Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa
File:                     E36214403D0011EFAD623342C4F9AE02.roa (raw, json)
Hash identifier:          420VAJueRLeEIyuOExcHcsg4aUQyw3PTMA6zp5xTQ8U=
Subject key identifier:   BE:3F:2F:26:1F:5A:FA:61:90:C9:EC:3C:09:39:82:EC:46:84:61:55
Certificate issuer:       /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial:       09
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa
Signing time:             Tue 16 Jul 2024 08:07:16 +0000
ROA not before:           Tue 16 Jul 2024 08:07:16 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     152919
IP address blocks:        160.22.184.0/23 maxlen: 23
                          160.22.184.0/24 maxlen: 24
                          160.22.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
                          rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
        Validity
            Not Before: Jul 16 08:07:16 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66962a34-62fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:12:ff:da:b1:f6:8e:a1:ec:93:11:7f:23:
                    b7:25:5e:d8:18:e0:9c:15:c8:2a:7d:50:89:54:07:
                    1b:7b:84:cf:c5:34:c7:4c:16:bf:03:26:64:e6:f8:
                    36:d9:b4:22:68:e8:86:0b:ad:ee:c2:83:e8:a0:de:
                    a3:90:7d:b4:40:12:50:83:f5:19:d3:d4:f7:81:9e:
                    1a:4d:20:ca:30:75:b7:fe:a1:0f:b6:75:2c:f7:98:
                    dc:70:85:e6:f1:dd:5f:b8:3d:27:ae:72:fe:ce:67:
                    dd:40:77:60:3f:74:2b:d6:25:18:96:b8:21:4d:df:
                    ce:b1:94:99:4c:c8:ab:c7:67:aa:ea:11:c7:0c:e0:
                    6b:71:f4:2c:7d:0d:93:86:e3:da:da:29:4b:14:59:
                    2f:51:b5:8b:e4:1f:a1:b4:ec:f0:38:15:36:5d:1e:
                    29:d7:a7:80:ec:89:55:11:3f:8a:8a:ad:ea:40:4a:
                    1e:ae:b3:e5:22:0f:89:a4:d5:e4:71:de:cb:4e:f9:
                    bf:03:14:2a:7e:4c:48:f4:e2:c2:16:55:d8:29:3d:
                    9f:a7:f0:29:18:fd:be:92:e2:c0:91:cb:01:fa:d5:
                    50:9d:1b:9d:2c:0f:c7:2a:53:7e:08:2a:a3:31:0d:
                    62:0a:51:84:cb:af:13:60:cd:df:7e:58:20:3c:25:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3F:2F:26:1F:5A:FA:61:90:C9:EC:3C:09:39:82:EC:46:84:61:55
            X509v3 Authority Key Identifier:
                keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:de:93:06:f0:f4:de:c2:4b:3f:82:c9:5b:ee:32:50:e8:0f:
         84:75:d4:02:d2:2c:7e:93:6f:e2:5b:e4:6f:86:7e:22:e5:52:
         c7:c5:7c:47:90:81:d8:5a:9b:33:44:dd:04:ce:d7:97:95:d1:
         52:68:15:9f:98:29:f2:b3:45:60:6f:ef:8f:45:1a:9d:52:eb:
         cf:49:a4:9d:ea:31:d7:78:7c:5a:f1:2a:33:bc:09:1d:27:80:
         34:b4:48:85:c1:7c:25:04:ba:62:ab:16:e8:7e:43:18:cf:a4:
         56:ff:8d:6f:37:6f:21:b7:f8:79:4d:00:2d:a5:7e:66:2a:6d:
         c3:20:fb:c7:95:66:94:61:7e:25:67:39:9d:ce:3d:30:e4:a5:
         db:c0:cb:51:55:79:52:96:89:7a:85:d5:7b:02:7e:db:bf:46:
         b7:d0:56:c6:63:0a:55:8c:18:91:6b:82:72:dd:b2:df:82:22:
         b4:db:0b:83:fe:d9:90:59:6d:7f:6e:20:a3:13:e8:27:b1:ba:
         3e:02:b8:32:ca:81:44:66:08:a5:46:75:b0:ad:ac:9b:17:80:
         c8:55:ce:d6:d6:cd:0e:b0:e3:41:77:ee:2b:ed:bb:11:5e:07:
         0e:31:6b:5b:02:0d:44:7e:c0:3f:ee:89:96:4c:7c:4c:9e:4a:
         17:3e:a1:f7
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MTYwNDExMC8GA1UEBRMoRjIyQ0Y4RUY3NkFERkRGMkNGOUVGRURCRUMxMjEzNDg4
NjM1NkY0RDAeFw0yNDA3MTYwODA3MTZaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2OTYyYTM0LTYyZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqNRL/2rH2jqHskxF/I7clXtgY4JwVyCp9UIlUBxt7hM/FNMdMFr8DJmTm+DbZ
tCJo6IYLre7Cg+ig3qOQfbRAElCD9RnT1PeBnhpNIMowdbf+oQ+2dSz3mNxwhebx
3V+4PSeucv7OZ91Ad2A/dCvWJRiWuCFN386xlJlMyKvHZ6rqEccM4Gtx9Cx9DZOG
49raKUsUWS9RtYvkH6G07PA4FTZdHinXp4DsiVURP4qKrepASh6us+UiD4mk1eRx
3stO+b8DFCp+TEj04sIWVdgpPZ+n8CkY/b6S4sCRywH61VCdG50sD8cqU34IKqMx
DWIKUYTLrxNgzd9+WCA8JQ+lAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUvj8vJh9a
+mGQyew8CTmC7EaEYVUwHwYDVR0jBBgwFoAU8iz473at/fLPnv7b7BITSIY1b00w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxNjA0LzA5QTExMjM0M0NF
QjExRUY5NEUyNEY1OUM0RjlBRTAyLzhpejQ3M2F0X2ZMUG52N2I3QklUU0lZMWIw
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOGl6NDczYXRfZkxQbnY3YjdCSVRTSVkxYjAwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTYwNC8wOUExMTIzNDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi9FMzYyMTQ0MDNE
MDAxMUVGQUQ2MjMzNDJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaAWuDANBgkqhkiG9w0BAQsFAAOCAQEAOd6TBvD03sJLP4LJ
W+4yUOgPhHXUAtIsfpNv4lvkb4Z+IuVSx8V8R5CB2FqbM0TdBM7Xl5XRUmgVn5gp
8rNFYG/vj0UanVLrz0mkneox13h8WvEqM7wJHSeANLRIhcF8JQS6YqsW6H5DGM+k
Vv+NbzdvIbf4eU0ALaV+ZiptwyD7x5VmlGF+JWc5nc49MOSl28DLUVV5UpaJeoXV
ewJ+279Gt9BWxmMKVYwYkWuCct2y34IitNsLg/7ZkFltf24goxPoJ7G6PgK4MsqB
RGYIpUZ1sK2smxeAyFXO1tbNDrDjQXfuK+27EV4HDjFrWwINRH7AP+6Jlkx8TJ5K
Fz6h9w==
-----END CERTIFICATE-----
Generated at Sat Nov 9 06:56:23 2024 by rpki-client on console-fra.rpki-client.org