Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/083E1314A0A111EF84620260C4F9AE02.roa
File:                     083E1314A0A111EF84620260C4F9AE02.roa (raw, json)
Hash identifier:          20U7R8Yje/fzXp5s/Ng4KAPvO8aTGVHHdc0Vt45hE8k=
Subject key identifier:   7D:D7:B8:CF:A2:DE:E7:52:7F:E9:C4:97:D4:00:35:84:E6:29:07:39
Certificate issuer:       /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Certificate serial:       06
Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/083E1314A0A111EF84620260C4F9AE02.roa
Signing time:             Tue 12 Nov 2024 03:05:24 +0000
ROA not before:           Tue 12 Nov 2024 03:05:24 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     135426
IP address blocks:        160.30.148.0/23 maxlen: 23
                          160.30.148.0/24 maxlen: 24
                          160.30.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
                          rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
        Validity
            Not Before: Nov 12 03:05:24 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6732c5f4-8092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:99:d5:bc:d0:d7:b4:9e:e9:85:6b:4f:d7:
                    87:0f:d2:f8:82:e1:91:71:13:30:e9:78:5a:68:bd:
                    83:72:00:7b:89:d0:46:b9:43:8a:15:64:bd:68:64:
                    67:aa:e2:bc:92:86:ad:a7:d8:c8:04:af:6c:72:98:
                    d9:20:51:82:9b:b5:d9:31:6c:67:c1:e1:30:b9:79:
                    f5:1e:11:ef:db:2e:05:bd:d2:32:89:95:b5:8f:c3:
                    bf:82:25:e3:2a:f4:4b:c6:40:e6:d9:2d:0d:20:a5:
                    30:c3:29:41:76:ad:e1:7d:3c:e4:2d:99:04:0e:71:
                    05:9a:d7:25:97:e0:68:17:99:e5:d3:96:bb:de:0b:
                    3a:59:6b:49:10:d4:2b:86:0b:e6:32:ea:09:28:e3:
                    6c:a5:fd:89:47:45:4a:7c:c6:14:0a:09:02:b4:9c:
                    6d:b2:0b:84:5b:0e:f8:f5:7c:7d:4e:f8:92:a2:3f:
                    6b:b3:cb:0d:10:e2:eb:ef:71:a8:49:f8:80:46:e0:
                    4e:98:6e:e9:48:01:5e:bb:9b:6c:ce:3d:ed:09:64:
                    c1:7b:f4:9a:ad:c9:d4:00:de:5b:ab:01:71:58:a3:
                    d1:d3:35:f8:38:ca:71:26:a1:ce:5a:4d:10:16:13:
                    46:7b:91:e7:20:65:0a:81:07:a3:c8:ed:09:18:58:
                    e0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D7:B8:CF:A2:DE:E7:52:7F:E9:C4:97:D4:00:35:84:E6:29:07:39
            X509v3 Authority Key Identifier:
                keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/083E1314A0A111EF84620260C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:0f:fa:10:97:f5:6c:37:cf:2e:42:26:7e:da:d1:4b:9e:60:
         7b:b8:54:97:f4:77:44:0b:e5:3f:6b:3d:e9:c7:c6:0e:48:99:
         a5:d2:45:6b:ba:05:73:4e:a9:1c:70:e7:36:a2:7a:b3:9d:63:
         4f:10:ad:04:ca:20:31:97:5a:c0:e8:49:f7:99:9b:db:7c:26:
         b5:74:db:63:7e:51:b0:9d:7f:0e:ba:92:c8:9a:44:1c:79:a9:
         43:0f:c3:4d:fe:e9:f8:ce:3e:01:1e:3c:1c:89:43:ac:74:f3:
         2a:8e:f5:df:57:52:a8:55:2b:a3:0d:53:91:17:43:5d:52:f3:
         1b:a6:e5:40:f0:c3:9a:3b:c9:40:22:ea:b3:da:1a:5c:01:35:
         74:bf:42:1a:ce:0f:d6:92:68:f8:83:3f:bd:a1:4c:25:49:43:
         c5:bc:85:dc:f5:59:b3:48:d9:79:ba:bb:70:c3:6b:01:9b:d6:
         e8:21:91:ec:ae:0f:43:1d:b9:43:56:4d:da:49:66:29:95:26:
         d6:45:92:71:90:91:67:4f:e8:47:5a:4f:ba:43:00:d3:f5:76:
         3f:f9:31:e8:a9:6c:f7:d6:0c:47:23:31:df:d6:3c:1d:7c:3a:
         ba:38:af:ad:99:0d:52:2a:ea:fc:f0:4b:9d:19:6f:2e:c6:34:
         b8:f5:8a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:54 2024 by rpki-client on console-fra.rpki-client.org