Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7EA8FE8AE74011EEA0AA1E52C4F9AE02.roa
File:                     7EA8FE8AE74011EEA0AA1E52C4F9AE02.roa (raw, json)
Hash identifier:          tiYGwOE1cPc2uOAYaw3qEEyFIBkMO+fFpLG33WRwZuU=
Subject key identifier:   B4:F4:88:EF:99:CE:CC:5E:BA:AD:40:C0:2F:05:9C:95:49:9E:3C:7F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1262
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7EA8FE8AE74011EEA0AA1E52C4F9AE02.roa
Signing time:             Fri 24 May 2024 22:32:42 +0000
ROA not before:           Fri 24 May 2024 22:32:42 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     6830
IP address blocks:        115.167.28.0/22 maxlen: 22
                          202.92.19.0/24 maxlen: 24
                          202.92.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4706 (0x1262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 22:32:42 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66511589-8d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:f6:bb:82:63:d7:cc:42:73:5c:33:71:66:
                    4b:90:75:f5:14:9d:78:52:5c:4a:94:de:38:b8:e2:
                    67:83:fe:24:f1:0b:cd:3d:6f:a4:01:07:bd:8f:07:
                    9a:99:ef:cb:1d:f1:2a:d3:6e:3a:1b:f9:3d:25:ec:
                    a6:37:3d:dd:df:6e:7c:5c:0c:a3:69:eb:5c:eb:91:
                    14:3b:55:26:fa:99:8f:18:3d:07:9f:41:16:25:d3:
                    0f:7a:96:13:e6:fc:2c:8f:17:9e:e1:98:3e:9d:0b:
                    82:a1:11:38:ac:c9:3e:ef:43:e2:b4:c6:a4:6b:68:
                    e0:91:e3:88:bd:47:9b:6f:c5:bd:79:ed:84:54:6c:
                    eb:a9:63:be:91:de:9a:e7:2e:5c:61:ef:da:08:46:
                    03:62:d3:54:9c:85:72:5a:6d:4d:26:5c:14:51:a9:
                    9b:28:4e:76:aa:38:c3:46:ee:17:a2:47:26:15:ab:
                    e1:ef:7b:57:db:e2:50:55:96:66:d8:8c:e3:6d:f7:
                    f7:88:3e:e3:17:4b:00:4b:e4:6b:9b:e4:08:e7:83:
                    5e:64:15:1d:88:fe:45:97:75:80:93:65:d9:22:6d:
                    68:d1:72:7e:9d:2f:d1:e1:8d:a4:19:1c:2d:44:da:
                    e8:4e:81:ed:24:ae:97:33:64:72:42:0c:24:1a:0e:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F4:88:EF:99:CE:CC:5E:BA:AD:40:C0:2F:05:9C:95:49:9E:3C:7F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7EA8FE8AE74011EEA0AA1E52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.28.0/22
                  202.92.19.0/24
                  202.92.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:b4:f4:3e:cd:c2:05:c6:eb:2f:00:95:18:26:c3:6c:01:
         9c:0c:ba:b9:f4:ae:57:f6:dd:c3:3c:00:6d:8e:9a:f8:a1:f3:
         21:44:f2:37:a3:23:01:5e:b5:84:fa:3c:09:56:af:ad:b6:17:
         10:a5:74:29:2a:af:23:80:65:18:20:b6:79:70:bc:09:54:b4:
         10:0a:cf:cc:07:a7:9e:a6:96:31:6e:61:d7:a0:93:dc:57:36:
         61:a9:4d:93:ca:fb:d9:01:69:b2:9b:0d:47:77:6f:dd:cf:56:
         03:bc:29:90:0c:ca:1c:63:24:38:aa:09:b0:2e:29:2a:22:0c:
         1d:e7:17:1c:0e:5a:24:b0:ee:ac:b7:d5:9b:94:e5:59:09:01:
         87:82:fe:7c:10:7d:8b:01:57:72:e0:ac:7b:29:ef:bb:44:27:
         4f:24:68:37:bb:7e:71:c4:48:74:18:3d:55:e4:73:fa:bb:ec:
         7b:9c:7a:0f:e7:48:6a:5f:40:a7:1d:e1:c4:c5:2d:0e:6b:b2:
         0c:8a:2c:4a:1d:16:0e:db:42:2e:e0:74:c9:2c:c3:14:07:87:
         8e:7a:bc:6c:ab:7c:3b:b2:fd:13:85:00:88:72:43:25:4a:1c:
         8b:3b:45:59:ec:75:d7:fb:61:89:97:f9:74:ed:31:01:e0:77:
         09:99:dc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:59:52 2024 by rpki-client on console-ams.rpki-client.org