Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D735227E1B7C11F0BA1AEF38C4F9AE02.roa
File:                     D735227E1B7C11F0BA1AEF38C4F9AE02.roa (raw, json)
Hash identifier:          2Uhn3hE2QUTCV7Y4Kyv2M9AEzQU5vAuv9CD1VNctaYU=
Subject key identifier:   E2:07:BB:20:E3:85:58:F2:6C:5F:47:04:A8:F2:79:CC:C9:B2:85:9D
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2604
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D735227E1B7C11F0BA1AEF38C4F9AE02.roa
Signing time:             Thu 17 Apr 2025 11:21:41 +0000
ROA not before:           Thu 17 Apr 2025 11:21:41 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     213659
IP address blocks:        115.167.6.0/24 maxlen: 24
                          115.167.11.0/24 maxlen: 24
                          115.167.15.0/24 maxlen: 24
                          115.167.16.0/22 maxlen: 24
                          115.167.20.0/22 maxlen: 22
                          115.167.28.0/24 maxlen: 24
                          115.167.29.0/24 maxlen: 24
                          115.167.30.0/24 maxlen: 24
                          115.167.31.0/24 maxlen: 24
                          115.167.48.0/24 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9732 (0x2604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 17 11:21:41 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6800e445-61fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:3b:d2:cb:a5:3f:18:c6:fb:d2:4c:f0:65:
                    49:56:22:6f:40:c6:50:42:a2:d8:9a:7e:e8:ec:2b:
                    43:78:8a:2a:1a:39:5e:d5:47:e8:dc:df:e8:4d:78:
                    aa:e0:7e:b0:bd:2a:a4:b2:65:60:e1:d7:f3:c2:a2:
                    21:e8:9a:67:c1:9b:73:02:9c:53:b0:af:95:26:55:
                    e5:df:29:e3:87:69:67:21:14:24:bc:4a:b6:83:5b:
                    d9:61:a7:b3:da:85:c8:87:c0:d1:ec:12:e6:12:46:
                    90:96:18:3f:60:b6:ec:64:d3:75:09:5c:63:87:2d:
                    b4:38:6e:62:5e:ed:93:42:b1:48:e0:29:5f:fe:4f:
                    62:86:f5:3c:3a:11:87:10:76:91:38:e1:6d:55:76:
                    53:f0:7d:2c:2b:b6:27:2a:a8:18:16:27:5b:34:cb:
                    a1:2c:47:09:16:8e:01:bd:a0:7b:88:b3:fa:40:64:
                    02:88:67:06:e7:f5:a8:cb:2f:0e:83:1d:32:c2:33:
                    6c:33:84:ac:33:f0:4c:a3:56:f4:0a:fc:f4:c9:7f:
                    ca:63:e1:68:42:30:f3:24:b4:c8:ce:9d:91:a8:dd:
                    cb:10:9e:eb:5b:31:fc:91:7a:e8:b4:e8:58:03:fa:
                    83:58:64:62:a8:22:e1:6f:5e:a5:9b:f0:b8:9e:0c:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:07:BB:20:E3:85:58:F2:6C:5F:47:04:A8:F2:79:CC:C9:B2:85:9D
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D735227E1B7C11F0BA1AEF38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.6.0/24
                  115.167.11.0/24
                  115.167.15.0-115.167.23.255
                  115.167.28.0/22
                  115.167.48.0/24
                  115.167.50.0/24
                  115.167.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:8e:6d:83:8d:ae:92:94:6f:11:72:0b:23:27:ab:29:79:2e:
         8a:3a:71:db:63:7b:30:7c:c0:90:66:e6:1f:b2:7b:b2:27:e4:
         e2:b2:a2:0b:a3:ea:fd:59:07:03:1e:59:f3:6d:4d:a4:ff:c0:
         f8:df:8b:e8:c1:af:46:de:af:1e:09:55:af:f1:e8:bb:1c:b1:
         2f:ef:70:3f:68:99:f0:8b:29:8a:2f:89:e1:54:df:60:95:c9:
         de:78:61:1c:d9:38:e2:d7:7e:a9:2d:82:22:88:fb:9b:28:77:
         2c:51:17:bb:e9:7b:0b:4f:e3:57:6e:0b:eb:62:9b:2e:8a:4f:
         f5:f0:0d:19:a2:8a:cc:95:79:b1:40:98:a4:a4:9e:bd:d5:7d:
         90:a6:fc:a9:d7:e3:53:de:b8:01:7f:12:c0:f4:09:c5:05:3c:
         d2:ed:e7:6d:80:5d:c4:98:17:2c:cb:c0:78:21:7c:a6:01:8b:
         30:c0:b0:71:ae:d5:22:e9:3c:7c:d0:51:c4:eb:ba:1e:96:89:
         27:be:88:cb:2c:3f:2c:6d:3a:25:f4:75:6a:74:99:0b:2a:64:
         10:64:6c:1d:d5:69:3d:b7:af:48:2f:47:cc:de:67:2a:35:da:
         c1:c2:7c:00:4a:dc:39:86:0b:6c:5a:d3:a9:50:72:f5:f8:e3:
         0e:05:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:57:39 2025 by rpki-client