Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa
File:                     70ED9D2837D111EF99A8011CC4F9AE02.roa (raw, json)
Hash identifier:          XcL7vfDB7+jSL63SdSHmjhv1kS+M1yfgUS1Jg2qNUac=
Subject key identifier:   35:E0:8A:0F:F7:97:54:04:A8:90:ED:84:22:44:DA:B6:80:8C:EB:08
Certificate issuer:       /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial:       02
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa
Signing time:             Mon 01 Jul 2024 17:43:35 +0000
ROA not before:           Mon 01 Jul 2024 17:43:35 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     153045
IP address blocks:        160.25.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
                          rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 05:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
        Validity
            Not Before: Jul  1 17:43:35 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6682eac7-ad49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6c:93:e3:7a:c5:c4:25:b0:c3:de:3b:f3:e9:
                    f6:1f:24:5a:83:98:5d:02:8e:30:7d:01:d0:3d:86:
                    cc:20:21:0b:5a:d7:a2:bc:96:ae:53:c0:63:1a:ab:
                    83:53:78:93:b0:9e:72:ba:9a:fe:71:8a:09:3c:b1:
                    91:7e:50:ee:46:d8:0d:b1:11:32:45:f8:94:77:ca:
                    37:c5:0f:bb:d3:3e:a6:52:b7:05:67:a5:d1:dd:d6:
                    97:d2:52:c6:1b:c7:6b:76:2c:8d:45:97:47:af:e2:
                    c5:aa:d8:19:e2:8c:39:05:19:b0:2d:05:a2:00:f0:
                    24:9d:93:a4:6d:32:31:c1:f8:79:01:01:7c:7f:8a:
                    9b:42:8f:b3:4a:2f:82:90:ff:30:af:7d:b4:be:66:
                    78:c7:01:ff:c4:4c:84:39:71:31:82:06:54:c5:0f:
                    d9:16:b5:51:d0:67:8d:a4:db:16:aa:b6:69:77:2c:
                    fb:2a:31:7c:8d:e4:d3:83:2c:45:4a:eb:01:09:82:
                    3f:3f:ca:5f:45:86:d8:5b:7e:30:1f:cb:31:5f:04:
                    74:11:06:1d:47:91:97:36:75:6c:71:52:72:2e:ec:
                    57:13:50:f7:55:ff:6f:bf:14:ea:c6:eb:c3:db:df:
                    8b:09:26:a6:c1:ef:a0:27:bd:ce:09:13:43:b9:a8:
                    b8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E0:8A:0F:F7:97:54:04:A8:90:ED:84:22:44:DA:B6:80:8C:EB:08
            X509v3 Authority Key Identifier:
                keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:b4:f9:37:46:d6:13:9f:59:fd:d0:09:7a:ff:3b:a6:2c:
         3a:01:1b:45:90:2d:3a:ca:72:59:fc:05:c8:c9:5a:7e:e8:47:
         67:62:04:ba:9f:3e:f5:c0:83:31:d4:08:93:47:46:50:4a:fa:
         de:ab:27:38:87:ff:51:e1:c1:9a:0c:d9:03:7d:55:a3:f9:9b:
         37:34:29:e4:8c:b1:66:2d:a7:38:8c:62:a9:90:71:05:58:2f:
         20:4e:c6:4b:51:36:b0:45:21:c9:26:c5:44:c1:dc:8c:12:d0:
         f5:74:e0:65:88:53:9a:8d:32:bf:7a:db:9c:3f:c8:81:d7:46:
         9e:51:57:f9:b6:7b:88:75:6a:ca:bd:43:de:1f:30:8a:31:0e:
         0f:72:c5:30:2d:10:5a:7d:aa:5a:e7:dc:9d:92:8a:38:31:a1:
         68:e6:4c:54:df:6f:6d:cd:58:5a:be:73:0f:e0:3d:1a:d6:09:
         ab:ca:b9:56:1b:22:a3:d8:15:76:48:1d:e3:7e:9a:07:df:6b:
         74:b7:04:c5:b3:01:43:22:00:54:c9:dd:0a:7d:00:49:ac:36:
         73:c2:fa:42:9d:ee:5d:7a:32:28:fd:82:38:db:db:f8:10:a8:
         62:2f:48:49:1b:39:94:b2:b0:2e:51:10:1e:51:34:20:1a:f5:
         42:ca:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:14:21 2024 by rpki-client on console-fra.rpki-client.org