Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6EEA9BFE62F311F0BD38A93EC4F9AE02.roa
File:                     6EEA9BFE62F311F0BD38A93EC4F9AE02.roa (raw, json)
Hash identifier:          lrMH9fQWg5ijfJ/9bX+5xYvUlPkjCb5Edkb/nbjSbqk=
Subject key identifier:   54:12:B0:1D:0E:9A:DD:68:11:28:DC:41:AE:BE:42:CC:CC:2F:59:F4
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       285F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6EEA9BFE62F311F0BD38A93EC4F9AE02.roa
Signing time:             Thu 17 Jul 2025 09:50:13 +0000
ROA not before:           Thu 17 Jul 2025 09:50:13 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     43260
IP address blocks:        115.167.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 20:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10335 (0x285f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul 17 09:50:13 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6878c754-3001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:0f:7b:cb:a6:7d:e7:5c:d4:de:d2:f8:3a:
                    a4:35:17:ae:bb:98:0a:bb:5e:6f:90:7e:fc:3c:b1:
                    9b:4e:d0:ca:2f:ac:ef:ab:83:82:b2:b6:ac:a4:bb:
                    e8:e0:5e:6d:7d:b5:32:18:30:1d:a8:5f:a2:b3:5a:
                    16:a1:97:64:50:54:cc:16:e2:14:c0:98:a2:ab:0f:
                    bb:63:2a:0c:de:d4:2f:ce:8f:ef:c9:6a:08:1f:46:
                    7d:e5:6e:30:1a:21:1a:2e:a7:8b:47:29:27:a9:ee:
                    c6:4f:b4:e8:67:0c:7b:c6:bf:eb:49:5d:79:8e:84:
                    fc:bf:c2:4b:6a:ba:ab:ea:3a:74:53:cf:f5:88:09:
                    47:03:b0:4f:37:7e:c7:8b:7f:53:77:31:93:48:84:
                    da:bd:21:9e:10:20:51:f8:f2:c1:7f:42:a1:91:49:
                    3e:93:8b:bd:03:0c:5c:f5:73:8a:2e:cd:97:3c:f7:
                    d7:11:f9:e9:ae:8c:1d:e6:7f:0f:7a:8e:b7:bd:6b:
                    5b:d5:c3:3e:c3:91:3c:ab:45:4b:ff:31:36:94:ef:
                    1e:86:af:a3:4c:c6:f1:46:d0:34:74:d8:91:f9:4c:
                    b6:ad:57:5e:e1:14:a4:b6:5d:01:fd:1b:41:06:a0:
                    3e:3b:19:2c:c2:2c:ce:8a:f5:2c:9c:7f:6a:6b:62:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:12:B0:1D:0E:9A:DD:68:11:28:DC:41:AE:BE:42:CC:CC:2F:59:F4
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6EEA9BFE62F311F0BD38A93EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:73:29:b8:35:18:34:79:f4:16:fe:5b:c3:cf:29:9c:b2:b2:
         67:8d:38:c0:f5:96:c5:4e:c8:5d:16:e8:2a:3e:8e:b1:79:45:
         f2:f2:83:37:61:30:49:e1:40:55:b9:a6:d7:77:b1:d2:0e:0c:
         21:44:09:d6:ee:b5:29:4c:fc:b1:65:01:17:b5:16:d1:96:1a:
         c3:b5:03:23:18:cd:6e:d4:5c:f2:21:a5:73:41:ec:5b:8f:19:
         c4:5e:ef:0f:7f:88:59:a3:53:7a:26:e0:ef:90:b8:3b:a2:b3:
         14:d2:a8:5e:aa:86:7c:a8:16:68:b5:c7:f4:37:08:d8:15:a8:
         c9:f0:fe:1e:30:b7:19:da:21:81:c9:d2:56:fb:25:c1:54:54:
         eb:a5:30:77:a1:e7:29:3a:f3:90:41:03:14:f9:85:3c:df:03:
         67:c0:a8:30:4b:51:a9:9b:ad:bf:e4:f8:d2:40:2e:45:a1:59:
         fa:cc:57:84:6c:b7:cc:4d:b9:3d:b9:d9:5d:2d:a6:fa:cd:b6:
         37:43:40:91:94:5e:9d:8a:81:f6:b0:af:14:21:84:93:fc:23:
         aa:78:88:af:cd:12:0b:8a:6b:b8:45:46:bd:51:01:e3:10:81:
         1a:91:43:7e:6f:78:d2:5b:fd:3d:be:d6:15:de:69:c2:87:81:
         89:94:4e:ed
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwNzE3MDk1MDEzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODc4Yzc1NC0zMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwsPe8umfedc1N7S+DqkNReuu5gKu15vkH78PLGbTtDKL6zvq4OCsraspLvo
4F5tfbUyGDAdqF+is1oWoZdkUFTMFuIUwJiiqw+7YyoM3tQvzo/vyWoIH0Z95W4w
GiEaLqeLRyknqe7GT7ToZwx7xr/rSV15joT8v8JLarqr6jp0U8/1iAlHA7BPN37H
i39TdzGTSITavSGeECBR+PLBf0KhkUk+k4u9Awxc9XOKLs2XPPfXEfnprowd5n8P
eo63vWtb1cM+w5E8q0VL/zE2lO8ehq+jTMbxRtA0dNiR+Uy2rVde4RSktl0B/RtB
BqA+OxkswizOivUsnH9qa2LhGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFQSsB0O
mt1oESjcQa6+QszML1n0MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNkVFQTlCRkU2
MkYzMTFGMEJEMzhBOTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABzp00wDQYJKoZIhvcNAQELBQADggEBAEJzKbg1GDR59Bb+
W8PPKZyysmeNOMD1lsVOyF0W6Co+jrF5RfLygzdhMEnhQFW5ptd3sdIODCFECdbu
tSlM/LFlARe1FtGWGsO1AyMYzW7UXPIhpXNB7FuPGcRe7w9/iFmjU3om4O+QuDui
sxTSqF6qhnyoFmi1x/Q3CNgVqMnw/h4wtxnaIYHJ0lb7JcFUVOulMHeh5yk685BB
AxT5hTzfA2fAqDBLUambrb/k+NJALkWhWfrMV4Rst8xNuT252V0tpvrNtjdDQJGU
Xp2KgfawrxQhhJP8I6p4iK/NEguKa7hFRr1RAeMQgRqRQ35veNJb/T2+1hXeacKH
gYmUTu0=
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:48:02 2025 by rpki-client