Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C45F1E56717D11EF8C8DD726C4F9AE02.roa
File:                     C45F1E56717D11EF8C8DD726C4F9AE02.roa (raw, json)
Hash identifier:          96Hgw6ILXG8T+5Ne4mt7H34FIbLXMmNtnjB7Z/deRqs=
Subject key identifier:   32:AF:50:EA:BB:F1:6E:EF:00:74:16:6C:8D:29:3B:2B:AB:96:EF:7C
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       02E2
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C45F1E56717D11EF8C8DD726C4F9AE02.roa
Signing time:             Fri 13 Sep 2024 03:10:45 +0000
ROA not before:           Fri 13 Sep 2024 03:10:45 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     152981
IP address blocks:        160.30.164.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Sep 13 03:10:45 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e3ad35-29a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:41:b3:84:2d:b6:b9:20:59:cd:3e:d2:9e:
                    2e:77:5e:e3:e9:a3:af:62:a4:c4:b7:ba:bc:1f:b6:
                    7b:b9:34:85:40:74:c3:0c:18:c1:ff:1a:d9:d0:60:
                    50:78:87:80:4d:f7:15:b8:2d:22:ff:39:02:7f:ce:
                    b6:bf:eb:6d:1f:31:6f:41:91:40:17:39:5a:be:56:
                    49:fe:bb:59:7c:de:b9:eb:5d:89:16:10:95:69:da:
                    19:ce:03:c8:2e:ce:bd:a3:fa:14:70:23:6d:5f:56:
                    20:6a:c8:1d:fe:89:96:1d:c8:10:14:c4:5c:ca:46:
                    cd:0d:9d:45:1a:24:c8:2a:55:2d:79:e0:94:4d:24:
                    c3:b8:bd:dd:eb:4a:b0:d8:b8:cb:e6:10:c9:c3:17:
                    c9:3f:f9:22:32:28:dd:31:f3:7e:9f:8e:3d:61:d4:
                    b6:10:5b:5b:ee:f6:96:61:be:81:17:c5:48:9e:bc:
                    a7:47:4f:12:1c:f9:3c:58:36:fc:9e:c4:37:72:38:
                    2c:7c:79:5c:d9:0a:5a:76:91:e4:df:e7:06:e9:e8:
                    1e:5d:b4:d0:6a:c3:76:e1:c8:3a:e3:d2:9d:00:7b:
                    47:49:d6:8e:8b:ec:28:e0:45:bb:e1:7b:ce:32:c4:
                    c1:2c:41:6f:78:11:61:59:3d:f4:ce:ae:35:f7:0a:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AF:50:EA:BB:F1:6E:EF:00:74:16:6C:8D:29:3B:2B:AB:96:EF:7C
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C45F1E56717D11EF8C8DD726C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:01:48:29:36:30:ad:c7:a3:2f:bf:3c:ff:1c:30:15:82:a4:
         96:6a:cd:79:10:a6:1d:28:b8:af:5a:38:4f:df:ad:ff:e9:fd:
         69:7b:d9:fb:a5:b5:2e:ac:60:ac:c9:9c:2f:f7:bd:b5:b7:be:
         bc:2d:ac:f6:b9:d4:c8:3e:e9:6c:f9:eb:fa:44:b2:4e:ee:cc:
         f1:76:91:ee:2a:2f:e0:63:63:da:86:4a:e8:03:d4:15:25:ae:
         f2:6d:24:f2:55:58:f9:d5:91:85:1b:0a:d2:9f:d7:f8:00:e3:
         a5:45:6c:d3:92:ba:bc:aa:d8:38:92:92:b1:a7:03:ec:3d:61:
         98:3c:72:61:84:a1:75:6d:1e:e0:ba:5a:15:f3:e3:b2:21:74:
         ca:ad:eb:35:9c:04:35:c5:c1:d0:8d:85:e8:ca:80:ef:5d:4c:
         01:33:76:f3:59:29:c1:ae:67:49:f7:c9:8e:25:17:e8:c6:5f:
         5c:94:95:06:81:67:60:ad:84:26:25:27:a0:af:5c:80:6d:6d:
         d7:9a:6f:a1:f0:37:e4:c5:44:7e:38:a4:80:af:29:9d:d8:87:
         db:1b:8a:a1:06:39:90:09:16:42:69:b6:30:28:ad:53:96:bf:
         59:8a:b9:76:99:d2:37:72:ea:0e:95:95:a4:94:14:e9:5a:27:
         73:c7:ac:37
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjQwOTEzMDMxMDQ1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmUzYWQzNS0yOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqdBs4QttrkgWc0+0p4ud17j6aOvYqTEt7q8H7Z7uTSFQHTDDBjB/xrZ0GBQ
eIeATfcVuC0i/zkCf862v+ttHzFvQZFAFzlavlZJ/rtZfN65612JFhCVadoZzgPI
Ls69o/oUcCNtX1Ygasgd/omWHcgQFMRcykbNDZ1FGiTIKlUteeCUTSTDuL3d60qw
2LjL5hDJwxfJP/kiMijdMfN+n449YdS2EFtb7vaWYb6BF8VInrynR08SHPk8WDb8
nsQ3cjgsfHlc2QpadpHk3+cG6egeXbTQasN24cg649KdAHtHSdaOi+wo4EW74XvO
MsTBLEFveBFhWT30zq419wp68QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDKvUOq7
8W7vAHQWbI0pOyurlu98MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQzQ1RjFFNTY3
MTdEMTFFRjhDOERENzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgHqQwDQYJKoZIhvcNAQELBQADggEBAAYBSCk2MK3Hoy+/
PP8cMBWCpJZqzXkQph0ouK9aOE/frf/p/Wl72fultS6sYKzJnC/3vbW3vrwtrPa5
1Mg+6Wz56/pEsk7uzPF2ke4qL+BjY9qGSugD1BUlrvJtJPJVWPnVkYUbCtKf1/gA
46VFbNOSuryq2DiSkrGnA+w9YZg8cmGEoXVtHuC6WhXz47IhdMqt6zWcBDXFwdCN
hejKgO9dTAEzdvNZKcGuZ0n3yY4lF+jGX1yUlQaBZ2CthCYlJ6CvXIBtbdeab6Hw
N+TFRH44pICvKZ3Yh9sbiqEGOZAJFkJptjAorVOWv1mKuXaZ0jdy6g6VlaSUFOla
J3PHrDc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:02 2024 by rpki-client on console-fra.rpki-client.org