Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/65783A3A68FE11EFB904E587C4F9AE02.roa
File:                     65783A3A68FE11EFB904E587C4F9AE02.roa (raw, json)
Hash identifier:          W9AbIPs04msR2L8j2qpbp6FWBUlEN2nJFHSFxYkcZYc=
Subject key identifier:   D5:D5:73:DA:3A:17:57:8A:CA:0B:10:F0:BA:7E:28:2E:F1:11:BF:3A
Certificate issuer:       /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
Certificate serial:       02
Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/65783A3A68FE11EFB904E587C4F9AE02.roa
Signing time:             Mon 02 Sep 2024 07:38:50 +0000
ROA not before:           Mon 02 Sep 2024 07:38:50 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     142570
IP address blocks:        160.30.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
        Validity
            Not Before: Sep  2 07:38:50 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d56b8a-bfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:1d:27:27:73:1a:5e:17:98:99:1f:7b:b3:
                    6c:37:b5:28:c5:4c:ae:ba:43:4f:4f:7d:10:d9:20:
                    e8:0d:c1:7b:e9:d6:3b:6b:dd:9b:fd:5e:fd:bc:62:
                    fc:7d:f4:ef:4a:8d:df:63:87:64:f2:56:1e:f7:ea:
                    f5:62:f0:32:aa:4e:37:22:74:69:28:1e:0d:99:82:
                    5d:ec:b5:8b:ec:65:0b:11:3d:fc:db:b4:bb:19:4e:
                    24:e5:8a:22:49:83:bd:8a:f1:5a:0a:89:09:ef:8f:
                    6a:a7:1b:34:fe:ae:f8:54:98:ea:52:97:c4:f2:22:
                    6d:85:2e:02:2c:8c:3d:5e:ec:09:f3:4f:62:53:dc:
                    8b:d9:2c:55:7a:a8:f5:6b:a8:45:fe:5d:9c:42:29:
                    c3:4b:4b:c1:dd:1d:aa:e1:10:48:3b:9a:6e:2f:ee:
                    78:98:4b:ed:7a:91:93:ac:5a:bd:bd:d3:4a:0b:37:
                    6f:a0:a7:16:b1:a5:63:1a:34:2b:7f:d3:e4:6a:0e:
                    74:c6:a0:80:da:6e:4d:fa:9d:85:59:33:f7:fc:7b:
                    33:e5:72:07:c3:3b:bb:e3:7b:11:df:5f:ab:8f:f0:
                    c0:e1:7a:d1:1b:61:89:6a:5b:ea:3e:ec:56:5a:af:
                    3c:47:e2:94:03:72:b2:fa:4b:74:5d:a8:f1:d4:20:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D5:73:DA:3A:17:57:8A:CA:0B:10:F0:BA:7E:28:2E:F1:11:BF:3A
            X509v3 Authority Key Identifier:
                keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/65783A3A68FE11EFB904E587C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:16:6b:5d:ce:bd:51:fc:07:0b:94:18:83:ed:3a:4f:b3:63:
         8c:d6:c3:97:aa:7a:97:79:dd:e2:12:f6:b4:90:37:75:5a:a4:
         6d:7f:f1:fd:cb:08:10:c6:b1:4e:24:96:d4:5e:ec:c9:d1:1b:
         4a:9a:43:46:51:b9:a2:bc:d8:d8:ad:b1:e9:fb:86:44:e0:ec:
         07:bb:86:3c:c6:0f:01:99:0f:5c:7b:99:d4:e2:73:7e:01:e5:
         fd:8c:5c:09:d1:83:f1:51:3b:75:e1:39:39:dc:2c:dc:8d:15:
         b2:2c:ee:fb:5e:ee:c7:1a:5b:8d:52:d4:1d:ab:31:c8:df:27:
         eb:00:e4:2d:b3:58:ec:c3:f6:93:af:46:1e:c3:da:5c:44:4a:
         76:79:ac:f7:5d:0e:49:4a:4b:cf:91:eb:89:ea:1d:5d:cc:5d:
         fe:70:24:20:e5:ae:92:36:db:8f:fe:bb:8a:43:80:bf:3f:04:
         76:97:42:e8:ff:57:d0:09:7c:1a:74:91:28:88:aa:87:57:11:
         be:4f:a3:a0:93:41:6f:e2:c7:3d:71:63:71:ef:90:c0:bd:7c:
         2c:8b:0e:e6:10:3e:64:09:77:06:6c:e8:48:53:73:59:a6:18:
         c8:33:87:3e:b4:12:1c:2b:2c:1e:97:8b:ac:3f:ec:37:e6:eb:
         7f:ce:4a:9a
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NzE3NTExMC8GA1UEBRMoNzI1NzkyM0Q2NzcwQzU2Nzg5MTlCMDdDQkNGQThBRjhC
OUM1MDUzRjAeFw0yNDA5MDIwNzM4NTBaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZDU2YjhhLWJmYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRbR0nJ3MaXheYmR97s2w3tSjFTK66Q09PfRDZIOgNwXvp1jtr3Zv9Xv28Yvx9
9O9Kjd9jh2TyVh736vVi8DKqTjcidGkoHg2Zgl3stYvsZQsRPfzbtLsZTiTliiJJ
g72K8VoKiQnvj2qnGzT+rvhUmOpSl8TyIm2FLgIsjD1e7AnzT2JT3IvZLFV6qPVr
qEX+XZxCKcNLS8HdHarhEEg7mm4v7niYS+16kZOsWr2900oLN2+gpxaxpWMaNCt/
0+RqDnTGoIDabk36nYVZM/f8ezPlcgfDO7vjexHfX6uP8MDhetEbYYlqW+o+7FZa
rzxH4pQDcrL6S3RdqPHUIEwZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU1dVz2joX
V4rKCxDwun4oLvERvzowHwYDVR0jBBgwFoAUcleSPWdwxWeJGbB8vPqK+LnFBT8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTc1L0U5QTA5MkI4NjhG
RDExRUZBOTUwMDE4N0M0RjlBRTAyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJU
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvY2xlU1BXZHd4V2VKR2JCOHZQcUstTG5GQlQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi82NTc4M0EzQTY4
RkUxMUVGQjkwNEU1ODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKAe6jANBgkqhkiG9w0BAQsFAAOCAQEAdxZrXc69UfwHC5QY
g+06T7NjjNbDl6p6l3nd4hL2tJA3dVqkbX/x/csIEMaxTiSW1F7sydEbSppDRlG5
orzY2K2x6fuGRODsB7uGPMYPAZkPXHuZ1OJzfgHl/YxcCdGD8VE7deE5Odws3I0V
sizu+17uxxpbjVLUHasxyN8n6wDkLbNY7MP2k69GHsPaXERKdnms910OSUpLz5Hr
ieodXcxd/nAkIOWukjbbj/67ikOAvz8EdpdC6P9X0Al8GnSRKIiqh1cRvk+joJNB
b+LHPXFjce+QwL18LIsO5hA+ZAl3BmzoSFNzWaYYyDOHPrQSHCssHpeLrD/sN+br
f85Kmg==
-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:25 2024 by rpki-client on console-fra.rpki-client.org