Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/1FE0E016B37D11EFBDE18263C4F9AE02.roa
File:                     1FE0E016B37D11EFBDE18263C4F9AE02.roa (raw, json)
Hash identifier:          i4QqretrMrfllRlkSz0xUOac9qaskNbaHtNPO9MoQA0=
Subject key identifier:   AA:14:A9:00:82:E2:07:C7:9F:86:EC:CA:EE:E9:3D:BF:82:B0:0A:59
Certificate issuer:       /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Certificate serial:       02
Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/1FE0E016B37D11EFBDE18263C4F9AE02.roa
Signing time:             Fri 06 Dec 2024 02:52:26 +0000
ROA not before:           Fri 06 Dec 2024 02:52:26 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     151660
IP address blocks:        160.250.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Jan 2025 05:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
        Validity
            Not Before: Dec  6 02:52:26 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=675266ea-ae1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:cf:0d:c4:25:c0:91:25:a9:8b:c4:10:dd:
                    d0:f1:ea:47:3b:aa:30:05:66:e8:8d:e8:d8:5c:9a:
                    51:95:f4:5c:30:98:6a:5c:af:62:38:b8:03:be:b9:
                    a1:27:95:33:51:61:8b:8f:8c:d5:e8:8d:b5:b3:d3:
                    cc:c5:35:e2:a5:91:5e:1d:2b:66:12:a9:dd:af:4f:
                    6c:2d:bc:de:d2:a5:e9:0b:5c:ff:90:ec:f1:a3:42:
                    88:d8:5a:c4:18:01:2a:68:91:05:0b:6b:43:a5:1d:
                    f1:12:74:f2:99:09:2f:13:82:ac:2f:ca:dc:93:27:
                    ef:26:ce:31:a8:61:a6:47:1d:bc:aa:9f:b2:90:74:
                    4a:c7:ed:4f:1c:93:18:49:30:05:9a:42:cc:bb:52:
                    56:07:6c:a1:1a:77:28:b7:71:23:89:3e:f2:5f:1b:
                    b5:d6:5f:ab:c2:62:09:db:10:94:c8:01:b2:2d:2f:
                    e6:99:d3:1d:df:02:93:3a:f5:5f:31:ff:72:78:32:
                    3c:d0:19:2b:d2:b5:75:2e:cf:3a:bf:65:4e:ba:74:
                    47:d0:af:02:4d:ed:f9:81:f5:bd:4e:6b:81:5c:ef:
                    04:18:cf:50:0a:f9:c2:c1:82:5b:ac:06:de:36:d3:
                    31:b7:77:91:4e:86:13:cd:d5:8a:13:f4:51:af:74:
                    2e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:14:A9:00:82:E2:07:C7:9F:86:EC:CA:EE:E9:3D:BF:82:B0:0A:59
            X509v3 Authority Key Identifier:
                keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/1FE0E016B37D11EFBDE18263C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:13:cc:05:ac:8c:2b:bf:38:05:39:ca:cb:b9:80:0b:45:
         af:8c:df:24:a9:21:13:c2:cb:c9:9c:e6:a2:51:9c:88:5a:b5:
         66:05:cb:60:da:bf:3d:ef:86:ce:70:03:37:54:e2:a5:e7:bc:
         46:21:fa:43:bb:e4:09:dd:c1:de:65:cd:de:df:6f:be:da:22:
         4b:39:ff:4b:3f:02:fa:4f:1c:79:b7:3b:69:6a:d4:c3:d4:b6:
         7b:14:cf:4e:9d:0e:20:ac:1c:bb:9d:a4:40:ec:b2:c2:d9:fa:
         c5:04:11:3b:02:72:26:5c:ca:84:0c:19:86:d7:42:61:cf:b4:
         e5:94:35:9c:6b:f3:c5:c1:8d:f4:77:ff:48:ef:17:9c:09:ff:
         56:2a:85:1d:69:9d:ae:05:8a:6f:d2:e4:a4:80:7a:57:99:7e:
         53:f3:97:46:15:9e:78:24:21:f4:01:6e:b3:7e:93:8d:62:3a:
         28:de:a7:35:af:a6:fe:d3:04:85:2d:8d:da:64:07:2b:6b:fd:
         4d:ac:ff:8a:7a:ea:24:94:8c:e2:38:4e:cb:1a:a8:1b:ba:17:
         ed:38:99:28:8d:5d:3b:83:54:51:1c:89:bf:6a:d5:f4:ae:c9:
         f5:22:61:d9:9c:5d:44:08:bc:37:e2:8d:f7:4f:6e:29:d3:06:
         c9:ec:4a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 07:44:01 2024 by rpki-client on console-ams.rpki-client.org