Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D86EB72DCDA11EC97E4BC48C4F9AE02.roa
File:                     4D86EB72DCDA11EC97E4BC48C4F9AE02.roa (raw, json)
Hash identifier:          Uqr8jpBATDPOgJZjdQiMxGrpY1PIXKU6lItAwjO7tKc=
Subject key identifier:   BD:13:AC:58:D3:B7:02:2E:F5:A0:64:9A:25:FA:47:42:42:03:41:F8
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BB2
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D86EB72DCDA11EC97E4BC48C4F9AE02.roa
Signing time:             Wed 24 May 2023 23:25:14 +0000
ROA not before:           Wed 24 May 2023 23:25:14 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     13213
IP address blocks:        115.167.7.0/24 maxlen: 24
                          115.167.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2994 (0xbb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 23:25:14 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646e9cda-36b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:15:4e:9a:e2:5c:dd:c4:8a:81:c3:61:fe:
                    4e:04:91:ef:f0:f6:4c:15:0f:2d:d6:99:74:01:4d:
                    65:31:37:b8:76:96:aa:74:5d:c0:c3:cf:0b:a4:7f:
                    3b:71:c1:6f:ed:41:93:bf:62:8f:c4:44:bf:a9:b1:
                    e7:de:77:58:64:c2:05:9e:45:84:02:af:01:25:a6:
                    d6:cb:cb:ba:06:4b:f9:5a:62:3d:9b:39:62:ce:14:
                    6d:23:6c:22:57:f6:c0:e4:7a:9a:bb:85:13:a8:98:
                    f2:fa:2c:b4:9b:a5:79:ba:79:66:29:b6:04:5f:a3:
                    2b:f4:5d:f0:54:ea:87:e3:63:30:d6:c1:a8:fd:ac:
                    04:44:fc:2f:75:c5:48:59:00:6a:09:75:bf:a3:61:
                    1b:4a:a6:2e:5e:af:87:3e:8c:b1:a7:6a:4d:d1:5a:
                    da:4f:d7:c3:be:15:3c:28:b8:94:d9:d0:67:37:49:
                    b9:89:41:7d:cd:4a:77:33:49:b3:93:2e:3f:c4:ab:
                    f1:34:82:70:1d:c2:bb:de:52:ec:3b:fa:a5:8c:79:
                    fa:35:09:18:e6:68:09:36:d4:c7:cf:fd:48:e7:ea:
                    95:d2:de:91:5e:95:17:8b:a7:97:6c:32:bd:99:30:
                    99:2f:e2:4d:26:53:dc:b4:6b:df:7b:79:4b:ce:e3:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:13:AC:58:D3:B7:02:2E:F5:A0:64:9A:25:FA:47:42:42:03:41:F8
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D86EB72DCDA11EC97E4BC48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.7.0/24
                  115.167.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:f2:85:d1:f3:05:01:8a:f1:69:c9:c2:90:13:8e:20:ca:ef:
         6d:01:a9:8b:f6:0c:45:79:dd:98:8a:a3:b2:94:48:8c:c8:95:
         9f:48:4a:92:17:64:39:0f:ef:c5:99:09:38:7f:5f:5e:af:28:
         74:e8:14:36:16:ab:22:75:18:09:a1:65:2d:fe:0e:12:84:da:
         c5:71:a9:90:bd:e7:05:96:d0:c2:65:4d:34:81:c5:f9:8d:6f:
         5c:e3:aa:e3:e7:77:46:7e:ab:2e:37:a0:f6:b9:89:ca:b6:65:
         88:83:71:17:a5:20:63:f1:78:3f:24:36:8f:1a:09:c9:40:cd:
         7c:3b:36:44:61:6c:f0:f3:5c:bf:a2:08:f0:22:7f:ad:a3:bc:
         f3:09:1f:f9:c7:ae:ee:92:b6:a9:bb:96:85:f9:e4:12:6d:c8:
         39:c1:64:13:0e:35:c5:91:b1:46:62:4c:1d:24:8f:e2:bb:88:
         7d:17:90:fc:62:23:0f:55:c1:42:59:80:4e:3e:00:b0:62:5a:
         3e:e2:a4:d0:55:f3:ba:70:04:39:23:04:cc:42:23:34:1b:7b:
         5a:3a:28:57:97:77:2a:ef:b3:38:35:01:b2:3f:e0:c7:3e:ce:
         fe:fa:1d:2d:21:59:81:d4:f7:d4:47:6a:f8:7e:ef:57:90:3f:
         8c:b8:ef:77
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNTI0MjMyNTE0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDZlOWNkYS0zNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkrIVTpriXN3EioHDYf5OBJHv8PZMFQ8t1pl0AU1lMTe4dpaqdF3Aw88LpH87
ccFv7UGTv2KPxES/qbHn3ndYZMIFnkWEAq8BJabWy8u6Bkv5WmI9mzlizhRtI2wi
V/bA5Hqau4UTqJjy+iy0m6V5unlmKbYEX6Mr9F3wVOqH42Mw1sGo/awERPwvdcVI
WQBqCXW/o2EbSqYuXq+HPoyxp2pN0VraT9fDvhU8KLiU2dBnN0m5iUF9zUp3M0mz
ky4/xKvxNIJwHcK73lLsO/qljHn6NQkY5mgJNtTHz/1I5+qV0t6RXpUXi6eXbDK9
mTCZL+JNJlPctGvfe3lLzuNtGQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFL0TrFjT
twIu9aBkmiX6R0JCA0H4MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNEQ4NkVCNzJE
Q0RBMTFFQzk3RTRCQzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABzpwcDBABzpzMwDQYJKoZIhvcNAQELBQADggEBAJHyhdHz
BQGK8WnJwpATjiDK720BqYv2DEV53ZiKo7KUSIzIlZ9ISpIXZDkP78WZCTh/X16v
KHToFDYWqyJ1GAmhZS3+DhKE2sVxqZC95wWW0MJlTTSBxfmNb1zjquPnd0Z+qy43
oPa5icq2ZYiDcRelIGPxeD8kNo8aCclAzXw7NkRhbPDzXL+iCPAif62jvPMJH/nH
ru6Stqm7loX55BJtyDnBZBMONcWRsUZiTB0kj+K7iH0XkPxiIw9VwUJZgE4+ALBi
Wj7ipNBV87pwBDkjBMxCIzQbe1o6KFeXdyrvszg1AbI/4Mc+zv76HS0hWYHU99RH
avh+71eQP4y473c=
-----END CERTIFICATE-----
Generated at Wed Apr 24 23:34:37 2024 by rpki-client on console-ams.rpki-client.org