Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9AD217D2DF7511EDB7DF6441C4F9AE02.roa
File:                     9AD217D2DF7511EDB7DF6441C4F9AE02.roa (raw, json)
Hash identifier:          ZILorfkJ+q9Kopfor6YBjpquSJmQQPSp6Lop55Owp/o=
Subject key identifier:   95:AE:16:50:8E:AF:F9:DD:09:C7:2C:05:F9:2E:A6:E5:08:96:C2:28
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1256
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9AD217D2DF7511EDB7DF6441C4F9AE02.roa
Signing time:             Fri 24 May 2024 22:32:30 +0000
ROA not before:           Fri 24 May 2024 22:32:30 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     17539
IP address blocks:        113.203.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4694 (0x1256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 22:32:30 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6651157e-2a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:50:bd:58:e9:b8:23:c7:85:9f:57:af:a9:
                    f9:73:5d:a9:91:b3:ac:42:b2:ef:c7:5b:a6:8c:1b:
                    81:72:70:02:90:15:b7:24:21:e9:11:52:2e:cf:e8:
                    3d:57:3f:53:24:1d:d6:68:bd:89:41:5a:c7:0d:1c:
                    e0:66:f4:aa:52:a2:c4:e3:12:5d:5b:af:ff:55:b7:
                    91:88:b0:38:c2:50:b8:cd:02:00:12:84:16:f5:6b:
                    0b:a8:27:9e:49:ec:5b:75:b2:4b:94:4e:74:49:1f:
                    e9:ae:e5:c7:95:52:e1:e4:36:b8:4f:e7:9a:3e:92:
                    43:f2:d2:70:1f:bb:cf:f5:fb:26:91:54:3c:be:46:
                    0e:a2:aa:94:e7:bd:00:c7:8a:a4:e5:be:a5:91:3f:
                    8b:ef:de:a8:e1:5c:db:0a:35:01:82:ac:92:83:ef:
                    fa:71:4b:52:51:34:07:51:85:47:7c:ea:89:e9:a9:
                    50:97:b0:1c:94:26:8d:4d:c5:7c:0b:38:0d:39:1a:
                    92:4f:d2:99:00:ec:5e:88:d3:8b:31:aa:fb:2f:cb:
                    06:d2:66:12:11:b5:ce:4c:75:d3:10:79:b1:4d:c5:
                    23:66:71:e5:e2:f9:aa:00:fb:2b:9b:21:b6:98:9b:
                    7f:3e:b3:5c:8d:73:ff:84:2e:b5:66:07:42:98:79:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:16:50:8E:AF:F9:DD:09:C7:2C:05:F9:2E:A6:E5:08:96:C2:28
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9AD217D2DF7511EDB7DF6441C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:a0:e8:3f:bd:76:ab:98:8b:41:e9:7b:3d:a6:6b:25:85:7e:
         53:60:70:f0:18:32:05:bc:da:a0:b8:36:8e:ce:99:e1:5f:74:
         51:08:1a:2a:c8:4c:4e:43:38:41:90:ef:b3:6d:c6:cf:05:7d:
         45:30:4a:e4:2a:b0:1b:20:1e:1b:4f:3b:72:45:e0:27:e8:45:
         32:f3:f6:3f:b5:cb:5a:15:d9:e0:76:46:c9:7d:03:c1:bf:81:
         c9:05:61:db:df:51:63:3c:06:c9:51:1e:75:b0:3b:cb:8a:9c:
         f6:16:34:c5:ed:c4:a2:4f:3a:9b:41:8d:4f:f9:73:c8:c5:bc:
         33:ca:f3:8e:c0:f8:be:df:df:38:73:dd:c7:5d:40:8b:8f:c5:
         73:f2:d3:0f:c3:53:5d:66:84:6b:d5:c9:29:2a:e7:06:f0:62:
         c7:c3:ee:16:49:14:8a:e7:76:39:df:56:ed:77:18:0d:50:e9:
         a9:0f:f9:bb:73:e0:0f:04:fe:3f:9b:c0:d5:4c:9e:8d:ff:66:
         f4:5d:4f:73:19:00:0e:61:5e:9d:cd:20:f7:63:9e:1a:e8:ec:
         fb:61:53:46:54:cc:2c:2d:e1:94:a4:bf:f2:2b:9b:35:fd:fe:
         86:05:d2:ca:a5:ba:85:7d:4f:5a:89:e5:ee:db:5b:c6:9f:9d:
         c2:1a:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:53:09 2024 by rpki-client on console-fra.rpki-client.org