Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/262A51D67BED11EF9BAF751AC4F9AE02.roa
File:                     262A51D67BED11EF9BAF751AC4F9AE02.roa (raw, json)
Hash identifier:          Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=
Subject key identifier:   C5:0C:1B:4A:07:FC:47:6C:30:4A:B2:42:E7:D9:06:2B:9B:C9:BC:B6
Certificate issuer:       /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
Certificate serial:       02
Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/262A51D67BED11EF9BAF751AC4F9AE02.roa
Signing time:             Thu 26 Sep 2024 09:53:15 +0000
ROA not before:           Thu 26 Sep 2024 09:53:15 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     153342
IP address blocks:        160.187.118.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
                          rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
        Validity
            Not Before: Sep 26 09:53:15 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66f52f0b-50c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:41:b5:41:dd:9b:17:c7:33:55:dc:07:06:b5:
                    f4:c0:71:cb:3d:08:d4:64:4b:7e:73:f4:c7:07:41:
                    4f:32:9f:0e:19:8a:24:43:e1:6d:52:bd:bb:26:15:
                    2a:cc:7f:3b:ee:0c:f6:af:b2:e5:75:e7:8b:0c:b0:
                    16:e1:de:74:00:dc:42:e5:fc:a1:b6:e4:28:00:db:
                    c6:c3:c2:56:10:08:0c:b7:9b:55:1b:a3:dc:54:e0:
                    d4:36:39:fa:52:23:36:0b:bd:a6:a2:ec:a6:b2:31:
                    32:0c:9a:8c:47:db:b9:9a:eb:0c:ee:7a:0a:6d:31:
                    92:42:87:69:02:24:ef:5d:01:b6:4a:90:5a:2a:11:
                    6a:c6:bb:e9:25:48:37:81:e0:0f:cc:2d:28:ee:4c:
                    74:d0:f7:20:d0:6b:cf:02:9b:5d:89:f1:6b:2f:1c:
                    92:07:bf:a0:31:4a:f6:94:ad:dd:76:10:9f:31:05:
                    e3:fc:bb:32:48:b7:d1:75:bd:9b:7d:92:66:aa:28:
                    ad:ab:76:8e:ac:69:13:7a:f4:21:87:da:c2:88:40:
                    a8:3e:9d:29:08:2b:4a:ab:76:51:f1:6b:8a:f1:aa:
                    5b:22:c9:35:5f:df:f0:88:de:1f:0f:a6:de:56:d0:
                    1c:7c:d3:e4:39:b4:04:7a:af:89:d9:77:83:75:ec:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:1B:4A:07:FC:47:6C:30:4A:B2:42:E7:D9:06:2B:9B:C9:BC:B6
            X509v3 Authority Key Identifier:
                keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/262A51D67BED11EF9BAF751AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:11:f5:95:90:8d:eb:6a:8e:22:2f:c4:ff:b6:61:f8:fb:
         f7:2c:da:d5:5c:fc:df:6e:40:fc:d6:ba:e6:c9:24:f8:80:c4:
         18:b7:62:dd:59:41:55:2e:43:10:20:54:c8:fe:5b:c3:2d:ed:
         6a:23:49:2f:47:a7:f9:c0:5b:32:94:f1:17:8e:5c:0f:ee:9e:
         e0:e7:3b:f5:29:81:90:e8:c7:d0:95:b2:50:ab:eb:01:1d:e9:
         1e:68:48:84:12:a2:86:f2:b8:7e:09:b7:2f:e3:e8:bf:cc:2b:
         ef:13:06:14:46:64:3f:88:72:6c:a4:13:6f:e8:bc:ab:c6:17:
         ff:ec:eb:e2:26:5d:9c:48:ec:0e:c6:c9:e9:6b:cb:b8:f8:52:
         3e:c5:fa:98:62:d6:21:9f:3a:26:db:c0:74:1b:45:ee:d6:6e:
         ab:5b:4e:f4:01:f9:cc:e6:2e:41:96:1e:07:87:a0:8d:10:02:
         7b:25:e5:23:c0:24:fa:9b:11:93:1a:7e:c1:01:57:00:b1:61:
         5e:a4:2a:69:f6:92:a4:5d:1f:3f:10:78:74:08:e7:62:f7:88:
         bb:aa:f0:76:ad:ee:2e:10:64:8a:e3:93:b6:05:77:44:6a:63:
         2b:a7:f8:1d:7e:35:64:cb:9f:0b:1c:88:a6:e5:bb:2e:59:aa:
         d7:e5:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org