Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ADDD43E27F1A11EF96B3E844C4F9AE02.roa
File:                     ADDD43E27F1A11EF96B3E844C4F9AE02.roa (raw, json)
Hash identifier:          WAPINgWy7Sn6Ksx2GChCc3k7VX3rK24CijKakbA/ma8=
Subject key identifier:   74:18:20:42:05:0D:9C:5C:43:49:6F:8B:6C:66:11:C9:00:5D:F2:A9
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       16C1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ADDD43E27F1A11EF96B3E844C4F9AE02.roa
Signing time:             Mon 30 Sep 2024 10:56:43 +0000
ROA not before:           Mon 30 Sep 2024 10:56:43 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     397423
IP address blocks:        175.110.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5825 (0x16c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Sep 30 10:56:43 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66fa83eb-2713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:6c:30:95:14:24:85:36:5a:48:ae:48:98:
                    e1:e2:b1:a7:b9:a5:f6:d8:94:85:64:6d:4b:72:5b:
                    b8:85:4d:60:e2:8a:21:e0:45:e8:f7:0d:dc:72:33:
                    33:28:e1:e2:b8:7f:06:1c:92:24:5f:e8:b6:1e:e2:
                    0c:d9:20:94:6d:f9:2c:00:29:c0:09:5a:7f:da:80:
                    9b:cf:cf:75:00:aa:00:7d:6b:3e:07:60:88:1f:13:
                    7e:7f:51:92:2d:96:3a:8d:e1:6b:78:f0:77:d3:e0:
                    99:53:ee:1c:71:f0:3a:2f:9b:21:7d:85:b1:b7:8e:
                    6b:a3:27:cf:fc:5f:0b:18:0f:42:98:b8:07:e8:45:
                    f5:c0:9d:ed:c7:3a:b0:37:0d:0d:fa:f0:35:14:54:
                    68:02:6d:57:4e:ca:62:67:9d:1e:5d:31:9f:5e:c1:
                    08:db:55:4a:55:46:03:a0:06:14:68:3e:7e:d2:f8:
                    bd:e0:3b:df:40:15:03:52:04:52:53:9e:61:25:9d:
                    bd:6c:70:5d:96:1a:a8:9f:54:8f:d1:dd:2f:60:56:
                    42:fe:8f:c5:a6:9c:81:60:60:3a:2a:7b:f1:b2:1a:
                    5d:47:d5:63:ad:b5:57:53:8a:7d:dc:c1:26:72:ac:
                    2b:25:aa:c7:02:f5:68:e0:73:93:4d:51:91:92:ac:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:20:42:05:0D:9C:5C:43:49:6F:8B:6C:66:11:C9:00:5D:F2:A9
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ADDD43E27F1A11EF96B3E844C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:44:fe:12:7f:07:cc:0f:9a:a8:c8:25:d7:d6:c1:a3:8a:88:
         fe:0a:45:f1:96:06:d8:4e:55:b8:73:72:a5:a2:c5:d8:21:8b:
         71:41:a1:9b:c1:50:b8:1f:cd:84:81:d4:cb:3a:4f:36:61:34:
         c0:b0:30:a6:4b:ad:8d:31:9d:4d:81:f4:ab:8c:ef:74:7a:a4:
         70:81:5a:ee:55:82:40:4d:18:68:30:f5:59:c0:ba:a4:42:ad:
         08:a6:5f:92:5b:db:fb:7b:e7:c9:86:f3:27:99:42:c7:a5:dd:
         eb:d1:b6:c9:74:fd:4b:7f:d6:bf:3c:0d:d2:ab:14:10:b7:5f:
         2f:d8:99:13:34:d8:0b:b0:99:10:ea:de:20:8e:f1:dd:dc:29:
         2b:5a:2c:75:d0:d9:78:35:76:32:e0:38:57:03:c1:c4:e0:71:
         7c:23:5b:a5:cc:96:2e:b5:e2:aa:b7:5e:bd:df:85:73:49:7b:
         3a:ab:a2:b5:1a:96:10:fe:7d:e3:87:cc:c7:f8:fc:22:36:f6:
         da:91:b7:cf:da:bc:27:26:b4:a2:3e:c9:8e:d3:a8:97:aa:00:
         e2:34:e4:fa:e9:94:d6:e0:21:7c:d0:9d:8c:33:bd:77:b0:e4:
         b1:74:4c:5e:04:10:ac:dc:cf:fe:6e:97:1b:b4:62:c6:57:c2:
         2a:c0:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:35:04 2024 by rpki-client on console-ams.rpki-client.org