Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A2F61CF6F64E11EE8BC2A679C4F9AE02.roa
File:                     A2F61CF6F64E11EE8BC2A679C4F9AE02.roa (raw, json)
Hash identifier:          X3L2AB3WXC8gi8T48bCcowvV2BvJCIJNaKhXBrCV/Pk=
Subject key identifier:   E1:13:1D:69:2D:7E:E2:25:A1:A6:8C:92:9B:57:83:51:42:81:26:57
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1247
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A2F61CF6F64E11EE8BC2A679C4F9AE02.roa
Signing time:             Fri 24 May 2024 22:32:16 +0000
ROA not before:           Fri 24 May 2024 22:32:16 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     10753
IP address blocks:        115.167.1.0/24 maxlen: 24
                          115.167.24.0/22 maxlen: 22
                          115.167.48.0/24 maxlen: 24
                          115.167.52.0/22 maxlen: 24
                          115.167.60.0/22 maxlen: 24
                          115.167.77.0/24 maxlen: 24
                          115.167.100.0/22 maxlen: 24
                          115.167.104.0/22 maxlen: 24
                          115.167.112.0/22 maxlen: 24
                          175.110.64.0/22 maxlen: 24
                          175.110.72.0/22 maxlen: 24
                          175.110.84.0/22 maxlen: 24
                          175.110.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4679 (0x1247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 22:32:16 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66511570-febf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:75:87:7a:d0:cd:53:3b:fb:fb:09:da:87:
                    37:2d:fa:ca:0e:11:5b:fe:d3:82:39:95:b6:31:10:
                    eb:a3:b9:1b:dd:40:55:cc:0e:56:cd:18:2c:f1:5a:
                    ce:1d:2d:d6:c2:ad:d5:f0:12:23:15:20:6f:c5:18:
                    3d:55:bb:7b:d3:03:fd:be:62:e0:35:b1:fd:9f:9a:
                    ba:e4:a4:87:39:f5:99:fd:c3:89:7b:56:b9:a2:cb:
                    a4:00:ac:41:e2:38:e3:de:a8:26:eb:78:01:26:01:
                    38:d1:2a:d4:e8:8b:1c:8d:5d:4c:b8:73:16:2a:01:
                    da:2f:c9:cf:c7:c0:28:67:e6:fe:db:82:ae:7a:ee:
                    ab:c0:71:79:11:c0:d9:0a:98:50:a3:be:d3:0b:96:
                    b1:15:95:0f:85:f1:c7:09:3e:a7:a3:c8:ae:40:33:
                    2b:49:67:04:c9:c5:59:21:27:ed:20:ce:f9:77:34:
                    02:9e:32:da:a8:dc:61:97:e1:52:bd:03:c2:12:73:
                    fb:33:f2:18:a9:2c:f8:04:5c:2c:1a:c8:98:c0:d8:
                    0f:ab:e9:0c:7d:8d:28:41:41:d0:66:e2:b8:c7:5c:
                    94:7d:65:a6:5e:c0:cf:26:cf:d7:03:86:30:f2:63:
                    80:a5:86:4b:71:86:cf:07:55:1b:95:9f:6d:a4:83:
                    af:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:13:1D:69:2D:7E:E2:25:A1:A6:8C:92:9B:57:83:51:42:81:26:57
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A2F61CF6F64E11EE8BC2A679C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.1.0/24
                  115.167.24.0/22
                  115.167.48.0/24
                  115.167.52.0/22
                  115.167.60.0/22
                  115.167.77.0/24
                  115.167.100.0-115.167.107.255
                  115.167.112.0/22
                  175.110.64.0/22
                  175.110.72.0/22
                  175.110.84.0/22
                  175.110.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:04:88:aa:59:9c:0c:f2:24:9b:9e:9a:12:90:fe:4a:6a:81:
         22:eb:8a:3f:e0:44:c9:22:8b:c9:88:df:66:dd:f5:56:67:9b:
         e8:fd:c6:a1:57:3c:fe:90:5a:84:d7:3d:c9:ae:eb:8c:fd:35:
         a7:14:29:7e:a2:0b:f9:34:77:17:13:aa:8e:6a:24:19:51:e9:
         71:83:35:8e:f3:05:71:6e:47:5e:87:bf:9c:1b:70:a5:07:42:
         d6:48:70:f1:39:9f:38:74:5a:47:af:8e:98:11:4b:f7:50:5b:
         aa:2d:fa:fb:d3:ae:31:41:54:61:83:58:cd:8c:26:30:56:0d:
         6a:a1:d5:24:70:18:93:dd:09:7d:d7:5a:f3:2a:3f:7a:4b:a0:
         50:85:aa:c9:8b:18:ec:2b:5d:61:e7:7e:44:f7:81:5a:d0:4d:
         46:b6:51:07:4a:84:63:58:42:61:e8:bb:0a:dd:f2:9f:c4:d0:
         a4:37:da:e8:c3:f2:e1:df:8e:5a:a2:9e:c3:3b:a7:69:56:89:
         8b:67:8a:3d:e8:76:74:46:8e:95:ab:f7:92:4a:56:4b:7f:6d:
         df:6c:d5:71:e4:35:b7:6b:87:b8:44:ee:c1:0f:6d:52:08:91:
         73:98:f2:b9:21:09:31:1a:ab:3e:2c:b1:f4:09:b0:55:33:d5:
         4f:30:a7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:31 2024 by rpki-client on console-ams.rpki-client.org