Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B8E886AAFBD811EDBC5C2B51C4F9AE02.roa
File:                     B8E886AAFBD811EDBC5C2B51C4F9AE02.roa (raw, json)
Hash identifier:          vGHEgM1MkQbqcIeN7gNBsaDn59VMr5QkGkU4Jmv9z7M=
Subject key identifier:   96:21:1A:ED:31:63:9B:22:AA:C6:89:61:7F:D1:53:3D:92:FB:B3:C6
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BE1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B8E886AAFBD811EDBC5C2B51C4F9AE02.roa
Signing time:             Fri 26 May 2023 15:19:35 +0000
ROA not before:           Fri 26 May 2023 15:19:35 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     131471
IP address blocks:        103.11.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 06:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3041 (0xbe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 26 15:19:35 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6470ce07-3918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:0f:74:a1:a6:25:41:41:c4:8c:45:0f:f0:
                    20:35:4e:98:ce:86:8a:d6:06:1d:a6:8d:bc:16:d6:
                    5d:5e:f0:d4:d1:55:1e:41:08:0f:93:0a:27:7f:e3:
                    a6:71:12:c2:19:ae:d1:d5:75:e7:69:a8:50:54:4a:
                    05:76:30:3a:12:a8:57:51:a7:3d:4e:d4:5a:0e:89:
                    30:ff:9a:96:49:37:a8:72:b0:1b:a4:3c:b4:01:19:
                    b7:e8:ed:f9:4f:8b:0e:0a:bc:e3:68:5c:b8:5a:80:
                    68:2b:29:58:f8:b5:f9:d1:35:c6:65:75:9c:7c:44:
                    45:bf:8b:65:c2:bc:50:4d:3f:c0:01:00:bb:03:8f:
                    74:9f:4e:30:e7:0b:9a:e2:85:e7:24:93:03:ab:6d:
                    2a:c7:e6:80:5c:2c:e0:6a:40:81:17:ea:ac:7d:3a:
                    1d:65:83:c1:69:29:a3:31:52:8d:e7:ec:6e:79:fc:
                    35:47:54:22:cb:7c:4f:9b:24:be:a0:40:d8:1d:1f:
                    01:b1:54:ba:ab:f4:ed:92:d7:9e:e0:4b:1a:0e:84:
                    df:43:e0:00:b8:4d:22:dc:ab:dc:40:c1:10:02:92:
                    ad:c5:78:d4:13:f0:99:b3:12:76:c1:d4:ca:a5:90:
                    f1:18:8f:f2:c4:aa:23:2c:d9:de:cc:7c:19:9a:3e:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:21:1A:ED:31:63:9B:22:AA:C6:89:61:7F:D1:53:3D:92:FB:B3:C6
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B8E886AAFBD811EDBC5C2B51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:1b:4e:11:ad:a0:e4:a2:d6:c1:a7:c9:69:0c:57:a0:9b:0b:
         4a:85:21:37:99:06:de:7c:89:d5:2e:32:cf:b1:2f:8e:81:7c:
         cd:b4:5a:73:c7:2d:ee:2d:7c:1b:5e:80:2b:8a:ca:36:8b:d4:
         62:bf:86:92:15:1e:bb:95:9b:8e:fd:5c:d7:ed:55:55:7a:21:
         ee:27:1d:ee:d1:9e:39:d8:8a:e8:73:ee:d9:17:d2:68:bb:9c:
         4a:3d:24:a1:8e:f1:15:ed:ef:99:3d:2c:78:71:a8:a4:96:d3:
         09:d6:50:35:35:d2:64:b4:52:ec:bc:4f:43:90:24:9c:1d:7a:
         a9:77:85:72:ce:31:03:5e:7c:d1:d6:73:14:c3:9d:94:1a:f5:
         a0:34:7f:c6:35:cc:5e:cd:0b:8a:54:82:bb:30:39:fa:13:e9:
         fa:3c:6a:26:23:15:ad:6c:0b:10:a1:eb:20:56:ae:81:30:26:
         74:93:74:50:52:56:d2:7c:c8:dd:44:4b:22:71:3f:cc:36:f1:
         68:68:ee:fc:98:b6:26:fd:c1:25:16:23:3f:e1:b7:2a:b5:dc:
         9a:18:79:65:87:19:e1:4f:0a:09:ce:54:fb:aa:da:b0:c2:74:
         3c:65:31:a0:cc:20:a3:1c:c0:4b:2d:8a:60:2d:f4:dc:28:f3:
         e0:51:9d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:29:16 2024 by rpki-client on console-ams.rpki-client.org