Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/900BE934015411EFA31AC340C4F9AE02.roa
File:                     900BE934015411EFA31AC340C4F9AE02.roa (raw, json)
Hash identifier:          j0W9ydee78HoozmtkS90/5RbU+gkk6ZpUeSW3XzlbaE=
Subject key identifier:   F6:F9:3D:58:E4:E8:21:7D:28:A2:5B:06:6E:C8:9A:C1:1B:C8:22:D4
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1248
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/900BE934015411EFA31AC340C4F9AE02.roa
Signing time:             Fri 24 May 2024 22:32:17 +0000
ROA not before:           Fri 24 May 2024 22:32:17 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     1239
IP address blocks:        175.110.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4680 (0x1248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 22:32:17 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66511571-d4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:c1:0a:f9:7e:3b:a0:1e:ee:a0:b8:99:43:
                    f5:a1:8d:4f:c8:4e:9d:76:aa:4f:ef:15:02:c9:0e:
                    06:5e:05:cd:e4:57:2e:66:8f:2f:67:2b:c7:83:c8:
                    72:94:89:13:05:9b:97:14:94:c0:13:2f:fb:dd:26:
                    e9:d0:3d:72:c2:e3:58:1a:d9:fb:b8:c2:c8:78:3d:
                    21:e5:49:31:3b:ad:d4:de:b4:33:9f:51:30:ca:76:
                    7e:3c:cb:4f:af:1e:a1:c2:ce:ae:1b:58:4b:fd:a6:
                    b9:ea:32:6d:52:d1:ac:c2:a3:90:49:5c:8c:a3:fa:
                    4f:72:f5:cf:09:a0:8b:61:2d:5a:8e:b2:ed:1e:2a:
                    61:b7:7e:d7:2a:fe:c7:7a:dd:84:22:3b:c0:4d:3e:
                    4b:a6:9f:11:54:44:77:ec:b7:d4:90:25:d3:56:a6:
                    e1:74:21:3d:17:34:e1:46:48:59:8c:37:6c:7c:1a:
                    e4:ad:7d:2f:bc:92:84:d4:20:6f:ec:dc:d8:5e:d7:
                    f4:c0:6d:3c:5a:5a:81:db:36:11:c8:10:7f:4d:dd:
                    17:dd:6e:58:44:ea:e5:44:e5:ef:78:dc:72:db:4a:
                    9c:94:ea:73:ed:d3:19:ad:a3:99:e7:4e:e0:e3:9e:
                    8f:62:32:ec:d1:b4:11:bb:46:50:6c:fe:0e:8b:15:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F9:3D:58:E4:E8:21:7D:28:A2:5B:06:6E:C8:9A:C1:1B:C8:22:D4
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/900BE934015411EFA31AC340C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:6c:b1:41:32:94:f0:1c:41:51:a5:0c:57:f7:24:b1:26:4b:
         1b:89:0a:8e:21:91:5f:36:0c:66:e4:9e:b4:75:9f:ad:ae:ad:
         2c:d6:8d:72:d1:cc:ce:1c:1f:10:3a:1c:0c:00:20:b6:15:f2:
         f7:50:19:b0:20:3c:49:23:62:7f:18:44:dd:4a:39:9d:59:bb:
         38:ec:fb:8b:02:be:5a:2e:46:10:73:48:40:3e:d1:4a:68:6d:
         e4:f2:42:52:34:40:55:de:36:71:a1:b0:01:0a:e4:f1:ee:ef:
         8d:0d:5b:b2:4d:bc:7d:e6:ae:0f:3c:ac:28:5e:b5:d8:e0:bc:
         a1:2d:7e:ab:2f:a2:6e:46:9e:2e:60:41:8d:d7:5c:77:9f:8e:
         05:e0:50:23:df:55:52:78:75:16:4c:20:b7:6b:69:08:12:f7:
         df:40:87:27:77:00:78:04:f5:eb:13:a2:a6:a6:7f:d5:88:dc:
         b7:a0:b6:49:5a:9b:76:3a:d3:a7:8c:77:84:55:1f:b6:5a:87:
         ef:67:22:c3:c2:27:1c:35:58:f8:90:21:cd:e0:92:bf:e3:9c:
         45:b3:87:e0:5a:62:38:33:27:ee:1e:e8:9d:0d:de:d9:25:db:
         dd:d0:f1:8f:a8:3b:bf:06:8e:5f:a0:89:9e:b3:d5:7f:a1:a0:
         f9:e3:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:48 2024 by rpki-client on console-fra.rpki-client.org