Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D86EB72DCDA11EC97E4BC48C4F9AE02.roa
File:                     4D86EB72DCDA11EC97E4BC48C4F9AE02.roa (raw, json)
Hash identifier:          NR6RcU9kMEadBZAcXsgH77rjUAopV9sWjzV6dmQk9RM=
Subject key identifier:   C4:DC:5F:D8:EF:9D:1F:8F:63:9C:26:78:DF:E2:7D:83:58:91:63:1A
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       124C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D86EB72DCDA11EC97E4BC48C4F9AE02.roa
Signing time:             Fri 24 May 2024 22:32:21 +0000
ROA not before:           Fri 24 May 2024 22:32:21 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     13213
IP address blocks:        115.167.7.0/24 maxlen: 24
                          115.167.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4684 (0x124c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 22:32:21 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66511575-fc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:b8:8d:e8:00:ad:6c:25:fa:7e:49:8e:8b:
                    dc:35:23:e4:80:b0:0a:f2:e1:fa:11:6c:7f:d2:d0:
                    f8:e1:47:24:05:93:51:9b:22:25:d6:45:a5:7b:31:
                    8f:74:6c:73:f7:2f:61:a1:70:67:5b:c5:4a:52:3a:
                    7e:b7:76:12:d7:4a:9a:13:2c:8b:e6:59:c7:98:ea:
                    dd:61:e9:57:ef:c5:7e:8f:71:bd:f9:15:d3:bd:4e:
                    4e:25:55:41:4c:e5:95:c8:3b:1a:77:42:67:f9:a8:
                    fe:ef:78:80:43:bf:93:f6:69:81:1e:41:ae:a1:2e:
                    23:47:6e:60:2b:b1:cd:6e:9f:4a:7a:6c:b5:28:51:
                    5b:e9:b0:e5:36:05:29:17:87:3d:f4:86:41:80:c4:
                    08:04:bf:16:c6:52:39:6f:c6:9d:dd:17:fa:aa:32:
                    5c:82:19:91:44:70:30:46:4b:2d:ba:5c:f1:60:3d:
                    29:7c:51:ff:4c:0b:6a:0c:8f:cc:9e:de:77:d0:09:
                    73:bd:d7:53:4a:ce:55:17:0a:d7:7f:a8:16:62:7c:
                    39:12:2f:0e:79:f0:c8:df:11:f2:1f:dc:46:3a:99:
                    4a:c3:31:a3:b2:82:54:49:c4:59:b7:e0:f4:a0:d1:
                    59:71:96:fe:09:5d:f1:e7:b4:43:91:8c:35:38:01:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DC:5F:D8:EF:9D:1F:8F:63:9C:26:78:DF:E2:7D:83:58:91:63:1A
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D86EB72DCDA11EC97E4BC48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.7.0/24
                  115.167.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:ec:71:0e:d2:b6:6c:f3:00:cc:79:7a:72:42:53:3d:6b:6a:
         03:47:07:d5:b7:9f:7e:26:b1:21:51:7a:da:37:14:66:67:83:
         b6:bb:31:27:74:0b:66:a6:ee:c2:19:f4:7b:3e:78:8c:8f:ae:
         4c:83:13:70:45:86:da:0f:8c:cd:2b:58:9f:35:57:72:e6:92:
         1d:2f:f9:0c:9c:f2:2a:bd:1f:84:c0:cd:5c:26:63:95:08:92:
         83:4b:8c:95:57:1e:6e:1e:c5:46:af:30:93:5a:a2:72:c5:4c:
         f8:8c:1e:30:2a:ca:85:ae:60:1f:63:a7:5d:b1:a6:75:16:40:
         33:a7:05:56:20:65:b6:6b:20:77:3d:a4:e2:c3:e5:ad:14:f3:
         40:14:71:d0:14:91:e0:67:47:64:db:68:ee:b4:1c:63:a7:78:
         8b:b3:d0:ec:50:5b:5b:aa:8d:d8:0a:1f:e1:d1:d0:fd:41:f5:
         af:ae:50:24:d2:e8:a2:18:2e:31:bd:30:7e:f7:17:2d:92:f0:
         98:4e:16:4f:12:cf:20:dc:78:b0:02:2f:f6:18:e6:c5:67:ac:
         e6:e3:ee:9f:73:a2:c0:09:1d:2e:e2:92:cb:c3:e0:85:6a:b5:
         69:76:96:0b:e3:88:5b:ac:46:e0:7d:04:65:25:cb:7d:dd:78:
         ae:4a:3b:8c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICEkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwNTI0MjIzMjIxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjUxMTU3NS1mYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu8G4jegArWwl+n5JjovcNSPkgLAK8uH6EWx/0tD44UckBZNRmyIl1kWlezGP
dGxz9y9hoXBnW8VKUjp+t3YS10qaEyyL5lnHmOrdYelX78V+j3G9+RXTvU5OJVVB
TOWVyDsad0Jn+aj+73iAQ7+T9mmBHkGuoS4jR25gK7HNbp9Kemy1KFFb6bDlNgUp
F4c99IZBgMQIBL8WxlI5b8ad3Rf6qjJcghmRRHAwRkstulzxYD0pfFH/TAtqDI/M
nt530AlzvddTSs5VFwrXf6gWYnw5Ei8OefDI3xHyH9xGOplKwzGjsoJUScRZt+D0
oNFZcZb+CV3x57RDkYw1OAEJmQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMTcX9jv
nR+PY5wmeN/ifYNYkWMaMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNEQ4NkVCNzJE
Q0RBMTFFQzk3RTRCQzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABzpwcDBABzpzMwDQYJKoZIhvcNAQELBQADggEBAArscQ7S
tmzzAMx5enJCUz1ragNHB9W3n34msSFReto3FGZng7a7MSd0C2am7sIZ9Hs+eIyP
rkyDE3BFhtoPjM0rWJ81V3Lmkh0v+Qyc8iq9H4TAzVwmY5UIkoNLjJVXHm4exUav
MJNaonLFTPiMHjAqyoWuYB9jp12xpnUWQDOnBVYgZbZrIHc9pOLD5a0U80AUcdAU
keBnR2TbaO60HGOneIuz0OxQW1uqjdgKH+HR0P1B9a+uUCTS6KIYLjG9MH73Fy2S
8JhOFk8SzyDceLACL/YY5sVnrObj7p9zosAJHS7iksvD4IVqtWl2lgvjiFusRuB9
BGUly33deK5KO4w=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:35:04 2024 by rpki-client on console-ams.rpki-client.org