Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa
File:                     38E9176402D311EFB9E2A81DC4F9AE02.roa (raw, json)
Hash identifier:          CSxYD4J+wC880jl60XhmXw1LmGIF3TB+iSowRtY3h1M=
Subject key identifier:   DC:D1:28:0F:64:8F:26:BC:10:07:F6:49:4F:77:5B:0C:B7:1A:E9:CB
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       115D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa
Signing time:             Wed 01 May 2024 19:12:47 +0000
ROA not before:           Wed 01 May 2024 19:12:47 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     131275
IP address blocks:        223.29.232.0/24 maxlen: 24
                          223.29.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4445 (0x115d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May  1 19:12:47 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6632942f-46ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:37:de:14:ff:ba:13:09:fa:1c:c9:63:88:
                    8a:76:57:61:18:91:dc:42:b1:70:fc:38:42:64:81:
                    9c:67:6f:80:3c:0e:ce:bf:f1:69:d5:c5:15:6a:c4:
                    10:cd:df:a8:cc:92:a2:62:0e:9a:2b:c4:2f:1b:fc:
                    42:5e:cd:5a:9a:57:db:e6:cd:b8:ba:c9:2f:f1:c6:
                    fe:76:5b:d2:dc:25:41:b0:1d:cf:9a:c5:22:9d:15:
                    7c:46:97:63:44:bb:64:da:f6:61:79:22:94:e2:00:
                    1d:bf:2d:ba:23:86:8a:2f:0e:73:bb:ea:3c:49:d0:
                    2d:de:44:b8:8a:a0:c8:2b:3d:38:a0:64:fe:1b:ea:
                    29:84:7c:e1:8c:9e:33:e0:bb:cc:06:c5:74:85:e3:
                    c6:bb:63:ad:94:69:d3:b1:d2:8d:71:45:c6:fa:a9:
                    07:47:26:c5:0a:6f:a7:19:a7:c7:75:b1:ea:5c:1a:
                    ea:10:79:ad:00:1f:16:17:fe:66:8f:20:ca:97:33:
                    ed:bf:58:d9:a1:1e:ce:ac:fe:a4:bb:6c:0a:f7:9a:
                    8d:1c:cd:85:6e:0b:00:fa:56:d7:22:b3:6a:45:d0:
                    20:31:d1:8d:ad:46:5b:50:c7:88:19:6b:e0:fa:07:
                    60:ff:90:01:f0:26:4e:3e:10:6e:ff:0e:0c:34:dc:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D1:28:0F:64:8F:26:BC:10:07:F6:49:4F:77:5B:0C:B7:1A:E9:CB
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.232.0/24
                  223.29.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:d4:3a:89:37:01:29:54:50:21:7c:9f:0c:41:e8:35:da:a9:
         0c:f9:9a:90:f0:8b:83:dd:a4:ac:6a:6b:71:cc:69:8f:14:17:
         49:12:56:b7:76:9a:49:f4:6e:40:7f:6d:01:84:e6:51:bc:5e:
         20:15:d1:0c:99:7f:da:b3:64:42:46:b5:ba:52:29:54:01:2c:
         08:22:cf:0e:9d:82:b5:8d:11:21:6b:f0:34:c5:c8:fe:72:26:
         b2:ce:64:43:63:8e:92:ee:56:d2:bb:3f:a0:d7:a2:17:dd:c4:
         79:c6:43:a6:c1:c8:fd:2f:8a:e2:39:95:cb:8c:4e:53:27:22:
         f4:14:07:a0:14:c8:10:76:2f:66:b1:b7:60:91:1f:41:4e:8b:
         e9:5a:ac:1c:b3:90:af:b4:bd:14:a1:7d:df:60:3c:f7:85:10:
         c3:34:32:3e:60:80:b5:93:69:fd:42:f8:e8:17:30:b9:63:b9:
         dd:38:20:cb:92:d1:cb:f3:51:54:5a:79:f2:94:dd:7a:05:4a:
         42:cb:64:f4:81:cf:58:42:ed:fa:df:9b:2b:c9:50:7a:a4:bc:
         04:fd:87:ba:cb:af:50:d2:4f:06:2c:0f:1e:bf:28:ae:0f:d3:
         91:03:a6:b2:41:1b:0f:f7:73:bb:ef:61:3b:4a:42:2d:08:f3:
         9f:47:ce:44
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICEV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwNTAxMTkxMjQ3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjMyOTQyZi00NmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRo33hT/uhMJ+hzJY4iKdldhGJHcQrFw/DhCZIGcZ2+APA7Ov/Fp1cUVasQQ
zd+ozJKiYg6aK8QvG/xCXs1amlfb5s24uskv8cb+dlvS3CVBsB3PmsUinRV8Rpdj
RLtk2vZheSKU4gAdvy26I4aKLw5zu+o8SdAt3kS4iqDIKz04oGT+G+ophHzhjJ4z
4LvMBsV0hePGu2OtlGnTsdKNcUXG+qkHRybFCm+nGafHdbHqXBrqEHmtAB8WF/5m
jyDKlzPtv1jZoR7OrP6ku2wK95qNHM2FbgsA+lbXIrNqRdAgMdGNrUZbUMeIGWvg
+gdg/5AB8CZOPhBu/w4MNNx1CQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNzRKA9k
jya8EAf2SU93Wwy3GunLMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMzhFOTE3NjQw
MkQzMTFFRkI5RTJBODFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADfHegDBADfHeowDQYJKoZIhvcNAQELBQADggEBAHnUOok3
ASlUUCF8nwxB6DXaqQz5mpDwi4PdpKxqa3HMaY8UF0kSVrd2mkn0bkB/bQGE5lG8
XiAV0QyZf9qzZEJGtbpSKVQBLAgizw6dgrWNESFr8DTFyP5yJrLOZENjjpLuVtK7
P6DXohfdxHnGQ6bByP0viuI5lcuMTlMnIvQUB6AUyBB2L2axt2CRH0FOi+larByz
kK+0vRShfd9gPPeFEMM0Mj5ggLWTaf1C+OgXMLljud04IMuS0cvzUVRaefKU3XoF
SkLLZPSBz1hC7frfmyvJUHqkvAT9h7rLr1DSTwYsDx6/KK4P05EDprJBGw/3c7vv
YTtKQi0I859HzkQ=
-----END CERTIFICATE-----
Generated at Sun May 5 00:12:34 2024 by rpki-client on console-fra.rpki-client.org