Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/96B83ED0A64111EF85A21744C4F9AE02.roa
File:                     96B83ED0A64111EF85A21744C4F9AE02.roa (raw, json)
Hash identifier:          i/pibcZGRbmLWbxKgMM1xMf2Kfhp5on9oaB655UMEfU=
Subject key identifier:   9B:7F:4C:4C:97:11:1D:2D:51:44:5A:4D:10:FA:7E:AD:AD:73:12:E0
Certificate issuer:       /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial:       88
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/96B83ED0A64111EF85A21744C4F9AE02.roa
Signing time:             Tue 19 Nov 2024 06:43:30 +0000
ROA not before:           Tue 19 Nov 2024 06:43:30 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     213977
IP address blocks:        160.22.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
        Validity
            Not Before: Nov 19 06:43:30 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=673c3392-09d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:b6:6d:7f:2f:a3:21:a1:07:a3:d7:b1:a8:
                    61:1a:e6:e7:1b:fa:4c:6a:6f:1d:95:14:a7:ec:82:
                    01:f3:7f:65:bf:10:d2:d2:3c:46:ea:de:55:b9:5a:
                    5e:a6:db:5a:af:c9:ef:aa:bc:81:cf:29:65:06:b6:
                    7f:ae:ad:66:20:9b:9c:76:da:bb:1e:de:89:34:22:
                    70:d3:e5:68:76:f2:31:1e:19:47:6d:26:f8:cf:0f:
                    80:35:28:2f:8d:bb:e8:aa:46:8f:f1:12:d2:1c:5e:
                    4b:f9:8d:93:03:47:d3:7d:f2:8f:dc:8b:78:2d:32:
                    35:2c:ba:b9:db:f9:55:76:dd:32:de:82:33:9a:7e:
                    27:73:06:72:6a:f3:7a:e7:80:ce:51:66:00:53:6f:
                    92:33:ae:ff:28:dd:ca:a6:d5:fc:9f:27:e1:c0:bc:
                    a5:02:65:87:db:c1:61:84:4b:15:a0:a3:69:0d:20:
                    06:91:91:4c:93:e0:8b:67:16:6f:1e:61:bc:8b:e8:
                    18:af:e6:a4:6c:ec:cf:db:22:e2:e9:70:1c:99:b1:
                    0b:7d:a7:62:bc:8a:5c:61:57:43:3e:ac:d6:92:fa:
                    2f:a5:61:56:7b:94:5d:2d:8d:f3:06:30:61:e0:54:
                    07:36:ca:15:80:87:5b:d5:33:66:3b:42:5f:e9:fb:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7F:4C:4C:97:11:1D:2D:51:44:5A:4D:10:FA:7E:AD:AD:73:12:E0
            X509v3 Authority Key Identifier:
                keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/96B83ED0A64111EF85A21744C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:0a:00:46:09:28:b4:47:d4:9d:34:e4:dc:8a:ef:da:d3:b0:
         a4:9a:d7:83:02:9f:ba:31:30:46:68:a8:af:d0:db:07:88:22:
         1c:73:8c:da:f8:2e:1d:e0:cc:ba:31:a4:6e:2e:cd:bb:d8:1a:
         6b:c9:02:11:4d:0f:dc:69:3d:55:a3:92:14:64:9b:3c:8c:d5:
         f2:78:68:06:e0:b5:4e:64:7f:b2:fd:fe:1b:cf:1e:b4:95:f0:
         5c:e2:3a:7a:8c:58:af:28:51:5b:66:c8:18:74:44:f9:8e:20:
         53:2a:d6:cc:0e:0a:fb:99:ab:0f:60:53:8c:f2:81:81:6a:17:
         75:30:3d:9c:de:47:ba:03:72:eb:12:2b:c9:75:f2:b5:9b:5b:
         ba:eb:b6:5f:07:58:89:cd:43:cc:2b:ef:05:b2:12:52:e8:22:
         80:6c:82:d3:42:6e:ff:59:74:13:91:ee:57:59:93:fe:58:77:
         20:89:fd:09:fa:bf:fe:ff:aa:82:6e:e2:84:66:00:46:d9:f6:
         41:14:4f:f9:d2:a0:5a:4c:62:f2:6d:cf:e8:aa:bd:59:15:d5:
         3d:25:d7:c7:28:17:6a:20:f6:39:b8:27:b5:9d:e5:a5:70:61:
         b0:77:7f:11:45:14:bf:b1:38:86:2e:20:34:96:cc:a4:3f:79:
         5f:40:8a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org