Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/81F6469479D511EDBBDFC527C4F9AE02.roa
File:                     81F6469479D511EDBBDFC527C4F9AE02.roa (raw, json)
Hash identifier:          7troWD+OtDL49NIshxzXU4YilBTwtPFdQAl/NTb0dzg=
Subject key identifier:   84:76:22:20:E1:E1:7F:97:D3:BC:E5:8D:2D:C0:A0:1C:DF:91:F2:0D
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BC4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/81F6469479D511EDBBDFC527C4F9AE02.roa
Signing time:             Wed 24 May 2023 23:25:36 +0000
ROA not before:           Wed 24 May 2023 23:25:36 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     15083
IP address blocks:        115.167.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 06:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3012 (0xbc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 23:25:36 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646e9cef-935b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:73:70:1f:33:ea:99:c8:f4:90:67:d3:c7:
                    1c:c7:a4:ab:a5:00:f1:22:e4:e6:ab:5a:1b:08:80:
                    01:5b:b0:23:b6:79:43:0f:05:89:73:0a:9f:7a:1d:
                    5c:57:9c:9e:6e:d1:7c:de:08:cc:10:fe:7a:dd:f2:
                    c8:da:55:3d:63:96:58:da:a7:e7:df:e2:ba:70:1b:
                    d9:b9:0c:c7:b7:f8:db:14:4c:2d:cc:ef:7b:f8:d3:
                    95:7a:90:c9:4c:bc:92:dc:91:bd:a9:b3:c0:1d:06:
                    bb:53:ef:b7:5a:7c:9e:70:b2:c9:f6:70:bc:8b:5d:
                    42:c3:21:9d:1c:7b:2e:cb:a4:48:d4:97:f7:3f:82:
                    54:be:d7:6a:92:f8:e0:7e:b7:b9:35:64:73:c0:1e:
                    92:34:cd:6c:a4:f8:ec:7d:15:91:4e:83:86:19:2a:
                    e1:15:7f:8b:0c:ea:30:1d:d4:72:64:d9:ca:73:19:
                    19:25:33:c8:7f:a6:0d:4f:e7:23:6f:97:21:3c:91:
                    55:16:28:11:c7:d1:79:4f:f7:a3:8b:ee:88:8b:1b:
                    ca:b1:81:29:83:f1:77:b7:e4:70:18:99:7c:1e:af:
                    67:34:55:ca:4c:6d:3f:20:32:7c:be:dc:b1:1b:e1:
                    b2:d9:28:b0:48:57:4d:5d:f5:0b:93:46:64:43:3e:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:76:22:20:E1:E1:7F:97:D3:BC:E5:8D:2D:C0:A0:1C:DF:91:F2:0D
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/81F6469479D511EDBBDFC527C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:1e:15:45:7d:f6:43:63:5e:a0:bb:c1:c9:51:f4:67:7d:dd:
         bd:f2:00:7d:0c:71:78:bd:52:cc:c6:ea:68:73:28:9d:cb:f2:
         6b:ff:03:c6:5c:ef:84:f6:d3:08:26:e1:d9:bd:2b:52:eb:ab:
         53:8f:df:4c:b0:e3:4a:7a:1f:51:e5:ec:89:4f:ef:31:35:f9:
         23:a8:87:03:19:c9:4e:ab:6b:64:38:fb:cd:33:da:fb:15:65:
         c8:eb:13:27:8d:be:8b:36:c3:07:ae:5a:1d:00:99:4e:a7:0d:
         21:cc:9b:4f:60:dc:4e:18:0c:ae:78:d0:50:c2:3f:66:d3:c3:
         1a:ce:4b:b5:1e:b3:2d:ee:8f:1d:ed:76:20:9a:72:4c:aa:2d:
         be:6c:fe:6c:1c:8e:ca:bd:39:15:be:f5:cd:37:ff:c0:22:0a:
         92:e9:43:3c:6a:a5:ca:e0:10:80:79:50:42:ca:e3:f3:ca:8c:
         24:22:ec:e1:c6:cd:8e:49:6e:af:18:a5:80:bc:5c:08:59:73:
         d4:2a:0f:9d:9d:41:c5:20:20:7d:91:46:3b:2b:04:52:fa:43:
         40:0f:0d:81:bc:a7:86:88:32:89:39:b1:2f:c2:18:42:53:93:
         3e:8a:6a:3b:06:0c:9f:3e:81:b1:39:47:39:f6:ad:79:3a:b9:
         00:52:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:29:16 2024 by rpki-client on console-ams.rpki-client.org