Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/10A6CAA2F01411EEBFCE5E13C4F9AE02.roa
File:                     10A6CAA2F01411EEBFCE5E13C4F9AE02.roa (raw, json)
Hash identifier:          7jqy+dnM8N4P1E91E3ppz5AHu3KaaTRnP94qdDrIiMc=
Subject key identifier:   FA:BD:9F:E8:85:EC:B7:96:5B:2F:B2:58:C5:62:FC:04:ED:A6:8E:8D
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1024
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/10A6CAA2F01411EEBFCE5E13C4F9AE02.roa
Signing time:             Mon 01 Apr 2024 10:39:07 +0000
ROA not before:           Mon 01 Apr 2024 10:39:07 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     136030
IP address blocks:        103.151.26.0/24 maxlen: 24
                          113.203.241.0/24 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.64.0/24 maxlen: 24
                          115.167.65.0/24 maxlen: 24
                          115.167.66.0/24 maxlen: 24
                          115.167.67.0/24 maxlen: 24
                          115.167.76.0/24 maxlen: 24
                          115.167.124.0/24 maxlen: 24
                          115.167.125.0/24 maxlen: 24
                          223.29.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4132 (0x1024)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr  1 10:39:07 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=660a8eca-1f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:8f:38:a0:90:45:c3:5d:6c:57:94:38:bf:
                    26:9c:89:a1:a3:63:68:6c:35:d8:9e:a0:04:c7:a7:
                    f3:f5:72:e3:5e:75:b2:14:2c:39:95:c8:4d:4b:c0:
                    70:0c:77:9c:0d:e3:0a:7d:33:79:85:25:a2:80:a1:
                    24:bf:2d:5f:87:63:a9:c8:a8:cf:5e:3a:cf:f0:b8:
                    29:a2:cd:e4:33:35:e7:98:aa:90:cb:a9:42:bd:45:
                    f3:49:68:0f:4a:0e:31:2e:e4:c0:cf:62:40:77:27:
                    31:11:d8:69:c2:32:6d:70:df:89:d4:6f:6c:94:d7:
                    d9:72:77:ba:1b:e4:05:b7:2e:ef:76:f7:61:46:47:
                    c6:a5:48:66:e6:4e:7f:b1:92:1d:eb:3f:98:ac:c9:
                    0a:a2:35:c2:7b:66:0f:84:51:f2:b4:1d:e2:3d:ea:
                    6f:68:04:42:15:d1:0e:99:56:95:28:2e:8a:13:bd:
                    a6:6e:c9:7c:49:9f:43:e8:3e:62:fd:ea:47:73:de:
                    20:f7:db:e6:96:12:48:88:ef:66:89:fc:6c:f6:b2:
                    9f:4e:7f:c3:3c:f7:5e:a4:0a:f7:f3:eb:ff:62:d2:
                    df:d3:0f:a5:28:71:be:fc:ae:c4:45:7f:fc:cf:e5:
                    5e:76:43:2d:df:db:98:e6:46:e1:40:7b:1a:c5:62:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BD:9F:E8:85:EC:B7:96:5B:2F:B2:58:C5:62:FC:04:ED:A6:8E:8D
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/10A6CAA2F01411EEBFCE5E13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.26.0/24
                  113.203.241.0/24
                  115.167.50.0/24
                  115.167.64.0/22
                  115.167.76.0/24
                  115.167.124.0/23
                  223.29.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:3c:f8:5a:ee:84:9b:33:d1:8b:45:6f:95:df:fe:01:9b:
         d4:4c:ec:fc:a1:7c:65:d3:0b:21:e2:22:31:a7:c2:26:1f:1c:
         af:83:9a:44:f4:7b:da:27:bb:9c:0a:52:ea:f3:33:18:bc:af:
         41:8b:be:39:10:7d:8a:dc:49:25:fa:04:b1:60:cc:17:c7:f2:
         f3:25:ab:8e:e6:b0:3b:8f:8c:c1:90:95:cf:6c:9e:fa:29:49:
         86:ff:0a:66:4d:d3:53:5e:72:e4:46:13:be:71:dc:be:2b:bb:
         8c:bc:69:02:4b:dd:a3:d8:80:d0:38:80:65:2e:e5:33:2a:e7:
         70:30:38:6f:66:54:66:1e:9c:75:2d:02:6b:72:42:f3:c0:cc:
         8b:1c:28:98:79:dd:92:df:a7:61:fe:e7:31:a2:d3:16:a8:37:
         74:4a:4a:a3:31:28:e2:75:de:dc:e8:aa:16:86:4e:18:86:e4:
         7f:77:74:da:af:c5:85:30:36:a8:63:a0:f0:85:e5:34:cd:41:
         c5:b3:14:61:93:7c:bb:36:87:4a:91:4e:b5:74:74:b9:ed:c0:
         68:6a:04:97:af:c9:e1:6b:ce:6c:ad:49:ae:21:96:b3:58:6e:
         62:11:f6:ab:26:38:e5:d2:a4:24:ca:04:d8:32:0e:63:f2:00:
         5e:08:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:05:36 2024 by rpki-client on console-ams.rpki-client.org