Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/1E595AE8DD0E11EE9833196BC4F9AE02.roa
File:                     1E595AE8DD0E11EE9833196BC4F9AE02.roa (raw, json)
Hash identifier:          ABk7UnhSiI/cyac2q37QjbleVm+GdMhRfrm7xL7Vb0c=
Subject key identifier:   26:86:11:E0:B2:26:11:68:DA:32:4B:C5:F3:8B:B9:7B:8D:28:7B:91
Certificate issuer:       /CN=A91A7CDD/serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
Certificate serial:       04
Authority key identifier: 83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/1E595AE8DD0E11EE9833196BC4F9AE02.roa
Signing time:             Fri 08 Mar 2024 05:39:22 +0000
ROA not before:           Fri 08 Mar 2024 05:39:22 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     18109
IP address blocks:        157.20.114.0/24 maxlen: 24
                          157.20.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CDD/serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
        Validity
            Not Before: Mar  8 05:39:22 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65eaa489-b99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:64:7c:87:89:4c:67:ab:3d:bc:e7:1f:5d:
                    f8:74:af:75:e2:9c:21:ee:a0:25:21:fa:d6:22:5a:
                    8d:f5:6d:4f:8c:db:b0:68:69:3a:22:d0:dc:9a:69:
                    4e:08:a2:5b:2e:84:06:1e:bd:c5:ee:3d:f2:ed:8f:
                    83:85:9f:b6:a3:d0:ab:09:3a:0a:50:40:a2:bc:38:
                    52:66:8e:ff:95:1a:0c:b1:39:be:f1:5a:80:a5:02:
                    9c:b6:1b:1e:f4:a1:46:1e:20:df:82:02:34:9b:20:
                    ed:e5:71:62:13:8a:09:79:61:7d:5f:ef:4f:06:2b:
                    31:f0:b3:88:99:49:76:d6:3c:30:c0:e1:d4:82:4a:
                    40:34:4b:4d:31:46:65:a1:02:3d:c2:eb:35:ad:80:
                    e1:a5:be:09:c3:f5:25:d7:cb:03:ab:35:f8:10:91:
                    cf:ce:4b:80:6f:e6:6b:83:42:d4:bd:29:3f:4f:54:
                    23:55:2c:cb:cb:a2:ca:8c:c0:9b:78:a5:25:92:f3:
                    47:5e:60:5a:a5:06:ca:cc:4f:5f:de:ea:82:9e:77:
                    62:ba:ca:99:0f:ac:c6:bc:8c:bd:72:43:22:80:9e:
                    f3:ad:c9:ed:8e:6e:a9:47:48:ef:88:7b:38:36:2e:
                    5b:17:5c:d5:91:cf:57:57:5b:40:4d:ce:a4:77:f3:
                    65:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:86:11:E0:B2:26:11:68:DA:32:4B:C5:F3:8B:B9:7B:8D:28:7B:91
            X509v3 Authority Key Identifier:
                keyid:83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/1E595AE8DD0E11EE9833196BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:bb:62:1b:54:97:e0:35:8f:b1:60:42:b4:99:fc:62:a5:47:
         ef:2d:6c:4f:04:84:12:4a:e9:95:1a:28:8f:e7:77:70:8d:99:
         9d:44:76:06:9e:b0:33:0e:17:66:44:a1:a0:81:12:08:34:9d:
         b2:f4:e0:e3:bf:de:2f:fa:e5:e5:02:e4:cd:76:fd:91:25:66:
         f0:a3:ce:86:f8:42:ad:a9:15:1c:03:c5:ad:41:21:64:c5:2d:
         8a:5a:18:e3:79:d8:3b:09:5a:62:37:fe:fc:56:35:61:59:98:
         9f:18:07:4c:61:ce:43:36:be:3b:5c:34:e2:cd:bb:3f:9f:58:
         4a:a2:e9:a8:59:60:fc:c6:9e:98:c8:2a:26:2b:3f:a9:66:30:
         85:fc:64:75:47:6b:77:5c:72:bf:40:8b:84:7b:3d:7a:87:28:
         17:5d:f7:61:25:9e:4f:a0:15:0a:56:08:47:e7:1c:f9:14:02:
         fb:36:39:9b:35:3b:53:37:9c:ca:53:87:60:39:a5:96:f0:1a:
         1c:dd:8d:30:be:df:e8:ee:30:28:a1:cb:5c:6f:bb:c5:4d:ba:
         48:6f:e8:b3:28:3b:4d:61:52:2d:fd:73:d5:77:a9:6f:47:38:
         3f:bb:00:9a:6e:6d:c4:25:fe:1d:bf:36:96:92:8d:55:c3:68:
         af:0b:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:14 2024 by rpki-client on console-ams.rpki-client.org