Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4995362191A11F0B13E9A6EC4F9AE02.roa
File:                     F4995362191A11F0B13E9A6EC4F9AE02.roa (raw, json)
Hash identifier:          XYr4MYUZAXHhixsGIXq6L6u0Np8m172ODOn3PpY9kCI=
Subject key identifier:   74:1E:69:8F:58:7E:AE:7D:83:06:E7:AA:16:B0:BD:49:80:F5:93:7B
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       25D6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4995362191A11F0B13E9A6EC4F9AE02.roa
Signing time:             Tue 15 Apr 2025 10:06:57 +0000
ROA not before:           Tue 15 Apr 2025 10:06:56 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     60721
IP address blocks:        115.167.9.0/24 maxlen: 24
                          115.167.62.0/24 maxlen: 24
                          115.167.63.0/24 maxlen: 24
                          115.167.76.0/24 maxlen: 24
                          175.110.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9686 (0x25d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 15 10:06:56 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67fe2fc0-92d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:37:ef:1d:51:89:79:c6:b3:81:d3:66:ca:fe:
                    63:ac:8e:33:76:87:38:bb:2d:32:22:b5:46:45:a6:
                    01:dc:54:40:16:f5:0b:8b:51:62:a3:e5:f4:3f:2a:
                    33:ac:2b:c3:59:bc:9a:27:7a:6b:25:13:97:29:f4:
                    ed:90:2f:17:62:fe:64:fc:dc:0e:f7:1a:57:bc:00:
                    8a:75:a1:98:9a:e5:2b:3d:2d:96:dc:26:b4:e0:29:
                    30:9a:fc:ea:a2:0b:b9:b8:74:89:c4:9c:9c:a2:6c:
                    47:b6:80:39:c8:fe:78:cb:83:24:6e:8f:59:e2:2d:
                    64:bc:49:c3:9a:60:d2:03:90:ad:54:bd:df:ca:99:
                    32:52:58:02:1c:02:99:fd:e4:cb:b2:09:1c:60:6a:
                    d6:da:02:f2:5e:9b:4c:fd:b5:ef:7d:12:9d:1a:a3:
                    e2:5b:11:dd:01:be:11:86:06:44:c2:ef:d7:94:a6:
                    a1:86:8d:15:69:ce:43:ab:1c:78:7f:8f:bb:23:32:
                    4d:61:3a:25:5e:58:35:00:46:3a:6e:2b:b7:4f:db:
                    3f:d7:a1:6b:07:4b:76:b6:4e:e5:4e:8f:25:11:8c:
                    f0:33:ef:f5:c5:a4:3e:7c:fd:c7:c3:a6:d1:b4:4e:
                    5c:2a:b8:3f:4b:7f:d6:19:b3:cd:1f:11:d7:dc:be:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:69:8F:58:7E:AE:7D:83:06:E7:AA:16:B0:BD:49:80:F5:93:7B
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4995362191A11F0B13E9A6EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.9.0/24
                  115.167.62.0/23
                  115.167.76.0/24
                  175.110.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:66:df:43:74:dd:8f:81:04:4d:d0:61:a0:7c:13:9f:87:f6:
         bd:f2:8a:d7:d8:af:f8:66:71:ff:2d:88:01:23:b3:94:6e:2a:
         49:5d:47:6a:30:32:cc:4d:eb:2c:de:cf:eb:5f:79:47:2d:47:
         6e:ad:0a:3d:20:18:f3:9f:41:b5:ea:1e:68:81:fb:41:37:60:
         f6:ca:59:73:9f:fe:cb:03:5f:3a:99:3b:85:eb:c5:ee:2f:71:
         0c:d7:9a:9d:95:67:5f:b0:75:d8:4d:35:d8:56:e1:6e:db:d2:
         f8:e1:f3:f4:53:61:c8:87:4f:8c:e5:3b:7f:d0:bb:5e:ae:92:
         58:23:ec:84:ec:c2:78:9d:65:77:e0:66:e7:b1:c5:7e:fb:a6:
         1c:fa:30:5e:9d:ba:65:a2:44:0f:23:54:14:69:91:2e:16:3a:
         31:d4:29:41:fd:ba:da:eb:a0:9f:07:f3:f1:c4:92:2a:44:e0:
         1d:51:7c:4b:74:8e:7b:a4:11:28:3b:4e:71:f6:05:11:a5:52:
         6e:43:56:4e:86:c1:f6:c5:d9:95:05:e4:7e:7e:c0:50:5e:89:
         11:dc:07:52:60:30:f8:c4:cc:eb:5e:66:c0:3b:81:11:72:81:
         24:9a:e2:d1:2a:83:c5:e2:09:97:ed:1b:c7:6f:a5:d1:9e:d4:
         48:c3:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:33 2025 by rpki-client on console.sobornost.net