Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7746DBBAA87111EF81AAB431C4F9AE02.roa
File:                     7746DBBAA87111EF81AAB431C4F9AE02.roa (raw, json)
Hash identifier:          8M/kOk+cOTXPOGKNKYFuLAknZGZLe44g3bvkq9VdVzw=
Subject key identifier:   B9:7A:25:36:BF:CB:B5:BE:49:88:62:DC:43:5F:D4:11:09:C0:29:58
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0418
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7746DBBAA87111EF81AAB431C4F9AE02.roa
Signing time:             Fri 22 Nov 2024 01:31:16 +0000
ROA not before:           Fri 22 Nov 2024 01:31:16 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     151866
IP address blocks:        160.187.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Nov 22 01:31:16 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=673fdee4-bac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:02:b3:46:78:53:13:c1:50:33:04:49:e0:
                    c9:25:26:b9:c8:cb:19:32:69:43:c0:6c:73:07:48:
                    3a:8b:93:31:b7:ff:66:69:96:44:9f:60:a8:36:bf:
                    0e:22:c7:1a:02:3c:92:cb:46:43:45:3e:11:31:22:
                    42:af:4f:97:86:a3:e5:2a:f6:52:33:91:39:71:46:
                    48:45:71:a0:39:5c:d4:f4:bd:23:6c:ba:81:7d:d2:
                    30:8c:18:ab:9d:40:b6:5d:b9:13:3b:48:28:9d:da:
                    a8:5a:3d:60:8f:c4:92:43:7f:19:40:e2:d4:9a:1a:
                    77:d2:8d:e6:d0:54:e1:fc:22:60:61:a6:51:54:26:
                    19:4a:49:ad:6d:e6:3d:ad:01:5a:72:e7:5e:a3:f4:
                    b8:02:c0:f3:82:ee:82:ca:d9:f7:64:01:8d:e6:d8:
                    b8:1d:d7:81:22:f3:99:91:55:d9:67:0a:d3:3b:90:
                    69:5e:f4:d9:55:7a:b0:9d:4b:63:53:7e:cb:c7:2c:
                    18:4d:82:39:5f:29:00:4b:5e:9b:08:13:9b:27:a1:
                    19:cd:db:93:c7:fe:84:bf:79:bc:60:4d:b0:f2:7a:
                    84:2f:55:33:a0:74:7c:99:01:a3:6e:43:2e:a1:99:
                    02:06:0f:dd:94:ef:b2:df:8d:1b:bc:cb:b7:c0:a4:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7A:25:36:BF:CB:B5:BE:49:88:62:DC:43:5F:D4:11:09:C0:29:58
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7746DBBAA87111EF81AAB431C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ed:72:17:65:7d:0a:97:f2:0e:25:c1:eb:3c:95:d4:cf:3a:
         16:11:d3:69:05:be:df:e3:66:fd:f9:0a:1c:33:d0:d0:cb:f0:
         a2:93:7c:b9:c0:6d:d6:ac:fe:0b:42:19:02:18:0e:e5:83:55:
         7f:09:b5:6a:5a:f0:d8:3e:d9:f3:15:19:10:bd:08:94:e8:26:
         fb:64:11:b7:c3:c4:3e:ed:e6:9e:46:71:46:e8:26:0c:a5:e0:
         be:da:af:1b:82:c8:6f:cf:69:f1:04:89:8b:0d:5b:f9:72:28:
         94:e3:d6:12:7f:6d:42:fa:c8:ad:5f:b5:ae:70:0f:a8:d8:11:
         37:c2:03:95:6d:a8:af:ef:e8:16:40:6f:c0:ab:0f:e5:1f:79:
         a1:53:cd:d3:85:a8:3f:40:29:c9:54:a4:46:6b:dc:ff:c7:e7:
         c1:c5:1a:14:87:91:c2:1b:8d:3c:a8:35:10:47:fb:10:38:05:
         c0:ae:55:1a:2b:29:47:f4:2d:60:f2:7d:19:de:5e:8a:fc:b1:
         7b:51:e5:19:60:fc:c3:ce:79:dd:19:da:c1:e0:92:c3:b9:d1:
         b5:b9:ec:07:7a:fb:e9:7e:fb:2d:65:0f:0d:be:01:1d:9f:c2:
         29:86:19:0d:b4:1e:23:83:e6:b9:7e:e9:f4:0d:31:0d:fe:88:
         bc:4f:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:31 2024 by rpki-client on console-ams.rpki-client.org