Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/93374B5A296011F0AE965421C4F9AE02.roa
File:                     93374B5A296011F0AE965421C4F9AE02.roa (raw, json)
Hash identifier:          CGOMKfdi4A2m40WQ/01u68SqPu86rSaqtrMJiOoNpUQ=
Subject key identifier:   57:5C:2F:EF:B2:A7:CE:9D:C0:2F:CE:1E:76:3B:A5:24:7C:AA:C0:4C
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       269F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/93374B5A296011F0AE965421C4F9AE02.roa
Signing time:             Mon 05 May 2025 03:25:21 +0000
ROA not before:           Mon 05 May 2025 03:25:21 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     215224
IP address blocks:        115.167.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 20:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9887 (0x269f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May  5 03:25:21 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=68182fa1-b29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:54:7d:d1:09:6c:c2:77:7c:04:e0:84:59:
                    fa:38:89:db:a0:5e:4b:f9:1a:a4:57:1e:94:4f:6f:
                    74:df:c2:55:76:3a:be:bd:84:5a:ee:2d:2d:b5:0a:
                    6f:51:ab:04:a9:cc:1b:fd:e5:18:eb:ed:05:53:c9:
                    3f:df:f2:05:c1:f7:ef:20:73:b4:06:c6:dc:49:5f:
                    c8:7b:24:1d:e9:37:45:54:ca:cb:a6:b1:96:50:89:
                    b4:25:20:fa:77:bd:3e:a1:c4:d9:f9:54:c2:0e:c7:
                    c2:f3:c5:12:74:54:0c:5a:a5:25:99:6f:d9:c8:90:
                    36:90:20:47:a3:6c:55:90:b8:5c:d8:36:93:53:a4:
                    e1:32:06:5e:75:78:c8:08:2d:a2:03:9a:3f:a8:0d:
                    ab:db:9e:5b:22:d9:5b:1b:8f:7b:5d:de:42:72:49:
                    9a:ce:c2:f8:e9:66:32:64:cf:f1:29:7b:02:2a:93:
                    32:25:e4:17:ac:85:06:9c:2e:23:cf:21:66:4a:69:
                    aa:f0:70:b1:31:a0:4c:76:8f:32:4c:8d:bd:ff:55:
                    64:21:ff:06:98:43:ce:23:31:2f:0c:91:6c:4e:22:
                    e8:c9:55:5c:f3:84:65:ea:cf:74:d1:76:7a:d1:bd:
                    75:e3:5c:4f:41:da:fc:e9:00:42:8c:e2:f5:99:f1:
                    fe:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5C:2F:EF:B2:A7:CE:9D:C0:2F:CE:1E:76:3B:A5:24:7C:AA:C0:4C
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/93374B5A296011F0AE965421C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:8e:53:ce:b1:70:2d:5d:4a:ff:08:dd:c2:9a:2b:41:aa:
         d6:8a:f6:2d:e6:6f:b6:68:e3:d2:d4:a6:f4:1c:06:11:59:40:
         f4:1c:fd:8c:28:2f:9b:79:8d:b8:61:73:00:d1:8e:4d:c1:44:
         c2:75:09:a5:4b:18:4f:ad:b7:61:6a:69:75:aa:31:a1:2d:59:
         68:3d:5e:80:7c:84:6a:30:18:e1:f8:fb:81:86:58:a3:a8:a2:
         30:44:42:a1:a4:9c:c7:05:79:5b:e1:c9:f0:94:d6:45:33:71:
         01:c5:6e:dd:79:2a:53:3c:af:b0:6c:0a:46:aa:26:a3:b7:a6:
         5e:13:dd:74:16:4b:46:1e:7f:05:fe:c7:ff:5c:92:6f:c9:6e:
         e4:1c:11:33:c6:d1:6a:91:b0:88:f3:ac:fa:8d:21:03:9c:c8:
         34:a2:92:81:da:3d:75:4e:10:b4:70:2f:1f:e1:10:c1:d6:76:
         c3:f5:00:f7:12:ee:ed:a1:23:85:db:6d:8f:c1:2a:ed:10:b5:
         70:4a:b1:81:9a:2d:db:c9:ed:d2:ac:5a:e7:f8:ef:5c:8f:26:
         b4:ab:b8:aa:88:08:ba:d7:af:ff:16:c5:73:70:7e:2b:94:d1:
         fa:db:bf:bf:56:0e:8a:8a:ef:70:8d:1f:8d:17:58:f0:5e:5d:
         8f:f7:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:53:20 2025 by rpki-client