Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
File:                     EB4DFDD619B511EF90608063C4F9AE02.roa (raw, json)
Hash identifier:          PXcLL8JS1VeNsuDwYx4pOxFh1PPt8i8LrRCwWaZgK5o=
Subject key identifier:   8D:E5:31:9D:49:9E:F7:B1:06:21:66:1D:26:0B:59:EF:D5:A3:16:D5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1A1D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:53:19 +0000
ROA not before:           Thu 30 May 2024 15:53:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152510
IP address blocks:        157.66.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6685 (0x1a1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:53:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0ef-b7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:e0:10:75:1f:fe:06:b1:ec:bd:2d:09:b7:
                    be:6d:5a:c7:6c:21:1a:ed:a9:f9:29:f4:3a:52:59:
                    47:5f:ac:6c:e3:25:97:f3:73:4d:30:e6:6e:93:cf:
                    02:33:b6:bd:cb:30:f9:c9:32:19:10:33:d4:c4:aa:
                    ea:fc:65:49:0b:b2:f3:8e:3b:a3:5b:0a:38:4c:f0:
                    a9:6d:cd:60:20:04:6c:9b:be:40:32:eb:f6:3f:64:
                    80:76:d4:ca:10:9e:ce:96:87:41:9f:32:96:a0:92:
                    1c:b8:3d:9c:36:46:f7:1b:df:1c:c3:8a:d1:8b:81:
                    68:3a:cd:38:3b:4b:b3:56:c8:38:e8:67:69:e0:7f:
                    69:1d:4b:12:36:b6:df:d6:de:3a:e2:3a:1f:ff:6b:
                    2c:3d:05:0f:35:06:c6:e9:5b:bb:fb:11:6b:98:8e:
                    1a:84:03:de:df:89:3f:47:74:12:c2:2a:42:e2:ac:
                    05:9b:25:9b:47:11:e8:ac:8a:9f:f1:35:0f:c7:61:
                    30:3c:e9:8a:6a:99:56:9f:c4:20:e5:1a:a0:7a:c8:
                    d5:73:13:05:e5:d4:83:91:d6:4f:71:23:22:1c:44:
                    61:f5:88:70:47:a8:9f:71:39:ac:e7:5a:15:c7:0a:
                    6e:d7:4a:2d:30:58:d2:99:de:de:05:4a:fe:77:54:
                    e6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E5:31:9D:49:9E:F7:B1:06:21:66:1D:26:0B:59:EF:D5:A3:16:D5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:56:cd:1e:8a:4a:69:d9:98:82:32:0f:38:52:a6:15:a8:
         9f:27:19:27:81:47:1a:5d:54:a9:a7:35:b4:58:2b:aa:ac:f0:
         3e:fe:81:32:48:eb:e3:c2:ea:5b:eb:c3:64:25:03:1a:f0:1d:
         1c:14:6c:8d:cc:1a:39:77:8d:c3:41:60:88:19:e2:d7:e6:86:
         b6:34:cb:12:3a:aa:5c:8c:ed:fc:ac:a6:07:85:f3:4b:0e:c8:
         00:e4:cd:d9:1f:af:52:36:05:8b:25:5e:f1:e1:e6:9c:66:66:
         4f:76:9a:f7:a5:c5:10:fb:91:ea:d4:c8:c6:ad:a6:e0:1f:36:
         1b:19:ce:34:c6:49:d4:55:4b:11:5c:1d:b9:a8:2c:f6:7e:56:
         04:ef:98:b4:7b:39:38:1c:02:af:82:64:74:2c:63:e6:31:41:
         50:1e:32:e4:d2:fd:42:e8:c8:70:5b:56:e2:67:f8:28:50:56:
         8d:ab:c0:e6:88:36:21:22:ce:7f:ca:87:9f:5a:b9:87:65:c3:
         3f:28:ce:ff:d3:93:fa:33:54:1c:de:a4:2a:82:8e:ce:0f:16:
         15:e6:22:fd:7d:e5:f9:14:78:6e:ef:55:d0:64:0a:5f:06:6b:
         18:1a:49:8a:4b:66:7a:6c:42:dd:46:0c:8e:1f:c4:ec:e1:bd:
         37:06:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:53 2024 by rpki-client on console-fra.rpki-client.org