Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF4F8FC0D0CA11EA9E2F6F79C4F9AE02.roa
File:                     BF4F8FC0D0CA11EA9E2F6F79C4F9AE02.roa (raw, json)
Hash identifier:          38eIKaEiL0S9LqX8pye+9UzCU1EcN0doDMVLKX4bMkE=
Subject key identifier:   3C:70:EF:65:31:C2:98:D2:D8:74:87:84:75:51:B4:0A:2E:F3:0E:8F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1260
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF4F8FC0D0CA11EA9E2F6F79C4F9AE02.roa
Signing time:             Fri 24 May 2024 22:32:40 +0000
ROA not before:           Fri 24 May 2024 22:32:40 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     55453
IP address blocks:        202.92.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4704 (0x1260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 22:32:40 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66511588-3c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:73:d6:72:b1:fb:af:b5:8f:89:10:bf:93:
                    bf:d0:18:6e:fa:16:ba:08:db:a4:8f:38:d6:46:86:
                    06:64:3f:4e:19:c4:66:e6:1a:5d:82:11:85:8c:39:
                    95:f5:26:06:6d:78:bb:f7:1a:72:96:a3:c7:86:83:
                    d5:98:1f:51:66:c8:66:3f:61:04:60:ba:76:4d:71:
                    6b:8c:cf:98:b9:95:d7:fe:a2:42:93:0b:c3:21:cb:
                    30:d8:60:5e:4e:7c:cd:fd:d9:80:a3:3c:15:42:e2:
                    2a:be:03:63:4e:48:8c:c7:0b:8a:9b:58:1b:9d:84:
                    2a:6d:03:80:1a:9c:51:8b:d1:9d:84:d8:23:a6:8e:
                    3e:2d:39:b8:10:e3:41:23:21:93:7c:fa:e5:5a:1f:
                    91:1b:7b:73:50:1c:4b:3c:04:02:66:dd:5d:46:44:
                    41:81:75:5a:bc:e4:3c:2f:e4:4e:3c:9b:47:0e:68:
                    1d:c8:c7:5c:25:80:80:17:58:cf:76:1d:c3:a7:60:
                    3b:77:9e:75:53:cf:e4:79:e4:55:11:e4:d0:d7:72:
                    04:90:51:5e:cc:9f:66:0c:60:9a:0f:fa:b8:67:02:
                    a9:7d:3b:82:87:9f:5d:4e:29:0a:23:8a:9b:6b:0a:
                    76:79:2b:2e:ca:11:20:00:b9:ae:9f:2a:60:b7:84:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:70:EF:65:31:C2:98:D2:D8:74:87:84:75:51:B4:0A:2E:F3:0E:8F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF4F8FC0D0CA11EA9E2F6F79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ff:0b:19:d4:60:5d:2f:51:a4:01:22:44:dd:9b:4c:4a:b3:
         87:c2:de:ac:31:06:eb:c3:82:05:b6:32:ac:f6:2a:3f:ec:15:
         d0:ea:9d:c3:17:71:fc:c7:5b:d3:67:d7:94:38:46:c5:51:72:
         c3:fb:d8:63:3c:87:ed:8b:a1:78:d5:fc:61:0a:f6:56:b8:4e:
         6f:03:f9:76:52:65:e6:86:3a:e7:0b:d7:3a:f4:67:62:d1:15:
         7e:01:c6:ee:d6:bf:92:2c:8d:88:35:79:06:f7:ec:96:0c:ca:
         17:93:4f:40:06:16:45:85:1e:0b:7d:82:8f:d4:48:27:13:17:
         73:56:53:25:6c:c9:7b:b7:fd:7b:7c:47:c9:2a:96:ac:ee:17:
         be:75:cc:77:06:2f:87:3f:5c:e5:dd:89:a1:de:7b:5f:e6:62:
         04:07:b5:fe:43:5a:6e:ec:90:f2:b8:07:b7:af:9c:55:4a:2f:
         7f:b8:ea:f1:4e:32:a3:82:c0:ab:cb:34:3a:ba:f3:b7:b9:9f:
         b4:a5:d6:88:e8:c2:cd:09:fa:5d:90:5b:8a:b5:05:3a:f2:39:
         a6:af:5a:e3:77:e4:ad:ea:40:cb:f5:8c:a0:60:94:8f:7d:3b:
         66:3f:29:51:7e:90:87:d9:99:d7:d7:40:33:f1:a1:6f:c4:3c:
         d9:ea:d8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:53:09 2024 by rpki-client on console-fra.rpki-client.org