console-fra.rpki-client.org