Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FA1A080ECBE611EEA1664E7DC4F9AE02.roa
File:                     FA1A080ECBE611EEA1664E7DC4F9AE02.roa (raw, json)
Hash identifier:          IyPKCHga3PbJHLxOzIL4ofseLODg4LycPU+tjVBvM2A=
Subject key identifier:   7D:41:94:2D:BE:69:1D:94:65:82:36:1C:0C:7B:B4:88:75:C0:D2:1B
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       19FB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FA1A080ECBE611EEA1664E7DC4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:46 +0000
ROA not before:           Thu 30 May 2024 15:52:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     151133
IP address blocks:        157.15.176.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6651 (0x19fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:52:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0ce-9405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:96:91:aa:1a:1c:ae:7c:91:47:16:2f:84:
                    4f:89:b7:f2:4b:45:e3:51:77:81:f5:d7:d0:bb:cd:
                    60:d9:cb:bd:07:fb:ea:65:39:08:a7:f9:b0:d8:4d:
                    01:33:17:1d:d7:0f:70:75:42:20:96:22:5d:a2:d8:
                    eb:7a:f5:93:c6:98:bb:87:2c:e0:13:64:50:32:1e:
                    e5:5d:8d:f9:c4:45:e5:42:25:49:ab:f4:49:8e:da:
                    b0:c8:0e:b0:ea:d3:23:5c:74:98:d7:50:11:ca:66:
                    8e:04:bd:2c:a8:67:24:a1:aa:a6:b9:29:91:97:04:
                    dd:6c:73:5f:3d:d6:bc:3a:d9:b2:8e:f8:94:42:f6:
                    0f:85:d5:da:66:39:13:28:5e:0f:85:36:47:bf:88:
                    f2:9c:4a:2b:09:13:94:e2:27:45:00:87:05:56:8e:
                    1e:03:17:7e:76:06:f1:f1:d6:67:d2:1f:e8:54:a7:
                    76:fb:52:88:98:87:6c:91:0c:75:82:9e:b6:3b:80:
                    23:2c:41:05:05:d3:ea:df:2d:50:cf:95:71:4d:58:
                    16:19:d7:ad:69:f6:e4:2d:62:60:0a:f3:21:11:1d:
                    96:0f:ad:7f:b0:ed:3f:ce:91:ae:29:42:12:0e:2a:
                    d7:80:78:cd:45:c1:f1:9f:14:3e:a0:0b:9a:46:c6:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:94:2D:BE:69:1D:94:65:82:36:1C:0C:7B:B4:88:75:C0:D2:1B
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FA1A080ECBE611EEA1664E7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:5d:4a:03:75:f1:46:a3:30:7c:ff:5d:2b:6f:29:5b:b5:
         10:45:d1:ee:f3:7f:a7:c2:8b:20:8f:3b:be:78:82:45:85:79:
         e1:8d:92:65:72:d6:05:c9:f0:56:59:39:66:aa:cd:88:3a:21:
         92:e5:12:fb:6f:49:08:b4:be:2e:15:6b:65:fc:0e:a5:18:e2:
         2e:e8:9a:da:49:3c:01:dd:ea:cd:5e:b1:35:90:34:46:80:66:
         93:14:9c:56:f1:3b:b3:d2:f8:0f:44:7a:cb:1b:bc:23:d6:03:
         ff:a7:c3:96:51:d1:ae:0d:4b:a1:6f:17:59:a9:75:a7:9a:25:
         ea:a5:26:4a:6c:27:6a:e5:5d:51:bc:de:f0:f4:9c:10:3c:49:
         08:8f:2d:50:8a:b9:6a:4f:ca:fc:0d:94:08:7e:af:65:d0:f5:
         af:8e:de:d1:b8:fb:b8:31:7f:b1:28:b7:40:f3:29:41:da:dd:
         aa:bc:5e:5d:db:1e:e0:91:31:7f:74:2f:10:d4:6c:6c:15:5a:
         7c:2d:32:95:75:d4:03:78:93:68:09:ed:cb:d0:50:04:47:a6:
         ca:04:14:6e:78:a7:90:19:f7:c6:5d:d8:b9:ec:ad:24:32:54:
         63:c9:df:f8:89:a3:22:66:10:61:7c:7f:90:c6:f0:e4:01:d4:
         cf:0f:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org