Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1FA2E616ECAD11F0AADF4CF7636F56BC.roa
File:                     1FA2E616ECAD11F0AADF4CF7636F56BC.roa (raw, json)
Hash identifier:          6nw0VN813cqJowHD32cX4LTK2unk1PTOSy3VOXuKYFI=
Subject key identifier:   EC:53:33:7D:7E:6A:DB:04:2C:FF:8B:1E:4D:A5:06:88:AA:68:5C:B0
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E1A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1FA2E616ECAD11F0AADF4CF7636F56BC.roa
Signing time:             Thu 04 Jun 2026 20:26:08 +0000
ROA not before:           Thu 04 Jun 2026 20:26:08 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     214366
IP address blocks:        115.167.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 20:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11802 (0x2e1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  4 20:26:08 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21df60-d3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:9a:f1:2d:40:41:f8:eb:05:bf:4e:1f:cb:
                    2e:2e:f6:47:90:85:b4:c4:98:22:f8:c6:ad:d2:dd:
                    5a:ef:3d:c2:25:f0:27:dd:8a:e4:4e:49:2d:dd:14:
                    f0:fb:91:52:83:19:e9:c7:c0:be:6a:2a:74:b6:e5:
                    79:de:a8:be:18:1b:6f:b1:cb:0c:42:1c:d5:c9:29:
                    a3:d9:82:d4:73:0e:c7:7a:29:95:6f:29:57:16:25:
                    8a:23:56:2e:f1:15:f7:45:23:42:59:a2:03:8e:2b:
                    bd:91:93:db:55:6f:2d:06:d1:e7:e4:d3:ea:a2:53:
                    44:dd:05:63:15:61:8b:1f:75:66:f6:f5:6a:df:4f:
                    09:d6:56:42:c1:f0:f2:ff:de:1b:51:e1:a0:dd:d9:
                    7a:6a:26:85:14:46:44:d6:34:7f:76:f7:49:a9:c3:
                    7c:c5:94:1c:4d:de:b1:79:99:d0:2c:46:3b:13:d7:
                    79:6e:3d:b6:a5:41:21:4d:ac:7a:dc:e7:70:9a:a3:
                    c9:58:b4:2b:e3:52:62:d4:a5:39:a5:a7:cb:5d:50:
                    ed:d5:e4:cd:2d:22:7b:05:db:cd:00:3d:64:e4:60:
                    c0:70:20:43:26:17:0e:b7:81:c2:ee:53:7a:35:b0:
                    3f:9a:3e:38:ac:1b:a9:29:eb:76:a1:00:12:18:1e:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:53:33:7D:7E:6A:DB:04:2C:FF:8B:1E:4D:A5:06:88:AA:68:5C:B0
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1FA2E616ECAD11F0AADF4CF7636F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:50:cb:ec:96:f0:43:e7:1e:d3:40:ce:16:03:8d:6b:3f:1e:
         12:0a:34:1d:78:20:1a:c1:65:38:54:59:3c:53:85:5f:55:34:
         ff:24:5f:3e:dc:30:50:25:ab:c6:ee:4a:40:32:78:88:35:d6:
         04:d5:d5:58:7b:aa:25:90:f0:02:3b:08:34:50:2a:02:33:91:
         be:74:66:50:b9:fe:c5:85:5f:3d:aa:a0:31:31:72:a3:63:5b:
         bd:26:4e:da:90:2c:c2:38:b7:11:80:70:45:24:c6:d0:4f:f4:
         75:cc:6a:0b:4e:7b:78:a4:14:f5:ef:e5:3c:ba:21:20:e3:5a:
         ec:36:4f:1d:72:60:24:34:e1:97:a1:5c:f7:d2:da:fe:76:ea:
         ef:e9:d7:79:31:84:4c:fd:29:86:43:74:0a:8a:1a:35:f5:7a:
         20:f9:9a:23:17:d7:d1:4e:de:31:8f:54:8f:1e:cb:bc:59:af:
         d3:34:bb:23:7d:d1:25:0d:10:66:48:9d:b4:4b:c6:16:d0:dc:
         05:81:87:94:0e:45:3b:ce:f7:ef:27:a9:cb:d5:ac:01:92:4b:
         71:8f:b2:0c:c1:ac:c1:7e:f2:30:16:1e:8d:44:2a:59:0e:65:
         50:73:8a:79:92:2d:33:dd:e0:be:61:8f:60:45:b3:04:c3:18:
         16:57:26:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 20:05:30 2026 by rpki-client