Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0C7469F2138711F0A5313668C4F9AE02.roa
File:                     0C7469F2138711F0A5313668C4F9AE02.roa (raw, json)
Hash identifier:          RTHQLlRF2BVxoqnYYlkU74TsKkLv0tTwn7koLK2/kuk=
Subject key identifier:   FD:C2:20:E5:60:E9:C5:EE:B8:EE:DD:F0:55:C3:1F:F7:65:08:7A:BD
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2751
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0C7469F2138711F0A5313668C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:07:05 +0000
ROA not before:           Mon 02 Jun 2025 21:07:05 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10753
IP address blocks:        115.167.1.0/24 maxlen: 24
                          115.167.24.0/24 maxlen: 24
                          115.167.25.0/24 maxlen: 24
                          115.167.26.0/24 maxlen: 24
                          115.167.27.0/24 maxlen: 24
                          115.167.100.0/24 maxlen: 24
                          115.167.104.0/22 maxlen: 24
                          175.110.72.0/22 maxlen: 24
                          175.110.84.0/22 maxlen: 24
                          175.110.96.0/24 maxlen: 24
                          180.178.151.0/24 maxlen: 24
                          223.29.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10065 (0x2751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:05 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e1279-8df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:a7:15:21:61:0e:46:cc:23:70:99:e3:d7:
                    42:e2:c3:42:07:c6:cc:30:c5:58:5e:de:df:89:7b:
                    75:5c:45:8a:8f:df:ba:f4:a2:9f:07:bf:5d:5f:5c:
                    62:98:8c:93:db:f2:d8:5e:57:26:9a:93:a8:6b:8e:
                    1e:de:95:3d:dc:a4:34:d9:83:b8:0d:55:e9:22:2b:
                    3f:83:0a:e3:37:78:57:8e:6b:2d:8e:ac:00:c1:31:
                    c5:35:da:aa:cb:0f:84:65:92:39:7d:62:15:ef:13:
                    b2:83:a6:aa:61:c3:d8:d3:44:17:19:7a:e2:fd:33:
                    62:f7:f4:c4:e5:51:f9:84:98:9f:c4:3a:0e:2f:f2:
                    00:0b:be:56:94:1e:f8:7c:b2:28:1c:71:2b:27:78:
                    62:ec:d3:41:10:32:fc:15:9f:86:c4:44:96:64:b5:
                    1b:1a:48:e4:ff:cd:5c:a3:a1:49:8a:93:9d:53:3d:
                    8c:4a:f6:60:15:f7:0e:0f:a0:2c:b3:af:dd:7e:ff:
                    6f:47:6a:ab:cf:38:b4:f5:20:c0:d9:5e:4f:3c:d4:
                    f8:2a:0b:c5:d0:45:e4:7e:4e:de:e6:1d:f6:94:4e:
                    3f:e0:42:d2:6f:ed:79:e9:d6:6e:4d:81:ab:00:ea:
                    91:0a:94:b6:94:c3:27:4a:71:12:78:8d:39:37:1c:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C2:20:E5:60:E9:C5:EE:B8:EE:DD:F0:55:C3:1F:F7:65:08:7A:BD
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0C7469F2138711F0A5313668C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.1.0/24
                  115.167.24.0/22
                  115.167.100.0/24
                  115.167.104.0/22
                  175.110.72.0/22
                  175.110.84.0/22
                  175.110.96.0/24
                  180.178.151.0/24
                  223.29.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:ca:4f:49:64:22:de:c9:05:e8:cc:a7:49:1a:e6:3f:5d:
         4b:52:07:c0:be:2b:93:bb:43:6f:15:fa:93:cc:65:74:78:a1:
         8b:a1:b5:7f:4a:1c:6d:c3:71:1d:f2:f5:0c:ee:a9:7a:4b:a6:
         7a:b8:91:46:10:93:98:f0:92:3e:cd:59:2e:58:a6:16:7a:d0:
         fc:e9:e2:69:8c:83:b9:8f:6b:f4:d2:82:9f:3a:12:97:ec:fb:
         44:63:29:e7:1d:44:13:21:d9:b4:40:67:ed:b9:e7:f4:33:a5:
         c0:89:1a:cd:6e:09:d8:73:e1:7f:b0:bd:41:bf:c1:58:4d:3d:
         d0:a9:ec:26:e6:89:71:47:24:7e:df:b1:40:5b:cb:06:fa:60:
         99:db:31:95:00:11:30:f8:6e:77:f8:d6:cc:a6:6c:a3:20:60:
         3c:d5:3d:53:42:0c:c5:5e:79:ce:d8:46:b0:16:38:c1:0d:9b:
         36:67:87:17:fd:aa:cf:e5:83:c4:64:16:9b:b2:93:9a:31:5b:
         d5:9d:1c:26:e0:7e:57:01:e4:36:d7:4e:2e:98:4a:98:5f:ee:
         c3:b3:84:a6:80:76:9d:ab:6b:85:24:32:8e:38:db:ee:96:ea:
         fb:c3:ad:08:a6:b1:6c:ab:8f:66:8c:f1:90:fc:98:89:0a:64:
         09:22:c6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:11:39 2025 by rpki-client