Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/060A2EE4EC1E11EEBF39C47FC4F9AE02.roa
File:                     060A2EE4EC1E11EEBF39C47FC4F9AE02.roa (raw, json)
Hash identifier:          ZFaSBDqDlP2+foOrmLsqNt99p0j5x6tvLpBLHlTz8lE=
Subject key identifier:   06:CD:78:9B:E2:ED:DA:BD:AD:27:EF:7F:73:33:31:A5:F0:C7:B4:87
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1012
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/060A2EE4EC1E11EEBF39C47FC4F9AE02.roa
Signing time:             Wed 27 Mar 2024 09:40:19 +0000
ROA not before:           Wed 27 Mar 2024 09:40:19 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        113.203.211.0/24 maxlen: 24
                          113.203.212.0/24 maxlen: 24
                          113.203.214.0/24 maxlen: 24
                          113.203.215.0/24 maxlen: 24
                          113.203.219.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.243.0/24 maxlen: 24
                          180.178.151.0/24 maxlen: 24
                          180.178.161.0/24 maxlen: 24
                          180.178.164.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 22:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4114 (0x1012)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Mar 27 09:40:19 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6603e983-8fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:8e:b6:ed:cb:0f:ec:e0:80:fb:66:b2:68:
                    08:e8:38:18:e3:1a:5e:d1:44:2c:81:c0:fd:9d:d0:
                    53:43:49:2e:a4:24:4a:da:2f:b7:cb:2c:f1:56:90:
                    e7:ee:18:0d:c9:91:d0:83:d7:f3:1c:9a:22:e8:5b:
                    a1:db:b8:8e:cc:0f:03:0e:d4:d1:d3:f5:e3:95:3c:
                    22:bc:92:b0:79:b2:6e:fa:dd:88:b0:e0:4b:6f:3b:
                    74:98:80:32:39:d0:a6:c5:7f:9d:7b:87:fb:ad:e2:
                    4f:b3:fa:1e:61:7c:f2:a1:58:b7:b1:7a:1b:60:fe:
                    6a:dc:69:a0:66:62:da:fc:7a:5c:68:b1:72:d6:fa:
                    d3:3d:d3:af:ed:28:fe:0c:d6:dd:08:3e:cb:04:c2:
                    c6:11:9e:96:5e:cf:da:5d:41:b0:1d:5b:cc:10:1a:
                    36:5b:6e:a9:1b:19:c0:08:d6:e0:03:56:cd:f5:d5:
                    c5:6e:ef:e2:18:5b:b2:ab:c5:d3:66:ed:e3:24:f1:
                    b7:8a:7b:09:f1:7d:dc:83:0a:a7:7e:09:63:f0:cb:
                    c0:e1:a3:d7:54:37:5b:2d:8b:18:59:07:11:5e:57:
                    ef:ff:e1:4b:92:20:f3:00:6c:8f:6c:26:18:ff:ff:
                    30:95:9e:f5:49:89:e9:a3:64:7d:7a:b0:01:4c:a1:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:78:9B:E2:ED:DA:BD:AD:27:EF:7F:73:33:31:A5:F0:C7:B4:87
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/060A2EE4EC1E11EEBF39C47FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.211.0-113.203.212.255
                  113.203.214.0/23
                  113.203.219.0/24
                  113.203.222.0/24
                  113.203.227.0/24
                  113.203.243.0/24
                  180.178.151.0/24
                  180.178.161.0/24
                  180.178.164.0/24
                  180.178.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8b:e1:d2:7c:ee:b6:15:a5:ff:80:71:f4:18:2c:84:8a:45:
         c4:bd:4b:90:88:10:3a:8d:7a:8f:f3:22:67:bd:42:ef:47:d2:
         36:b4:a9:7a:91:76:81:aa:9f:b5:13:44:cf:eb:43:fe:f6:1f:
         55:fe:c7:09:3f:a5:92:3a:2e:74:61:1d:9c:d2:c2:cd:e9:57:
         46:e0:95:fb:3c:6a:fb:79:16:c1:72:00:e0:8b:2a:74:f1:5d:
         0f:4b:c0:41:66:98:97:90:b1:67:ff:25:31:40:e5:bc:96:7c:
         f0:74:29:6f:c6:2c:eb:0a:74:32:85:ba:dc:1e:0f:db:97:3a:
         9e:9f:f1:6e:69:22:b4:96:9b:27:bd:5f:24:8e:cd:99:1e:7b:
         08:56:c5:6e:04:ed:4a:0a:51:b9:62:49:20:68:d5:e2:03:6d:
         bd:74:98:15:02:63:ff:d6:ab:aa:2a:0a:73:34:cd:23:18:39:
         90:21:e7:c8:af:b8:84:f6:b3:8c:aa:91:a3:3d:2f:24:46:36:
         51:a4:50:3c:2e:b2:91:65:04:c1:c6:d3:c3:71:9a:34:38:39:
         5c:77:70:9b:b9:ba:f8:2c:0f:00:ce:0e:1c:93:d4:b4:1c:cd:
         ff:92:7c:10:0b:95:f6:25:76:4b:36:1b:bd:d1:14:ad:af:65:
         c7:bd:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:05:10 2024 by rpki-client on console-ams.rpki-client.org