Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7D7373EEDDEE11EDA378B93AC4F9AE02.roa
File:                     7D7373EEDDEE11EDA378B93AC4F9AE02.roa (raw, json)
Hash identifier:          jxpbQH/YAUn3B8epVwkm6tqM1PcrWYburARJTwpZeIg=
Subject key identifier:   40:7A:A8:56:42:59:91:6B:C7:2F:4E:E5:82:AE:38:3A:65:81:91:43
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BC7
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7D7373EEDDEE11EDA378B93AC4F9AE02.roa
Signing time:             Wed 24 May 2023 23:25:39 +0000
ROA not before:           Wed 24 May 2023 23:25:39 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     206150
IP address blocks:        113.203.247.0/24 maxlen: 24
                          180.178.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 06:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3015 (0xbc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 23:25:39 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646e9cf3-73bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:65:0b:bf:72:b4:76:29:f1:58:18:e0:10:
                    f7:83:82:10:17:8d:ea:9c:40:1e:aa:6b:74:da:ad:
                    23:d4:e8:f1:a4:9e:f0:60:c7:dd:41:23:34:4a:f2:
                    72:91:06:c9:cf:56:cf:59:3a:65:b1:7f:e6:e9:55:
                    2d:5d:b3:ba:ee:a9:7a:cd:b1:a0:d4:42:ae:ec:e2:
                    96:d5:b8:42:29:c5:60:4f:f0:df:9a:c2:35:97:d8:
                    bd:c2:be:f5:f4:f9:d9:03:51:62:28:9d:22:41:47:
                    92:d5:db:e3:99:1e:70:6e:99:d4:49:3e:44:9a:4b:
                    6a:17:7c:a3:d5:3b:2e:3c:fb:75:d4:e3:74:24:d9:
                    07:2c:32:79:b2:59:7a:ae:bf:ee:84:e9:cf:84:f4:
                    f6:fd:df:75:cd:47:33:79:bc:fc:b6:a0:49:08:59:
                    28:1a:4b:70:e6:84:cb:56:6d:43:bc:4c:a4:b4:19:
                    f5:31:90:a9:35:06:5a:db:17:00:d4:f0:39:d0:27:
                    57:e4:3e:1e:7f:59:73:18:92:c3:fb:1f:c1:49:61:
                    ab:52:1d:95:3a:35:58:8e:8b:d9:1e:f4:0c:e2:ab:
                    5d:90:73:aa:f1:79:d1:8a:e5:48:c3:45:09:0e:bb:
                    cf:4c:2a:a2:90:8a:1e:7e:db:40:a6:ac:09:9f:6a:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7A:A8:56:42:59:91:6B:C7:2F:4E:E5:82:AE:38:3A:65:81:91:43
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7D7373EEDDEE11EDA378B93AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.247.0/24
                  180.178.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:af:f0:a1:38:41:55:97:17:92:a3:be:13:01:7e:d8:11:
         49:a8:58:ca:3b:04:f6:86:c5:bc:66:47:9d:26:14:be:a0:e1:
         fa:46:44:5c:27:ab:32:85:ab:84:8a:3d:fe:2e:f5:e6:bf:53:
         48:b4:c6:b3:7c:36:a5:29:6c:ff:8c:13:0f:b6:b0:cb:62:1f:
         cd:33:95:e6:b7:5b:4f:1c:06:c5:81:cc:19:fd:6e:53:56:b9:
         66:59:e8:31:2f:01:4c:70:95:60:37:e8:27:c2:e7:80:b9:9b:
         8c:38:68:5e:15:bf:5d:27:5b:ad:f7:39:dc:b3:4d:cd:57:38:
         4d:8a:e3:95:47:d0:54:99:d2:46:c8:60:f6:d5:92:74:f0:65:
         b6:ed:c0:59:5d:dd:06:65:43:5d:28:1a:03:2f:27:79:f2:43:
         26:5f:7e:6a:4c:f4:03:dd:94:4c:62:29:b2:c8:ef:94:40:a9:
         03:a3:07:95:61:1a:c8:3d:4c:3e:09:ab:2f:b8:e8:4e:67:60:
         f6:73:92:90:6e:08:12:98:2a:e8:83:0d:2e:90:97:e8:4e:3f:
         ed:05:b1:d2:5a:6b:45:c6:b5:b8:77:bc:a5:7f:4a:50:f6:8f:
         75:3f:44:51:32:c8:04:0c:47:10:e3:ca:c6:b3:f5:ee:41:49:
         86:6b:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:29:16 2024 by rpki-client on console-ams.rpki-client.org