Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7306A20255811EE8CC9220BC4F9AE02.roa
File:                     D7306A20255811EE8CC9220BC4F9AE02.roa (raw, json)
Hash identifier:          zWRQIc/SsaofeEkqr571SFCtdmwANN54cN991yRPbpc=
Subject key identifier:   AF:E9:66:A2:28:63:C0:D9:A2:2C:57:F4:3C:C4:73:F0:C6:70:9A:5D
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0C75
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7306A20255811EE8CC9220BC4F9AE02.roa
Signing time:             Tue 18 Jul 2023 10:49:59 +0000
ROA not before:           Tue 18 Jul 2023 10:49:59 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     206092
IP address blocks:        115.167.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3189 (0xc75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul 18 10:49:59 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64b66e57-4cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:05:f9:c3:10:15:a2:5f:ab:a5:29:e5:6a:
                    67:64:d3:aa:e7:db:08:e5:33:40:8a:ba:e3:43:65:
                    d7:41:c1:61:67:73:00:8f:72:8d:89:8e:87:67:4b:
                    f5:75:e1:3e:5b:01:fd:cb:c5:f6:18:a8:c6:33:6c:
                    ef:ac:bb:06:99:a5:38:0c:83:c1:14:d9:0a:c3:53:
                    be:ba:96:8e:70:84:0f:e6:92:1a:38:9f:5f:8d:7f:
                    b7:08:a8:be:c8:a5:ac:58:a7:31:2d:29:f5:83:6f:
                    eb:0e:75:a1:8e:5c:b8:9f:86:e2:17:8e:d3:84:8d:
                    ea:2a:4d:16:80:97:a7:7e:f5:3c:a6:fe:12:fd:c7:
                    d2:fc:e4:a2:4a:98:61:13:53:7c:fa:61:f5:a6:61:
                    3c:c0:e2:55:cf:dc:fd:82:04:7b:21:35:c9:e2:91:
                    98:27:1c:72:47:77:e8:d6:b3:a9:70:d4:2c:45:cb:
                    91:76:85:91:68:25:55:ff:2a:7c:ed:22:3e:e8:32:
                    fc:3c:49:a5:c9:2b:f1:45:2a:af:fa:f7:b9:4e:04:
                    21:84:38:57:16:1c:03:8b:02:f0:b5:9f:0d:d7:5a:
                    b7:e5:a7:8d:77:20:a0:1c:f7:25:87:6e:c3:8c:f8:
                    5b:b2:8f:a8:92:12:ee:80:80:a7:40:66:77:79:19:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E9:66:A2:28:63:C0:D9:A2:2C:57:F4:3C:C4:73:F0:C6:70:9A:5D
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7306A20255811EE8CC9220BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:89:70:6a:fd:f5:7b:4a:d7:d3:75:88:1e:ab:57:73:26:bf:
         f4:19:8f:8b:73:39:f9:b0:c5:fc:c0:61:b5:a1:bd:27:9b:73:
         47:60:fb:57:73:83:76:0b:1d:e6:c6:4d:3e:2f:ae:67:34:cd:
         58:07:a5:86:a4:30:fd:93:3f:78:24:5c:1d:10:53:b6:c1:8c:
         74:d8:d7:84:8e:e8:89:d2:90:35:03:b4:73:61:c3:ae:46:e5:
         62:d7:7f:53:24:37:e3:a4:5d:32:fd:2c:e8:05:5e:e9:4b:14:
         fc:ee:e2:cc:f4:e2:f8:be:0b:80:1d:bf:48:d1:e6:08:89:e1:
         a4:19:48:6a:8c:31:38:06:c8:c4:e7:c5:06:de:af:3e:e5:15:
         5d:22:d6:35:0e:f3:7b:e5:50:28:03:eb:11:52:c2:dc:6a:11:
         79:14:cf:8d:54:a1:c2:26:63:bd:d0:18:be:85:05:0d:a0:d6:
         44:f4:7a:78:34:b5:e4:93:60:e4:ae:15:c5:27:a1:99:8f:6a:
         20:0d:30:09:34:25:91:21:8a:f2:af:0c:cb:bd:d4:a5:9b:ee:
         53:7f:48:9d:e8:29:3b:8e:68:26:6b:0a:12:41:ba:da:a3:cc:
         f8:91:8a:e0:41:12:bb:ee:94:df:d7:72:82:71:60:1d:05:de:
         25:71:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:56:20 2024 by rpki-client on console-fra.rpki-client.org