Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42718A9815EE11EC972DE124C4F9AE02.roa
File:                     42718A9815EE11EC972DE124C4F9AE02.roa (raw, json)
Hash identifier:          0xVHeAifboXPlMWBpPwl8xx3T9DgQwIqtVmTBW2evMg=
Subject key identifier:   C3:B6:10:0F:01:72:66:8A:11:E3:CA:EF:F7:B9:B6:F5:AE:AD:67:CC
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BC0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42718A9815EE11EC972DE124C4F9AE02.roa
Signing time:             Wed 24 May 2023 23:25:31 +0000
ROA not before:           Wed 24 May 2023 23:25:31 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     146993
IP address blocks:        43.226.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Apr 2024 08:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3008 (0xbc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 23:25:31 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646e9ceb-5a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:09:3d:68:a6:2c:f6:4a:e9:12:c2:98:77:
                    b4:a1:42:f1:d0:ed:6b:a8:cd:60:10:43:c1:b2:c2:
                    2c:be:47:3b:76:d6:6d:48:91:82:b9:8b:81:fc:33:
                    3a:63:43:7a:4b:0a:04:90:69:78:64:87:3d:fa:4e:
                    02:ae:77:ef:ba:f6:37:fb:a8:81:28:92:8e:99:f8:
                    13:b8:2e:0e:2b:05:43:8f:69:bc:5a:f8:84:74:b9:
                    40:7d:f3:c2:6e:e0:61:c2:d3:32:c1:67:f1:fe:bc:
                    3d:e3:ed:48:70:55:d7:cb:e7:4e:0a:98:00:51:c4:
                    da:69:92:45:61:6d:72:38:ac:59:75:8c:25:2b:99:
                    18:ac:03:1a:52:c3:84:25:98:fb:e7:b3:e9:ef:52:
                    f3:61:a9:2e:cb:0f:2e:12:42:af:e9:3f:c5:45:fc:
                    eb:81:99:c0:0c:aa:1d:84:cf:a7:86:33:b0:6e:fd:
                    02:80:c4:ec:50:52:d0:2c:b8:23:be:6a:e4:f8:40:
                    26:42:11:65:ad:3b:2a:88:76:89:02:96:eb:8a:9b:
                    d8:e6:a0:92:ba:df:25:89:ee:b0:4a:34:2a:bb:cf:
                    52:d8:26:38:75:be:64:15:e3:d7:d0:bb:fd:2c:47:
                    11:4d:24:db:07:08:59:c0:80:c1:26:d6:02:6d:47:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B6:10:0F:01:72:66:8A:11:E3:CA:EF:F7:B9:B6:F5:AE:AD:67:CC
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42718A9815EE11EC972DE124C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:1a:65:11:ab:d8:b2:f7:f5:54:a4:ea:ea:f6:e6:24:5a:30:
         01:fb:fe:2a:96:41:4a:64:1f:37:06:58:e6:fc:18:8b:7c:7c:
         92:9b:30:0c:9c:07:07:2e:eb:7d:d2:f9:b3:64:48:a3:88:1a:
         41:6e:38:7b:ef:0c:77:b8:e9:c7:df:44:c0:f5:31:11:00:85:
         4c:01:40:91:2d:e7:bb:c5:bb:15:a4:84:cf:26:5c:93:96:ff:
         94:54:85:b5:21:a9:48:4d:19:ff:07:78:3a:05:71:a7:7b:f2:
         90:fb:c2:7c:42:17:b9:f1:c1:9d:bc:d5:b6:f1:d6:be:11:af:
         af:9f:91:a4:78:30:ea:14:ce:3e:46:a5:98:17:e2:25:e5:4a:
         44:91:69:dd:5f:a9:47:24:5c:d5:c6:a7:d4:b2:7c:fc:4d:f8:
         b0:47:3a:c6:38:2b:8b:bc:2e:dc:f3:f6:f4:b3:4e:63:1a:29:
         d1:10:69:75:24:98:92:77:4c:8f:87:68:dd:59:3f:4d:1b:e2:
         14:dc:92:af:e8:7b:c7:2b:e5:af:a4:40:33:da:b9:e8:af:2c:
         00:03:6d:3a:ea:5d:e2:7a:13:17:d8:fc:7f:6f:c3:77:d7:a2:
         a2:ce:50:9c:1f:da:c5:28:36:2a:bf:12:e9:ee:d3:37:47:1b:
         0a:e0:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 13:24:16 2024 by rpki-client on console-fra.rpki-client.org