Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5CA189EA191E11F0A1E00E16C4F9AE02.roa
File:                     5CA189EA191E11F0A1E00E16C4F9AE02.roa (raw, json)
Hash identifier:          PcoqtE+uMYnI88a2CPO+mBIh842m4XRMtutS0Ict4JM=
Subject key identifier:   84:52:2E:B5:AE:23:EC:15:9B:35:DE:54:2A:E9:BD:AE:ED:90:B1:2F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       25C9
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5CA189EA191E11F0A1E00E16C4F9AE02.roa
Signing time:             Mon 14 Apr 2025 10:51:04 +0000
ROA not before:           Mon 14 Apr 2025 10:51:04 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     3561
IP address blocks:        103.11.68.0/22 maxlen: 24
                          115.167.10.0/24 maxlen: 24
                          175.110.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9673 (0x25c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 14 10:51:04 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67fce898-1a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:09:0c:01:9c:31:ad:52:cc:28:b7:b1:fd:
                    4e:b6:ea:75:b0:75:81:f9:cd:b7:19:77:e8:15:b6:
                    d2:c5:2a:32:a8:8a:0f:71:3b:8f:74:7b:e7:63:5b:
                    a4:3e:f9:27:cc:89:96:de:32:88:54:6f:bd:44:33:
                    3a:f9:a9:2f:a3:b3:0d:75:fa:81:ab:4e:3f:d6:6d:
                    ca:13:89:6c:23:f5:b6:ff:74:2c:75:c4:75:c1:3e:
                    ac:bc:4c:b8:85:63:b7:4a:5a:bc:28:fc:4c:60:79:
                    c7:16:0e:f3:88:3d:ad:ea:0c:4e:f4:85:d5:fc:38:
                    cb:df:c7:d4:d5:dc:6a:b2:cf:0b:fd:c4:d5:fc:ce:
                    32:3b:99:21:e0:9d:f2:57:e8:b5:73:cf:e5:6e:48:
                    29:3d:61:87:a0:97:e6:cf:74:cc:9e:67:ce:b1:8e:
                    a6:2c:16:6f:f6:8e:1d:2e:45:fa:4e:c4:1b:af:f0:
                    9c:3b:a7:9c:61:82:d2:93:ea:58:21:1c:f8:bb:c8:
                    a3:4d:0b:10:b6:de:b4:58:83:f6:a9:d3:9e:41:53:
                    d3:f0:7e:ab:ce:23:67:63:b4:28:d0:ba:32:d1:ce:
                    24:74:63:5c:f9:9f:d8:95:a9:17:60:44:91:27:c1:
                    82:d6:87:81:cb:76:e0:c1:54:44:cc:6d:e7:97:3f:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:2E:B5:AE:23:EC:15:9B:35:DE:54:2A:E9:BD:AE:ED:90:B1:2F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5CA189EA191E11F0A1E00E16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.68.0/22
                  115.167.10.0/24
                  175.110.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b6:a3:6e:2f:1a:03:94:9d:03:22:cb:1f:2b:60:16:fe:b5:
         74:83:f5:56:1d:cc:40:2d:3c:c3:b6:01:6d:4c:19:44:b6:8b:
         e0:cc:1e:2a:4d:c9:36:1c:c1:c8:e5:9c:00:b7:b7:48:75:08:
         53:6c:40:d6:d4:ba:73:7f:3c:37:a7:16:dd:89:ca:6e:91:62:
         0d:ca:90:dd:4f:ea:9c:3b:97:7c:24:97:60:f8:8f:26:2d:66:
         f6:cc:ce:1d:3e:4a:71:81:7c:3b:b0:f2:52:4b:23:04:a3:31:
         74:22:6e:44:ef:79:2a:11:8d:cc:a7:e7:95:63:f9:af:0b:0b:
         9b:26:4e:18:fd:78:8d:e1:2e:50:e0:6a:2c:d3:ef:c3:54:cc:
         45:e2:65:7e:97:39:b0:a6:ac:64:b4:9f:26:1d:fe:e9:1e:26:
         1a:f4:e9:f6:0e:3e:0e:fe:9a:78:c9:60:e3:32:7b:6d:35:4c:
         22:51:d6:35:e7:7c:50:d9:9a:2c:c4:25:69:20:91:92:f0:21:
         fc:98:f1:42:5e:c6:bf:17:84:56:04:e9:70:6f:57:48:2b:50:
         32:a0:1d:80:b1:89:bb:17:57:d1:c3:d1:27:3a:d8:4e:bd:ea:
         a6:46:21:87:1d:98:75:85:9f:82:f3:72:4b:bb:29:75:a2:88:
         23:d4:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:13 2025 by rpki-client on console.sobornost.net