Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/624B23BC8C8B11EFBF4E663CC4F9AE02.roa
File:                     624B23BC8C8B11EFBF4E663CC4F9AE02.roa (raw, json)
Hash identifier:          6Oz0vrrpNKQmU11IlPGO1bE7Z7uTiqspI8DQu74cPm4=
Subject key identifier:   E9:57:0C:1B:8A:CC:F8:88:CC:7A:90:47:4D:9B:D5:A6:E2:68:D9:50
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0360
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/624B23BC8C8B11EFBF4E663CC4F9AE02.roa
Signing time:             Thu 17 Oct 2024 13:26:15 +0000
ROA not before:           Thu 17 Oct 2024 13:26:15 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     152944
IP address blocks:        160.25.86.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct 17 13:26:15 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=67111077-0c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:2c:8e:70:9a:c5:e9:81:4d:36:58:ec:e1:
                    09:8c:7a:06:2a:04:e2:cc:6d:ff:53:b1:5e:55:32:
                    1d:5d:48:a5:33:68:15:a2:45:1b:d6:1e:90:d9:1f:
                    7c:9e:81:a2:dc:cc:bf:ae:bc:bd:ca:42:65:63:56:
                    00:ee:05:70:c6:0e:cd:fe:1f:e1:6e:17:ba:1b:47:
                    11:22:23:97:2e:b1:37:a2:28:e8:a4:ac:ad:11:7e:
                    4a:78:18:b4:15:bf:da:96:93:e9:ae:86:72:49:e8:
                    1f:c3:11:17:75:fd:cf:53:0d:17:4a:dd:6d:e6:96:
                    42:10:81:e6:fb:14:97:23:69:1b:75:fd:e0:64:8a:
                    4f:73:66:3d:1b:b5:39:83:25:bd:af:11:fc:18:a5:
                    8f:2e:b2:da:be:5a:57:50:08:71:4b:19:f2:5f:0b:
                    d4:a6:7f:fb:d0:2b:48:ae:85:f5:c8:89:6e:1e:fb:
                    d7:ca:cf:07:b9:cc:c5:7d:7d:37:92:5d:01:00:b5:
                    3f:54:c9:ec:99:03:5d:48:fa:7f:ba:23:22:2f:e5:
                    e8:65:76:a3:d4:2a:a4:ed:70:23:b7:82:f3:84:58:
                    a0:96:53:b1:33:3b:3e:e0:4a:8d:3d:bf:65:06:3c:
                    ba:7e:85:dc:e7:70:de:10:c5:67:be:cb:da:41:d6:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:57:0C:1B:8A:CC:F8:88:CC:7A:90:47:4D:9B:D5:A6:E2:68:D9:50
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/624B23BC8C8B11EFBF4E663CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:6a:bb:a8:f0:37:38:1b:5b:36:91:bf:81:94:ba:d2:3f:98:
         ac:7b:86:0c:02:d4:e5:42:4e:69:17:da:da:84:c3:aa:ba:3a:
         7f:51:4f:9b:a1:8c:fe:7c:18:d0:ed:78:5c:67:09:83:a5:0e:
         6e:43:5b:da:be:15:a1:ab:65:5a:c1:f5:65:76:e2:ca:30:f0:
         c0:ee:af:66:2a:3b:7e:ee:ab:e2:59:79:12:df:9d:da:59:d7:
         d1:08:86:a8:0f:bc:e9:bb:f5:8f:a1:18:12:e1:4b:da:93:6c:
         e0:85:8d:a0:77:d4:40:1a:b4:e4:e0:e4:56:1a:df:39:d3:be:
         3b:c8:ed:e5:a3:58:5c:4d:92:e4:80:26:4b:bc:a4:3c:46:9d:
         c4:ec:f5:f4:7b:5d:06:b6:59:87:89:5a:f8:85:f5:2b:ea:84:
         3f:e0:74:3b:ec:8b:82:c6:9d:4e:c4:78:d3:e9:76:38:fe:ab:
         6a:2b:34:46:f9:7d:3c:7a:b4:c4:92:65:fb:d3:3b:9d:f6:f7:
         05:1d:1b:80:15:6b:ad:74:e8:af:32:eb:1e:05:52:d2:f1:e3:
         4a:a4:e4:b9:86:6f:33:f8:16:f3:e4:7d:2a:7c:df:48:2f:90:
         ae:d2:41:79:cf:00:ee:c0:82:b0:30:2b:7d:08:c7:25:7b:86:
         95:82:97:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:36 2024 by rpki-client on console-ams.rpki-client.org