Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa
File:                     B23569E2756511EFB018F20DC4F9AE02.roa (raw, json)
Hash identifier:          r6mTJvt8SukGGtNb+WgynqBgaxV1KBCRpaFxjoCbFH8=
Subject key identifier:   D3:1F:BA:23:B2:2A:65:97:65:6A:9A:4E:71:C9:EC:DE:2D:7E:C8:4B
Certificate issuer:       /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD
Certificate serial:       10
Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa
Signing time:             Wed 18 Sep 2024 02:29:09 +0000
ROA not before:           Wed 18 Sep 2024 02:29:09 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     138166
IP address blocks:        160.30.212.0/24 maxlen: 24
                          160.30.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl
                          rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD
        Validity
            Not Before: Sep 18 02:29:09 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66ea3af5-1f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:1d:25:88:9e:2d:c9:f8:54:cd:4b:78:cd:
                    7a:9a:2b:67:03:f7:7a:2e:5b:24:43:3a:8f:bf:61:
                    6a:cc:aa:8d:d5:c2:a9:96:49:b6:10:7c:d5:50:a2:
                    3e:07:03:2e:67:c6:71:d2:4e:6c:cd:59:14:84:5f:
                    21:0e:6a:aa:ab:46:ab:88:15:58:cf:8a:cb:6f:5e:
                    f8:05:d3:e8:da:00:56:de:13:0e:e6:ce:b5:7c:1c:
                    d8:3b:bd:59:db:c8:d9:ff:28:08:66:1e:06:48:c9:
                    4f:a0:9a:7f:14:d4:a8:25:86:be:2e:7a:c8:7f:74:
                    b9:b2:4e:2b:cd:c1:b8:07:c8:c9:26:ad:d6:00:77:
                    bf:bf:ca:5b:23:66:3a:3a:36:93:75:37:6a:63:e1:
                    17:aa:79:6b:63:e7:0a:e2:d3:27:a1:59:dd:b6:e8:
                    9c:20:94:30:6e:bb:11:66:9e:cb:e2:d1:db:7c:86:
                    ea:07:10:97:c9:8b:a3:5c:f3:68:82:a5:5e:e3:93:
                    9a:df:b9:c0:c0:53:4a:9c:41:7e:4c:d0:cf:d3:89:
                    54:35:a5:08:25:c3:f1:9f:00:2c:72:a4:14:67:b0:
                    73:5e:fc:92:cd:f5:15:37:af:fa:1e:bd:e0:84:31:
                    29:83:98:fd:6c:c8:5e:01:26:f6:99:f2:00:29:19:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1F:BA:23:B2:2A:65:97:65:6A:9A:4E:71:C9:EC:DE:2D:7E:C8:4B
            X509v3 Authority Key Identifier:
                keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:03:1a:c2:4b:59:bb:0a:41:2a:c6:fa:57:82:80:c9:5b:29:
         e8:fd:24:2c:cc:20:9e:c2:5a:48:ed:3a:a6:01:6c:48:bf:19:
         d3:f7:ec:86:4e:b0:a1:c5:5d:83:97:78:7d:97:73:d1:b1:1f:
         ac:83:5d:31:5c:67:08:93:1f:6a:dd:9d:67:98:ef:1e:95:3c:
         26:24:f4:33:ee:fa:6a:8a:28:5b:e0:df:d3:89:13:45:b5:44:
         8b:3e:83:bb:dd:4a:fc:b4:66:b8:13:5e:4c:37:0d:14:0f:b1:
         c4:3a:63:ba:0d:47:cd:e3:18:35:bb:9d:2b:21:39:7f:08:93:
         13:c5:83:3c:5f:4e:3d:e7:b9:28:07:7f:93:38:88:8b:0f:f7:
         41:c9:54:30:80:88:a3:8f:84:6f:e7:33:61:7d:45:e3:34:a6:
         3d:d1:64:b1:25:44:55:33:d5:ea:cf:08:57:d7:87:38:31:ef:
         1c:af:87:af:53:b7:8a:c0:43:4f:a9:4d:fd:58:5a:c3:9c:b3:
         d5:2d:80:6b:13:fe:80:fa:57:08:e3:7c:f2:a8:fa:a2:9f:9e:
         97:29:b3:6a:d0:50:b4:46:6d:ff:5a:65:d2:41:07:c7:58:24:
         18:a6:b1:b1:d1:2d:4c:ad:37:ad:94:f3:43:09:53:31:71:d6:
         d7:ec:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:46:03 2024 by rpki-client on console-ams.rpki-client.org