Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/52D518588AAF11EF9F5A6313C4F9AE02.roa
File:                     52D518588AAF11EF9F5A6313C4F9AE02.roa (raw, json)
Hash identifier:          Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=
Subject key identifier:   E0:FF:35:DB:50:AC:A3:B9:5F:8B:57:A0:E0:F9:CF:68:1F:12:2D:D0
Certificate issuer:       /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Certificate serial:       04
Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/52D518588AAF11EF9F5A6313C4F9AE02.roa
Signing time:             Tue 15 Oct 2024 04:38:28 +0000
ROA not before:           Tue 15 Oct 2024 04:38:28 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     153363
IP address blocks:        160.187.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
                          rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
        Validity
            Not Before: Oct 15 04:38:28 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=670df1c4-d803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:a2:23:68:ec:92:86:0e:2e:3c:ff:59:e7:
                    70:5d:60:e4:86:32:4d:39:d5:1f:6f:5b:18:45:db:
                    3d:78:91:63:83:d7:9b:0c:5e:eb:12:08:7e:54:ce:
                    6e:84:d2:c2:a6:3e:cb:b3:10:32:bd:14:94:1a:75:
                    3b:da:42:17:4a:4d:a6:fc:5e:d5:09:07:0b:f4:b3:
                    ed:e1:44:ca:0a:9f:68:ac:4a:34:1b:ea:b8:a8:78:
                    82:8f:73:2e:e0:25:e6:a3:37:85:6c:c0:8f:ab:19:
                    01:a0:b8:96:10:6e:67:e8:70:51:2b:ec:be:bd:db:
                    4f:f7:5a:4e:c3:d5:5c:ad:56:49:94:99:b7:fa:e4:
                    99:95:de:1f:2b:db:21:87:d3:2f:c3:37:bb:5f:64:
                    d0:6f:d5:04:36:f5:1c:73:a5:b2:10:c2:8a:88:0d:
                    f4:9d:ab:2a:37:3a:ed:a5:ab:7e:a8:c5:a9:d6:03:
                    69:f5:d6:8d:ce:68:7a:a3:1b:3f:ea:84:d7:2a:75:
                    f1:fb:f6:87:1f:af:90:85:8c:6f:5b:ee:bc:86:67:
                    7c:5c:25:56:67:9c:16:37:0f:56:d7:80:67:72:b7:
                    62:eb:94:a5:84:34:9f:6a:d4:6a:34:b6:cb:1f:19:
                    ca:b7:88:d0:5a:58:2f:e2:db:7e:8b:2b:b2:ec:35:
                    4d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FF:35:DB:50:AC:A3:B9:5F:8B:57:A0:E0:F9:CF:68:1F:12:2D:D0
            X509v3 Authority Key Identifier:
                keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/52D518588AAF11EF9F5A6313C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:30:03:b4:ad:f2:2b:af:03:51:d6:cb:44:56:b1:57:c2:5f:
         a9:11:b7:0b:1d:08:52:18:0c:45:78:b2:b5:e1:69:ff:6b:9e:
         44:d5:03:40:11:41:51:b7:d3:51:08:b4:a0:73:c6:0b:95:38:
         79:8f:f9:42:3b:4c:50:8a:17:f8:e3:c8:11:5c:23:03:17:77:
         6d:09:9f:57:11:3b:0a:70:6e:8f:60:5f:e4:56:7b:86:4a:fd:
         fc:e5:1d:67:e2:1e:c0:41:90:53:52:21:e7:3b:28:6f:76:18:
         cc:0f:8a:ec:63:69:36:32:55:f7:24:06:f6:bb:b3:ab:2b:97:
         d5:0c:ba:d8:84:ca:93:cb:2a:92:3a:4a:d2:37:b0:18:dd:00:
         e2:04:2c:c4:f6:1b:2d:55:d9:6e:bf:8d:ad:61:d1:4b:36:8a:
         fb:56:0e:37:c3:e5:66:d0:7d:3f:15:db:02:78:82:e9:65:02:
         cd:48:cb:fa:17:f8:3b:57:d9:3a:17:fe:fb:ba:49:f0:a2:08:
         a0:de:2f:b2:83:97:58:4a:b1:d7:09:52:fd:73:6c:3b:4f:97:
         c9:1d:c6:14:75:fc:ff:f7:69:ba:11:dd:e5:78:fa:4e:33:f7:
         23:69:92:00:cb:59:34:aa:6f:98:65:8b:88:28:d4:fe:30:7a:
         83:39:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:25 2024 by rpki-client on console-fra.rpki-client.org