Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/1FC3B0DE1E6F11EFB392D937C4F9AE02.roa
File:                     1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (raw, json)
Hash identifier:          ymGuQNubHZmih1/MlsNM4UjPPYjnvk5QIBxrno55/zE=
Subject key identifier:   64:26:89:BA:DE:34:33:C8:70:BA:26:55:51:EA:A8:E1:0A:6E:3B:1F
Certificate issuer:       /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Certificate serial:       05
Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/1FC3B0DE1E6F11EFB392D937C4F9AE02.roa
Signing time:             Thu 30 May 2024 10:26:49 +0000
ROA not before:           Thu 30 May 2024 10:26:49 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152886
IP address blocks:        160.22.18.0/23 maxlen: 23
                          160.22.18.0/24 maxlen: 24
                          160.22.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl
                          rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 05:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
        Validity
            Not Before: May 30 10:26:49 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66585469-d754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:33:52:8d:57:8e:94:82:d6:fd:67:5b:3f:ef:
                    ce:38:ec:cd:b2:d7:92:1b:96:be:94:38:c8:98:4a:
                    ce:fc:f4:b9:ba:0b:0a:15:99:3d:0e:90:56:ea:ce:
                    fe:be:8c:63:25:42:84:e4:be:06:c4:de:cc:dd:8e:
                    35:78:2e:ef:d9:18:1a:7a:f0:28:35:cc:28:b1:22:
                    25:db:f6:7d:af:ef:ba:73:90:e8:56:17:4e:a7:f1:
                    51:b6:de:2c:79:03:73:3b:0f:46:fe:37:b2:8a:6e:
                    e3:4d:c9:70:af:cf:3f:f3:16:ca:b2:58:76:a6:78:
                    e9:07:18:0a:c7:b1:93:ac:1a:a5:41:cf:57:4f:89:
                    48:28:26:1f:fb:ec:5d:7e:2e:e8:6a:98:dc:ee:b1:
                    06:f2:38:ff:7e:4d:0a:fe:5f:f6:b3:a1:65:05:e5:
                    57:30:91:f0:0c:07:61:16:62:05:cf:ba:23:7a:06:
                    bf:07:76:69:7d:69:73:83:96:73:8c:96:4a:5e:69:
                    88:11:3b:91:b6:56:47:36:0f:84:73:7a:d4:c1:77:
                    22:79:2d:f8:db:bb:5b:85:23:eb:a1:ad:82:9b:a4:
                    23:b3:0b:46:70:d4:ad:af:8e:0f:b5:04:7f:6f:ec:
                    19:8c:3d:49:86:b9:a6:26:15:6a:68:75:07:d5:f5:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:26:89:BA:DE:34:33:C8:70:BA:26:55:51:EA:A8:E1:0A:6E:3B:1F
            X509v3 Authority Key Identifier:
                keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/1FC3B0DE1E6F11EFB392D937C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:4f:25:43:d2:97:56:81:a0:88:7b:c5:dc:ae:03:be:86:e3:
         7b:2a:f7:67:26:2f:3e:7c:4e:56:d4:8a:ca:3c:f2:e8:0e:9d:
         99:c8:ad:4f:bd:55:9a:80:ad:c2:6b:fa:f6:10:b0:ec:e2:86:
         90:19:e2:34:8b:04:5b:c0:30:f3:b0:e4:9c:ec:c3:b5:3b:45:
         2f:48:d4:45:9e:1e:75:4f:a6:18:dc:23:60:bb:c6:23:20:2a:
         8e:32:f2:dd:9f:7f:13:5b:ad:79:7d:ff:71:fc:88:63:ec:12:
         ed:93:68:2f:e5:c3:64:0c:3b:99:ae:2f:1f:46:df:28:39:17:
         32:78:28:82:27:c1:a4:cd:3f:3f:8b:8e:b1:13:9c:d3:48:74:
         09:20:79:be:2a:3e:19:91:d5:6b:3e:7a:ec:4d:b7:db:43:4d:
         e9:cf:4e:0c:b1:56:2d:4c:6c:1f:8c:12:42:77:e1:cc:71:0a:
         53:06:84:3f:5c:17:58:88:46:f1:36:98:45:b2:9d:ca:3c:5c:
         09:d2:b8:d2:24:f3:c7:e9:b5:7c:fd:75:71:58:07:85:95:bc:
         99:44:9a:72:e8:a5:fb:10:d1:0d:36:37:05:32:d6:7a:a9:93:
         56:bb:5e:9d:f0:bf:6a:6e:d7:f6:6b:1d:5b:7c:33:c6:00:89:
         6d:20:0a:f4
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
MzFCNzExMC8GA1UEBRMoNEMzMzlDQUJGQzgwQTVGNDE5REYzM0RGQjA2ODg1QzFD
MzQ4OEIyRDAeFw0yNDA1MzAxMDI2NDlaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2NTg1NDY5LWQ3NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDrM1KNV46Ugtb9Z1s/78447M2y15Iblr6UOMiYSs789Lm6CwoVmT0OkFbqzv6+
jGMlQoTkvgbE3szdjjV4Lu/ZGBp68Cg1zCixIiXb9n2v77pzkOhWF06n8VG23ix5
A3M7D0b+N7KKbuNNyXCvzz/zFsqyWHameOkHGArHsZOsGqVBz1dPiUgoJh/77F1+
LuhqmNzusQbyOP9+TQr+X/azoWUF5VcwkfAMB2EWYgXPuiN6Br8Hdml9aXODlnOM
lkpeaYgRO5G2Vkc2D4RzetTBdyJ5Lfjbu1uFI+uhrYKbpCOzC0Zw1K2vjg+1BH9v
7BmMPUmGuaYmFWpodQfV9SZTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZCaJut40
M8hwuiZVUeqo4QpuOx8wHwYDVR0jBBgwFoAUTDOcq/yApfQZ3zPfsGiFwcNIiy0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzMUI3L0YyQTU3MzJFMUU2
QjExRUZBQzBFOTE0RUM0RjlBRTAyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVERPY3FfeUFwZlFaM3pQZnNHaUZ3Y05JaXkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi8xRkMzQjBERTFF
NkYxMUVGQjM5MkQ5MzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaAWEjANBgkqhkiG9w0BAQsFAAOCAQEAS08lQ9KXVoGgiHvF
3K4Dvobjeyr3ZyYvPnxOVtSKyjzy6A6dmcitT71VmoCtwmv69hCw7OKGkBniNIsE
W8Aw87DknOzDtTtFL0jURZ4edU+mGNwjYLvGIyAqjjLy3Z9/E1uteX3/cfyIY+wS
7ZNoL+XDZAw7ma4vH0bfKDkXMngogifBpM0/P4uOsROc00h0CSB5vio+GZHVaz56
7E2320NN6c9ODLFWLUxsH4wSQnfhzHEKUwaEP1wXWIhG8TaYRbKdyjxcCdK40iTz
x+m1fP11cVgHhZW8mUSacuil+xDRDTY3BTLWeqmTVrtenfC/am7X9msdW3wzxgCJ
bSAK9A==
-----END CERTIFICATE-----
Generated at Thu Sep 19 08:57:53 2024 by rpki-client on console-ams.rpki-client.org