Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B013483C014811EF8597FA1EC4F9AE02.roa
File:                     B013483C014811EF8597FA1EC4F9AE02.roa (raw, json)
Hash identifier:          shzxJFivZaZ1E7zxHPm3mOMrpI8d/x7qwjLQga6TABI=
Subject key identifier:   A6:D5:CE:E6:61:58:7F:65:DB:22:E8:F5:C0:C3:33:FE:89:A5:FC:31
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       10C4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B013483C014811EF8597FA1EC4F9AE02.roa
Signing time:             Tue 23 Apr 2024 09:34:42 +0000
ROA not before:           Tue 23 Apr 2024 09:34:42 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     54702
IP address blocks:        175.110.68.0/22 maxlen: 24
                          175.110.80.0/22 maxlen: 24
                          175.110.88.0/22 maxlen: 24
                          175.110.97.0/24 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.105.0/24 maxlen: 24
                          175.110.106.0/24 maxlen: 24
                          175.110.107.0/24 maxlen: 24
                          175.110.109.0/24 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          175.110.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 06:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4292 (0x10c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 23 09:34:42 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=662780b1-e9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:11:67:14:97:81:04:51:93:36:73:88:2a:
                    9e:11:1a:9b:7d:aa:65:1a:53:38:75:a8:ae:d8:2e:
                    f3:3a:c6:62:33:e9:47:15:7f:48:22:9d:59:2f:a2:
                    01:fd:40:f3:84:59:11:f6:18:28:0b:ce:c5:15:c7:
                    08:e0:69:79:be:fb:77:15:d8:69:85:5d:7b:7d:97:
                    b3:29:b0:e1:1a:34:81:d1:4a:95:8d:b2:77:f7:6c:
                    15:a4:c8:f0:0d:4e:f6:6b:eb:91:e3:5b:61:21:dc:
                    f6:9e:83:1c:4c:7d:7e:88:4e:5f:e2:98:72:3b:f9:
                    d5:21:6c:68:f1:ed:8f:8d:a3:bf:ee:0f:b5:e6:42:
                    45:c4:7d:ec:a2:ea:c4:74:88:85:d4:00:3e:ab:e3:
                    6e:db:2d:2b:16:e1:0b:e4:48:da:c6:a6:d8:dc:ad:
                    0e:bb:24:5b:73:e4:8c:86:10:34:65:e7:0a:35:48:
                    c7:00:95:3d:d2:31:8d:94:69:3b:a7:54:bc:ec:51:
                    87:48:31:81:71:ba:93:db:85:d5:cd:a7:3f:8b:6c:
                    85:a4:62:21:5b:86:d1:44:82:8d:79:5d:e1:4f:b0:
                    c7:75:71:6e:08:aa:e2:bf:a4:6c:bb:ed:e0:c8:0b:
                    f7:af:70:c8:d4:55:16:b6:b9:31:54:6c:d5:ff:d4:
                    54:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D5:CE:E6:61:58:7F:65:DB:22:E8:F5:C0:C3:33:FE:89:A5:FC:31
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B013483C014811EF8597FA1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.68.0/22
                  175.110.80.0/22
                  175.110.88.0/22
                  175.110.97.0/24
                  175.110.104.0/22
                  175.110.109.0-175.110.111.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:0e:56:e8:11:8d:98:fa:78:65:bb:d0:02:6e:cf:09:e5:4d:
         03:d7:a3:21:53:d7:19:70:ac:7f:04:d0:dc:a5:63:e9:6b:7b:
         9c:f6:51:a9:92:b6:92:95:70:fb:36:dd:cc:72:af:9e:95:97:
         d5:fb:89:79:9d:4e:94:09:c7:9d:f0:7a:09:80:4d:d7:48:13:
         ff:d3:6a:29:bd:30:da:6d:5d:a6:bf:4c:50:8f:de:11:99:f9:
         c4:27:10:94:f5:fb:fb:4d:05:59:b7:9b:7a:97:b8:f9:60:47:
         cf:cb:2c:b7:e1:ee:57:9b:bb:06:1b:5a:b7:1a:39:50:de:1c:
         1f:90:35:91:8a:27:b7:57:0d:5c:f2:a8:39:99:70:7f:3d:fd:
         24:7a:0a:1a:b2:ae:f3:e6:85:45:78:1b:4e:0e:d1:1c:e5:ae:
         00:ff:59:79:4a:71:39:63:b7:ae:2f:5c:5a:ec:8c:e8:de:d7:
         00:5c:f0:0c:e8:20:27:15:86:69:58:25:e2:8f:94:94:79:3b:
         c6:bf:b1:fe:e0:ec:06:cd:06:4c:f1:44:78:17:69:40:da:94:
         f2:7c:1e:a7:a1:46:ca:09:71:38:86:46:e5:ae:3b:35:3a:41:
         90:60:06:3b:28:6b:76:6f:8f:17:b1:8d:1b:d4:43:0e:75:5c:
         14:7c:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 08:13:22 2024 by rpki-client on console-ams.rpki-client.org