Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5C65E16A6F5011EF9432D187C4F9AE02.roa
File:                     5C65E16A6F5011EF9432D187C4F9AE02.roa (raw, json)
Hash identifier:          y+hI95CwhQikdyYQs8RicWXdoIlDzhurZnkfyvPiRac=
Subject key identifier:   9D:18:26:44:BA:56:92:B9:8E:5A:F6:A7:AA:D8:A4:58:04:62:FD:2F
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       02C4
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5C65E16A6F5011EF9432D187C4F9AE02.roa
Signing time:             Tue 10 Sep 2024 08:40:41 +0000
ROA not before:           Tue 10 Sep 2024 08:40:41 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140825
IP address blocks:        160.30.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Sep 10 08:40:41 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e00609-81c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:8a:c1:bc:83:ac:d7:2b:e9:9a:08:6d:6c:
                    1e:dd:e4:bd:3c:df:e8:bc:3c:0a:4d:f9:ac:94:75:
                    ae:68:86:a8:ef:9f:81:3a:41:bd:b5:c6:f9:67:f5:
                    f4:26:bb:52:aa:f3:cf:1b:d6:c3:1b:8d:0d:8e:a6:
                    d1:80:8a:e6:44:dc:2d:e4:f3:33:8a:ff:89:9b:71:
                    63:e1:4c:d1:44:d2:88:13:66:4f:50:b6:ef:0d:d1:
                    ef:56:2f:61:2e:cb:f6:e2:3d:0a:82:e9:c0:ea:da:
                    04:cf:12:82:5d:bd:81:2b:21:01:91:3e:8f:3e:19:
                    59:80:91:51:de:85:10:27:58:77:00:de:4a:ed:83:
                    94:a8:c4:80:91:d4:c4:8a:0b:c3:5d:37:2f:60:fa:
                    00:fb:c6:20:f6:68:07:d9:6a:78:d8:25:ca:a6:47:
                    75:e9:87:77:42:71:ca:f3:18:ab:b4:c8:65:4a:3e:
                    bd:6e:1b:6b:5c:76:c1:f4:59:fc:b0:1e:94:4d:74:
                    8d:71:db:1e:01:cf:34:37:a2:54:ae:0b:7c:c7:58:
                    61:6b:e5:1a:e6:f0:a6:43:28:16:39:67:f5:04:cf:
                    a5:0f:53:11:e7:4b:43:c2:49:a4:5d:1b:55:99:86:
                    c8:2b:4c:b9:b4:e1:99:38:a1:b1:7c:ef:40:40:8e:
                    bc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:18:26:44:BA:56:92:B9:8E:5A:F6:A7:AA:D8:A4:58:04:62:FD:2F
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5C65E16A6F5011EF9432D187C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:33:90:46:9d:9d:00:13:cd:bd:1e:01:2c:cd:33:9d:79:
         c3:61:56:58:49:0b:16:bd:45:d8:a2:4a:c9:71:b5:f7:18:b8:
         d3:48:04:9f:8f:bd:33:ba:aa:8a:c7:de:1a:46:c7:f8:4a:ef:
         a3:6a:55:de:ce:cc:4f:46:35:87:20:99:f0:f1:1c:fc:52:1b:
         61:4a:be:c7:99:bc:3d:d0:f2:1e:9d:b7:e2:a3:19:c0:23:2f:
         86:77:9e:09:6a:16:e1:d0:63:ef:ec:6b:37:90:26:f3:e8:c9:
         2b:09:ea:7d:7f:39:87:0f:44:af:fd:ee:d0:b1:15:25:66:25:
         1e:cd:48:59:00:8e:38:ab:3f:8b:04:58:3f:01:60:56:8e:85:
         a3:d2:19:a2:0b:75:6d:1a:6a:aa:a1:29:92:f6:02:93:be:f5:
         a4:1e:25:46:20:11:19:d4:6d:47:8d:29:34:75:ef:68:de:f6:
         36:2f:d1:40:a0:b8:ff:c5:64:29:ad:c2:0b:ee:cb:0b:c6:29:
         4b:eb:48:21:b6:6b:a7:92:2e:c3:29:53:79:82:f3:0b:db:5e:
         e3:63:ae:0d:31:99:8b:77:a0:30:73:d5:57:73:28:c8:5a:a2:
         81:a7:50:13:79:9c:c0:2a:d7:ba:94:8f:ab:a7:e0:f9:71:ba:
         f0:03:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:02 2024 by rpki-client on console-fra.rpki-client.org