Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/139C500E3FEE11EFADFD8221C4F9AE02.roa
File:                     139C500E3FEE11EFADFD8221C4F9AE02.roa (raw, json)
Hash identifier:          5j55WDn1mrmuQ8M6je9PiZMSEKWHvI5dS8pNDO9cUEI=
Subject key identifier:   1B:1A:0F:BC:DD:CD:7C:F3:4B:D2:BA:04:37:C6:28:29:4C:55:2C:8E
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       029C
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/139C500E3FEE11EFADFD8221C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:31:13 +0000
ROA not before:           Thu 05 Sep 2024 03:31:13 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     152933
IP address blocks:        160.22.160.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Sep  5 03:31:13 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92601-aa22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0f:03:89:b3:a4:65:48:bb:65:2f:ad:95:f0:
                    b0:bc:b2:bb:c0:7d:16:cb:fd:db:74:e3:67:57:ba:
                    ba:7c:9f:97:82:a2:a7:50:c3:f8:56:47:b3:b9:a8:
                    e6:08:0d:b6:d8:9a:e1:b5:39:c1:2f:3a:d0:71:f7:
                    ea:e6:c8:3c:08:97:8e:0a:8f:8b:d2:b7:6d:09:c4:
                    a0:06:73:47:17:21:f9:61:1d:50:4f:50:a3:c0:3d:
                    4c:6b:f1:95:d0:16:70:06:f3:e6:90:38:9a:c7:19:
                    9a:92:d3:18:1b:71:68:93:e6:2e:c4:51:3f:67:9d:
                    f1:b7:81:01:a6:fb:45:4c:78:db:9e:2c:b7:6e:40:
                    d8:50:1c:2c:85:8c:74:9e:fd:ae:9a:77:f8:b2:67:
                    08:99:bf:93:d2:dc:c2:53:d6:44:1c:5f:c9:39:fa:
                    52:fd:17:51:f5:47:d5:2a:a9:d7:2c:c6:9d:99:2e:
                    63:b1:58:4e:f2:19:4f:7f:34:d1:cd:80:25:fe:4d:
                    36:d4:5d:21:ee:da:db:4e:88:fe:b8:81:24:47:19:
                    7d:ab:36:9d:98:5d:a5:0f:d5:a6:39:47:ec:e6:f1:
                    59:d0:52:64:b9:d4:a0:4b:b0:de:37:d8:cd:54:dc:
                    4f:d1:4c:86:f8:d8:fe:66:05:18:e6:50:ef:c1:f3:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1A:0F:BC:DD:CD:7C:F3:4B:D2:BA:04:37:C6:28:29:4C:55:2C:8E
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/139C500E3FEE11EFADFD8221C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:e0:1e:f3:02:47:b4:d0:70:b8:96:32:bc:61:88:44:c9:d4:
         30:81:f1:0b:ec:97:ff:55:e5:93:e5:57:a3:98:5d:38:2a:e4:
         18:c9:18:3b:72:be:75:22:ef:56:37:d1:8e:b2:d2:e4:21:69:
         32:98:8c:81:fc:10:23:dc:78:92:cf:a8:40:61:6f:d4:52:ea:
         fe:d7:93:86:9d:22:2b:0a:c4:f6:67:06:5d:7f:cb:a5:11:76:
         22:b0:d1:1d:69:58:fc:18:82:be:14:38:4f:20:52:d1:1e:8b:
         3f:16:53:04:00:93:bc:26:f2:56:f3:f8:f3:a2:3c:ce:b8:4b:
         67:dc:28:b8:6b:33:6b:0d:a9:3f:0f:e8:3b:a5:c0:37:b6:e2:
         e1:2a:23:5a:7e:fc:cc:fd:7e:1e:41:ce:2e:24:e3:7f:7f:c0:
         b1:0f:f8:e8:02:54:62:85:6c:26:13:4a:ac:49:8a:44:96:e2:
         54:b9:3c:67:9b:70:58:58:aa:f6:fb:d9:ed:7a:b8:32:ad:e1:
         c7:5b:10:13:3d:06:40:08:e0:41:3c:38:d4:7c:8f:20:39:3b:
         32:23:e1:ad:c6:13:84:90:99:bf:19:33:60:08:58:91:3b:96:
         30:0f:3d:98:b7:e9:22:38:4e:4b:a0:a4:7b:18:73:f7:fe:32:
         56:05:23:d9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjQwOTA1MDMzMTEzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjYwMS1hYTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Q8DibOkZUi7ZS+tlfCwvLK7wH0Wy/3bdONnV7q6fJ+XgqKnUMP4Vkezuajm
CA222JrhtTnBLzrQcffq5sg8CJeOCo+L0rdtCcSgBnNHFyH5YR1QT1CjwD1Ma/GV
0BZwBvPmkDiaxxmaktMYG3Fok+YuxFE/Z53xt4EBpvtFTHjbniy3bkDYUBwshYx0
nv2umnf4smcImb+T0tzCU9ZEHF/JOfpS/RdR9UfVKqnXLMadmS5jsVhO8hlPfzTR
zYAl/k021F0h7trbToj+uIEkRxl9qzadmF2lD9WmOUfs5vFZ0FJkudSgS7DeN9jN
VNxP0UyG+Nj+ZgUY5lDvwfMIOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBsaD7zd
zXzzS9K6BDfGKClMVSyOMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMTM5QzUwMEUz
RkVFMTFFRkFERkQ4MjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgFqAwDQYJKoZIhvcNAQELBQADggEBALTgHvMCR7TQcLiW
MrxhiETJ1DCB8Qvsl/9V5ZPlV6OYXTgq5BjJGDtyvnUi71Y30Y6y0uQhaTKYjIH8
ECPceJLPqEBhb9RS6v7Xk4adIisKxPZnBl1/y6URdiKw0R1pWPwYgr4UOE8gUtEe
iz8WUwQAk7wm8lbz+POiPM64S2fcKLhrM2sNqT8P6DulwDe24uEqI1p+/Mz9fh5B
zi4k439/wLEP+OgCVGKFbCYTSqxJikSW4lS5PGebcFhYqvb72e16uDKt4cdbEBM9
BkAI4EE8ONR8jyA5OzIj4a3GE4SQmb8ZM2AIWJE7ljAPPZi36SI4TkugpHsYc/f+
MlYFI9k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:01 2024 by rpki-client on console-fra.rpki-client.org