Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa
File:                     F62807A4A89111EFB9118F2BC4F9AE02.roa (raw, json)
Hash identifier:          Z2UlCMeq1ZBrcvu9v1189cy3QObLoKJac6QIEZ27ZsU=
Subject key identifier:   86:CB:3A:BD:49:24:60:32:82:F2:F6:C1:DE:C8:DC:10:F8:81:B2:48
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1BF3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa
Signing time:             Fri 22 Nov 2024 05:23:53 +0000
ROA not before:           Fri 22 Nov 2024 05:23:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     153234
IP address blocks:        160.250.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7155 (0x1bf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Nov 22 05:23:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67401568-f7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e3:cc:4b:01:21:fd:3d:29:3c:f5:3e:ea:a4:
                    25:51:43:c2:4d:44:1b:57:30:43:76:32:a1:d7:48:
                    e8:32:a7:87:9d:6a:b2:23:87:b1:ba:c7:93:25:e1:
                    d0:e2:96:da:7a:f9:07:ad:5d:13:b2:a2:b0:84:51:
                    29:d9:73:be:35:fc:eb:3f:cb:6f:1d:29:81:88:2f:
                    60:41:a4:5c:46:00:ae:09:ab:c5:f8:bc:56:a3:d7:
                    da:22:24:3d:ab:9d:ff:fb:a1:db:9c:ac:9b:04:60:
                    3d:b8:65:b6:09:03:11:cd:73:a1:a3:8a:97:b9:8a:
                    f1:d2:12:72:69:d4:92:99:f8:5e:d2:b8:29:7a:16:
                    7d:78:05:ba:e0:f4:df:45:b3:97:31:29:64:31:cf:
                    2c:1e:49:85:99:c1:c1:66:09:49:32:a3:0e:c6:37:
                    c5:d9:7c:be:3b:ed:12:0c:e8:07:21:fd:61:e2:78:
                    7e:c9:1b:eb:c8:a4:70:b1:de:a3:d9:43:07:16:e3:
                    21:ba:c6:74:e4:59:4f:a4:b2:cc:eb:62:fc:31:1f:
                    ab:6d:2a:e5:1b:ac:e2:c4:a9:81:74:a2:0c:23:a1:
                    42:79:78:76:5d:ae:39:19:95:82:7e:14:57:bd:e1:
                    09:da:97:37:40:49:92:03:a2:01:41:47:4a:c1:c0:
                    cd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CB:3A:BD:49:24:60:32:82:F2:F6:C1:DE:C8:DC:10:F8:81:B2:48
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:a5:14:94:2d:1f:70:59:cb:10:bc:fd:7e:ea:bd:d7:20:
         2f:1f:37:92:f5:47:03:ab:0e:05:28:35:ba:e4:49:e0:3c:db:
         bd:74:34:f5:ea:45:f5:d0:95:ca:a9:70:99:38:56:1c:c7:ec:
         6f:17:1a:f2:b6:8e:2c:45:7c:83:56:9c:4f:f3:db:e1:51:bd:
         8b:0a:59:3a:24:9d:c1:2c:0c:ca:ab:94:f1:e9:73:d2:fe:88:
         8d:86:c6:98:88:5b:39:5c:df:44:eb:c4:fb:98:3b:b6:a9:c6:
         04:27:31:a0:83:b5:27:b6:b0:30:21:49:ac:f5:2e:d1:cc:07:
         b4:05:79:22:bd:2f:6a:46:28:71:5e:9a:82:18:7f:03:25:3e:
         52:fa:99:d6:cc:ee:35:79:75:90:72:10:dc:84:5c:b2:ce:e6:
         c1:7e:06:de:d8:34:a5:36:a0:00:54:33:64:8b:fd:61:47:df:
         9c:9f:af:2d:c2:bc:51:59:fc:d5:0b:ec:d0:bc:2d:db:22:de:
         9f:6a:45:2a:aa:0a:67:17:37:5c:c2:8e:2a:b3:46:63:4e:19:
         98:66:2b:3b:44:56:c0:ef:3a:fc:c3:15:ef:41:92:d1:1c:41:
         2c:29:01:fd:3d:69:2d:e9:bb:e3:dc:45:6d:a4:64:79:88:90:
         44:60:35:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:22 2024 by rpki-client on console-ams.rpki-client.org