Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C299CA3CEC1F11EEA5EA9782C4F9AE02.roa
File:                     C299CA3CEC1F11EEA5EA9782C4F9AE02.roa (raw, json)
Hash identifier:          dikOKpqTZPN9CZvC/c8DRNXdOiJyrjzpHz+Iiti59ws=
Subject key identifier:   53:D1:D5:47:91:5C:D0:3F:91:0B:74:A7:C5:4C:76:9A:F6:E7:73:01
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1014
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C299CA3CEC1F11EEA5EA9782C4F9AE02.roa
Signing time:             Wed 27 Mar 2024 09:52:45 +0000
ROA not before:           Wed 27 Mar 2024 09:52:45 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        113.203.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 19:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4116 (0x1014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Mar 27 09:52:45 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6603ec6d-ae9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5d:05:aa:31:ef:ed:78:fe:a2:ac:1f:5e:ea:
                    54:57:09:51:18:11:0f:fd:52:2a:36:c5:ab:84:c6:
                    7e:53:df:99:2d:af:6a:f3:91:e5:94:02:14:cb:63:
                    44:f0:87:0f:93:cc:09:cf:77:1f:91:f3:a2:72:b6:
                    13:36:1d:dc:03:1f:e4:58:b4:fb:87:d5:18:12:6f:
                    0e:d7:03:8b:ec:78:69:54:d1:c7:d0:44:70:3a:59:
                    9e:63:8a:8f:ed:73:40:92:ef:50:2f:ba:88:fd:6c:
                    82:1a:1d:97:bf:e8:9a:0d:30:c3:ee:f4:a6:90:03:
                    43:3a:70:42:d2:fc:26:25:9a:66:e9:fc:c8:6a:b7:
                    f1:33:cc:82:fd:9b:41:f2:77:da:ae:47:67:b2:c4:
                    f6:c5:5a:90:cd:58:45:ff:02:e6:16:2d:3d:75:2f:
                    7e:44:cd:a5:43:30:49:3a:57:ec:df:25:8e:f5:74:
                    88:c3:a8:68:bf:78:e6:fe:92:3d:7c:02:d3:7a:ca:
                    b8:df:1a:11:3f:c0:5c:5a:ba:62:2b:fb:39:61:a1:
                    9a:49:e7:8c:1a:d2:97:a8:5c:1f:ce:f5:57:5d:97:
                    66:d3:8a:6a:19:77:1c:fc:43:a8:7b:d2:3c:b5:8b:
                    43:e5:dc:02:4a:3d:1a:7b:ae:3d:f7:a8:9c:95:71:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D1:D5:47:91:5C:D0:3F:91:0B:74:A7:C5:4C:76:9A:F6:E7:73:01
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C299CA3CEC1F11EEA5EA9782C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:dd:af:97:81:8c:35:b8:94:1a:e4:2c:96:f8:39:81:96:
         ec:bc:62:cd:99:19:13:0c:2e:1a:fa:79:4c:ee:97:22:2e:f8:
         a5:0a:84:ec:00:bc:05:a8:77:e6:b1:a8:b1:5e:05:ff:d6:e0:
         18:66:79:24:13:b7:9e:01:7f:a9:b2:48:93:04:c9:3f:a3:b9:
         45:d5:b2:1c:01:f9:e4:3e:10:8b:9b:fc:21:37:5d:19:25:d1:
         e7:a6:5d:8a:69:bc:c9:b5:89:89:e7:40:cf:d5:ee:64:35:8b:
         83:38:fe:a1:83:62:69:04:22:06:9f:bf:b9:bf:77:c3:b2:08:
         c4:c3:71:6b:a5:27:cb:20:e1:4d:13:e6:cd:e0:be:14:a0:db:
         f0:25:bd:2f:0f:0f:70:ea:0e:1a:49:5e:1c:8e:d6:b2:cb:6d:
         f5:39:27:5a:1f:61:19:7b:59:a8:93:37:85:f3:17:8c:75:0e:
         7e:3b:68:81:01:e2:2f:84:1f:a3:9f:9e:51:1f:77:25:93:98:
         7b:7c:63:97:33:c4:1d:12:78:13:9e:d7:62:f9:7e:12:21:7f:
         39:40:31:40:34:68:62:17:ba:eb:84:10:fb:16:58:aa:e2:03:
         4c:32:29:83:13:d8:f5:bf:bd:cb:b3:ab:8e:45:31:c9:01:f4:
         87:07:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:07:40 2024 by rpki-client on console-fra.rpki-client.org