Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/390757225E1511EFB04EDA1DC4F9AE02.roa
File:                     390757225E1511EFB04EDA1DC4F9AE02.roa (raw, json)
Hash identifier:          AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=
Subject key identifier:   CD:A6:B5:4C:96:C8:98:54:60:92:5B:78:19:68:11:D0:4A:46:FE:0C
Certificate issuer:       /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial:       03
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/390757225E1511EFB04EDA1DC4F9AE02.roa
Signing time:             Mon 19 Aug 2024 10:24:32 +0000
ROA not before:           Mon 19 Aug 2024 10:24:32 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     153166
IP address blocks:        160.25.186.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
                          rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
        Validity
            Not Before: Aug 19 10:24:32 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c31d5f-f972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:52:3b:53:bf:68:69:7d:c0:21:11:e0:fd:
                    db:a8:e8:ad:ac:31:ed:ec:57:52:29:fd:1e:d9:96:
                    d3:f9:0e:6b:40:e3:58:c3:c1:2d:9d:0b:5a:2e:c7:
                    28:f1:62:15:78:03:51:09:b5:db:96:53:ac:e6:50:
                    6d:e7:f2:e8:32:c8:15:a0:25:b5:9f:2f:31:9b:64:
                    cd:31:86:e2:c8:e3:00:3f:1f:25:1c:10:24:bd:06:
                    25:7c:18:71:c6:08:37:b5:4b:24:a5:d5:d9:8a:10:
                    1d:93:fd:3d:20:b8:43:12:cb:ad:fa:40:3f:c3:46:
                    21:03:2e:09:79:01:2c:f8:e1:f6:97:19:e2:1f:51:
                    cc:f5:8f:5d:e6:6a:c1:be:be:47:e1:98:70:7f:e1:
                    c6:ce:5d:e2:99:4d:6f:78:33:11:db:d1:f2:d2:d2:
                    67:9f:4b:54:76:1e:50:a3:87:3c:57:5c:90:a9:37:
                    d3:e6:6a:75:a9:ef:3a:0f:a4:bf:02:80:39:2b:52:
                    92:b5:73:d6:21:fe:b6:e9:79:3a:2f:70:f7:89:ad:
                    d1:5a:4f:bf:45:92:05:11:62:ed:90:cc:81:2b:b9:
                    1f:ab:eb:c4:89:55:ba:32:ab:06:7c:62:51:2a:c2:
                    87:77:2d:3d:b9:1a:a3:05:19:a5:02:82:9d:65:5d:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:B5:4C:96:C8:98:54:60:92:5B:78:19:68:11:D0:4A:46:FE:0C
            X509v3 Authority Key Identifier:
                keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/390757225E1511EFB04EDA1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:6c:7c:4a:06:40:52:75:b2:ee:3b:94:c6:10:b6:9c:98:88:
         93:74:fb:a5:e0:2e:ea:57:d0:c2:5a:85:61:4b:a4:d8:65:20:
         2d:3b:15:fa:84:3f:26:59:80:35:47:89:11:ef:65:6a:b5:2c:
         86:56:3c:f9:db:58:b3:23:c3:20:c6:f7:83:59:9b:b2:b0:c1:
         f2:6e:64:87:3e:8e:14:d7:83:f9:e0:ea:c7:e7:9b:69:cd:a3:
         f8:8f:15:ab:5b:53:c5:fe:f9:ce:11:a7:b7:6b:44:d8:cf:ce:
         0a:84:e9:eb:20:15:aa:55:b4:d4:17:7c:a0:1a:ab:b8:43:12:
         b4:6c:c3:77:6d:5f:6e:40:3a:7e:4e:f6:c8:1d:3a:82:70:4d:
         70:52:b3:ce:a2:70:c6:51:7a:8b:bf:cb:62:38:ac:75:41:92:
         79:b6:fc:a1:03:76:ba:8d:46:fa:eb:d5:5f:8e:ac:b6:d9:7d:
         d1:8a:27:32:38:ce:e1:1e:59:06:16:a6:75:f9:1a:43:bb:0c:
         52:79:9e:aa:ba:9b:ca:f0:d2:67:fc:54:7c:3a:10:ee:70:a2:
         7e:63:80:36:ac:9a:ed:63:dd:5a:f1:7f:fd:f5:6b:c4:3d:0e:
         e0:4f:fb:a3:e4:33:2b:bc:0a:fc:68:b7:01:fc:87:ab:1d:b3:
         81:a6:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org