Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/981C74DC8A0611EFBA8EF824C4F9AE02.roa
File:                     981C74DC8A0611EFBA8EF824C4F9AE02.roa (raw, json)
Hash identifier:          8HZQE1HRltx0dZsmH/AKJ7kuHF2YID/gR5k7fT2v2Yg=
Subject key identifier:   C9:60:F3:A0:E7:D8:40:C0:68:E3:27:DD:D7:CC:D9:93:C3:E2:BF:82
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0350
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/981C74DC8A0611EFBA8EF824C4F9AE02.roa
Signing time:             Mon 14 Oct 2024 08:30:40 +0000
ROA not before:           Mon 14 Oct 2024 08:30:40 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     153004
IP address blocks:        160.187.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct 14 08:30:40 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=670cd6b0-d944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:69:60:d5:45:19:46:fd:dc:72:66:1e:88:
                    14:45:ee:37:a9:a8:23:9d:f1:a4:c8:86:65:74:24:
                    3b:b6:07:47:b4:e4:31:f5:d9:fa:17:1d:7b:8e:d6:
                    05:6b:47:21:77:1a:10:a0:cd:3e:71:f8:c3:c3:68:
                    dc:58:00:21:4a:64:c9:90:10:55:16:c8:81:72:22:
                    89:70:86:f8:e2:58:1c:05:fb:29:e6:4d:ba:f0:43:
                    ec:8a:1d:4e:ed:8c:36:12:12:21:35:7a:aa:05:47:
                    15:b6:5a:b3:eb:47:66:9b:3d:8e:81:c4:91:5f:59:
                    bf:bb:bc:21:9a:be:05:6c:a4:d1:85:d4:06:41:47:
                    67:cd:09:ac:96:40:cb:2c:a0:30:39:76:1c:8b:e4:
                    89:a8:52:54:c0:10:60:08:f7:90:75:87:93:38:0d:
                    ec:e6:1f:81:41:6e:50:6d:b3:8a:61:c0:3d:f2:53:
                    f9:d1:38:f6:dc:54:8c:0f:fa:b2:0e:62:48:15:be:
                    90:61:ed:cd:22:3c:a2:1c:b1:d8:fa:54:e1:09:cd:
                    ab:e7:77:b9:6e:87:d2:4a:18:4c:9a:89:94:61:db:
                    9c:63:9e:33:b7:08:e3:c3:af:68:07:31:5b:a9:db:
                    e9:50:c5:7d:f1:ef:90:d2:22:63:81:83:ce:64:cd:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:F3:A0:E7:D8:40:C0:68:E3:27:DD:D7:CC:D9:93:C3:E2:BF:82
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/981C74DC8A0611EFBA8EF824C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:d5:83:42:fc:24:c4:9d:84:1d:57:f4:8a:b7:69:9e:ea:
         cb:c5:7f:e2:9b:5c:e2:3a:f1:8b:18:3d:7f:03:d1:b5:ab:f1:
         c9:8e:cf:9a:92:86:a7:1c:9a:cf:9a:af:ee:f5:a2:97:69:88:
         ba:33:a8:d2:13:46:1c:57:5f:ef:7a:fa:6d:15:ad:77:90:28:
         54:b6:f7:08:cf:3e:4e:9c:ab:08:55:99:95:aa:c0:5e:22:6e:
         dd:93:8a:b8:87:65:52:3b:c6:0c:c7:9b:8d:03:ba:5f:c7:c3:
         3c:c4:43:e4:db:a1:a8:cd:ff:f7:1b:9f:db:5e:10:51:b4:61:
         4d:f6:b0:d6:6a:c0:2f:88:a1:9b:4d:c0:48:f3:e1:c7:89:84:
         63:fc:08:ff:76:d1:b7:5c:a7:6a:dd:0f:71:20:0b:b5:f2:10:
         c1:a5:32:43:ec:e4:6d:6d:a9:6b:79:60:ed:cf:da:64:b3:ff:
         33:05:d9:2c:48:50:24:3a:92:b2:f3:3b:c9:89:24:35:cb:2e:
         b0:2d:bc:fa:10:95:8b:bf:8b:4d:2d:0c:f3:eb:6e:c0:b5:05:
         bd:5f:90:58:fa:47:41:29:24:cb:19:ad:5b:28:7a:89:b5:46:
         c0:de:2e:f2:fc:cc:69:17:f0:33:87:fb:05:95:d2:06:d6:f8:
         86:59:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:36 2024 by rpki-client on console-ams.rpki-client.org