Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/4694313A887211EF840E431CC4F9AE02.roa
File:                     4694313A887211EF840E431CC4F9AE02.roa (raw, json)
Hash identifier:          Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=
Subject key identifier:   0F:61:C6:87:21:BF:19:85:EF:B7:83:A2:2F:1C:6E:3E:94:BF:3D:69
Certificate issuer:       /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
Certificate serial:       03
Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/4694313A887211EF840E431CC4F9AE02.roa
Signing time:             Sat 12 Oct 2024 08:16:27 +0000
ROA not before:           Sat 12 Oct 2024 08:16:27 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     134191
IP address blocks:        160.187.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
        Validity
            Not Before: Oct 12 08:16:27 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=670a305a-abbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5c:7b:ad:cf:80:9c:ce:f6:2a:7b:20:2c:ed:
                    03:3f:c7:9b:f8:cc:0a:07:60:8b:74:64:f4:df:af:
                    b7:a3:65:00:27:93:95:44:a3:94:a7:6a:77:c5:25:
                    b7:85:12:62:0f:45:21:7b:b1:5a:32:a9:44:af:66:
                    0a:d7:56:9a:04:5f:c6:fe:95:65:b2:32:3e:ff:5c:
                    9a:96:21:0b:e0:93:c1:bb:7e:2b:af:fe:6d:b1:44:
                    a6:a5:58:01:7e:97:49:38:1c:86:e2:40:a5:22:b6:
                    15:38:03:7b:60:c8:25:9b:f5:d5:67:fc:ee:22:6d:
                    1b:1c:6f:bb:79:a0:10:be:52:45:f0:dd:07:80:30:
                    07:80:36:38:79:c6:85:b8:fd:44:8e:bc:14:d4:8f:
                    c3:f0:74:35:81:9c:31:d6:0d:5f:a2:27:a0:25:0b:
                    46:2a:ce:b1:7a:ce:2e:f2:bb:ee:0f:0c:0b:3b:67:
                    65:ea:e3:97:55:a3:14:85:16:75:7d:32:30:f8:18:
                    a4:0e:3c:ad:e9:19:2c:dd:b5:9c:51:ce:38:55:99:
                    26:6a:c7:bc:1c:c7:ea:ca:9e:a1:79:18:09:17:98:
                    ae:4f:97:81:33:94:ef:69:15:ee:bb:fd:36:84:d3:
                    73:6c:25:59:1c:70:bc:90:f2:0d:93:09:03:47:c9:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:61:C6:87:21:BF:19:85:EF:B7:83:A2:2F:1C:6E:3E:94:BF:3D:69
            X509v3 Authority Key Identifier:
                keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/4694313A887211EF840E431CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:2b:f6:c8:60:16:46:e5:89:06:14:66:9d:8d:79:62:4a:4c:
         b6:16:b3:1b:c0:6b:1e:a6:15:66:a7:68:31:de:83:90:b9:c7:
         82:5f:50:bb:12:25:64:6a:e0:9e:13:aa:3d:cf:5c:ee:85:56:
         7b:28:ba:dd:fc:1d:69:67:90:ca:a7:61:ae:e2:86:a9:db:08:
         83:cc:3b:df:87:99:30:a2:91:45:02:6a:9a:97:08:4f:c6:6f:
         7d:20:1d:ee:5c:6b:4d:4f:40:71:65:2a:65:1e:85:6d:f5:cf:
         f4:61:a6:24:45:4f:60:7f:29:e1:79:8f:5e:2d:01:c8:8c:07:
         ec:fc:0d:4d:00:f3:1a:e2:62:08:bf:7f:76:1e:df:92:cd:12:
         d9:f5:9c:17:db:e6:e2:87:08:de:a1:a9:ea:c9:44:67:a4:8a:
         d5:6c:11:41:c4:6f:34:9f:63:a0:70:d3:49:4b:76:f1:58:f5:
         4f:55:0b:9c:63:f2:77:00:a3:12:cd:77:83:1e:31:e1:53:8f:
         5b:3c:db:43:5e:d4:58:54:6a:80:f7:c5:f1:52:30:00:13:e7:
         74:ac:ab:98:ef:c3:7d:50:37:4f:46:18:12:2b:1a:40:dc:c4:
         ea:a1:a4:93:7c:72:a1:c3:05:f8:a3:87:c7:38:06:44:7b:ea:
         e8:32:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:26 2024 by rpki-client on console-fra.rpki-client.org