Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2510B4E66D1B11F09E59264EC4F9AE02.roa
File:                     2510B4E66D1B11F09E59264EC4F9AE02.roa (raw, json)
Hash identifier:          RoCk/MZqjjTg5/+ic4ViCw8uFizpu+Wb2vxWxDxh6eU=
Subject key identifier:   A0:75:7E:25:16:94:D3:D1:DA:01:24:EF:BA:5A:DE:CA:6D:EF:84:50
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E15
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2510B4E66D1B11F09E59264EC4F9AE02.roa
Signing time:             Thu 04 Jun 2026 20:25:59 +0000
ROA not before:           Thu 04 Jun 2026 20:25:59 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     20115
IP address blocks:        43.254.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 20:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11797 (0x2e15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  4 20:25:59 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21df57-34e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:35:f4:f1:99:7b:6e:6a:e4:c0:b5:8c:b8:
                    ff:d2:76:4d:77:40:11:4c:88:92:8c:fb:c0:03:00:
                    8c:7b:b9:7b:67:4e:da:f0:7b:4f:71:5b:64:b7:16:
                    6c:f4:98:45:f0:a2:12:db:28:f7:2e:90:87:75:3e:
                    a2:91:c1:21:85:37:59:b0:ee:99:54:34:11:59:e8:
                    bb:e8:04:09:25:6e:41:25:12:10:f6:6d:a1:2a:5b:
                    ea:73:1c:8b:13:5e:1a:05:9e:8c:eb:6d:41:50:41:
                    fc:84:b6:3d:21:43:61:80:b9:e9:3d:d2:5d:ec:37:
                    38:4a:7c:ef:d5:1c:95:67:c6:88:66:df:ca:89:2c:
                    41:bb:4d:f5:7d:a8:06:79:3c:cc:18:78:d5:cf:c8:
                    5b:b7:e7:a9:b6:b1:73:a0:65:a7:6d:a0:4b:9a:10:
                    f9:54:04:d8:9b:15:66:54:40:c3:85:be:c0:c0:36:
                    1b:f3:8f:8b:0e:08:c0:11:c1:66:8b:14:b2:82:51:
                    2c:c8:8c:9f:d2:62:36:75:f0:d2:1b:99:e8:ab:70:
                    92:33:eb:da:81:cd:fc:c5:1f:66:7b:29:a2:b4:02:
                    c0:5e:d0:ce:9d:83:b7:35:a6:97:af:69:5b:d1:1e:
                    b2:66:c5:dc:73:fb:80:15:6d:31:c4:c2:f7:cb:37:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:75:7E:25:16:94:D3:D1:DA:01:24:EF:BA:5A:DE:CA:6D:EF:84:50
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2510B4E66D1B11F09E59264EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:16:d0:7e:5d:0b:47:6c:5b:ea:57:63:14:ff:e3:15:0d:a1:
         5e:89:d0:2c:c8:31:81:ce:fa:cc:99:67:d9:d7:b9:ec:0a:89:
         fe:37:a8:b4:c5:26:0a:b7:01:29:b3:03:bf:5c:d8:fd:cd:38:
         ca:2f:2a:a1:34:af:31:dc:f8:b0:43:24:fa:c1:15:6b:ca:7d:
         b7:57:7a:8c:39:90:c2:a6:70:ce:fd:06:ce:7f:1d:d9:71:4d:
         d4:fa:bc:a7:70:42:9f:e8:73:de:02:1b:f4:ab:b1:bc:a6:87:
         2c:9c:18:8b:99:cd:44:37:03:d3:35:32:4d:ed:ea:33:e7:6c:
         73:33:85:f8:dc:9f:76:20:48:b4:f8:7d:af:5a:68:cb:1d:35:
         f1:a3:ec:f3:55:47:27:a8:79:8b:a0:8e:32:95:12:c4:4a:b6:
         46:29:d7:1c:f5:a6:a8:00:7e:ec:a4:ee:ae:00:2d:d3:a1:10:
         47:d5:94:e4:21:4a:29:8c:f3:e6:6f:49:62:f6:fe:cd:f5:8c:
         cd:9a:ee:a2:11:b6:c1:7a:67:c0:0d:4f:5c:dc:27:13:5a:41:
         26:8a:10:9d:fd:07:dc:d3:e0:9f:9b:71:c0:1d:4c:7c:4b:ca:
         41:6e:d0:2b:fe:d9:2b:91:00:1c:c9:4f:8e:1c:ef:db:d1:9b:
         a5:4b:aa:8b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjYwNjA0MjAyNTU5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxZGY1Ny0zNGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsoY19PGZe25q5MC1jLj/0nZNd0ARTIiSjPvAAwCMe7l7Z07a8HtPcVtktxZs
9JhF8KIS2yj3LpCHdT6ikcEhhTdZsO6ZVDQRWei76AQJJW5BJRIQ9m2hKlvqcxyL
E14aBZ6M621BUEH8hLY9IUNhgLnpPdJd7Dc4Snzv1RyVZ8aIZt/KiSxBu031fagG
eTzMGHjVz8hbt+eptrFzoGWnbaBLmhD5VATYmxVmVEDDhb7AwDYb84+LDgjAEcFm
ixSyglEsyIyf0mI2dfDSG5noq3CSM+vagc38xR9meymitALAXtDOnYO3NaaXr2lb
0R6yZsXcc/uAFW0xxML3yzfz0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKB1fiUW
lNPR2gEk77pa3spt74RQMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjUxMEI0RTY2
RDFCMTFGMDlFNTkyNjRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCK/4MMA0GCSqGSIb3DQEBCwUAA4IBAQARFtB+XQtHbFvqV2MU/+MV
DaFeidAsyDGBzvrMmWfZ17nsCon+N6i0xSYKtwEpswO/XNj9zTjKLyqhNK8x3Piw
QyT6wRVryn23V3qMOZDCpnDO/QbOfx3ZcU3U+ryncEKf6HPeAhv0q7G8pocsnBiL
mc1ENwPTNTJN7eoz52xzM4X43J92IEi0+H2vWmjLHTXxo+zzVUcnqHmLoI4ylRLE
SrZGKdcc9aaoAH7spO6uAC3ToRBH1ZTkIUopjPPmb0li9v7N9YzNmu6iEbbBemfA
DU9c3CcTWkEmihCd/Qfc0+Cfm3HAHUx8S8pBbtAr/tkrkQAcyU+OHO/b0ZulS6qL
-----END CERTIFICATE-----
Generated at Fri Jun 5 17:29:51 2026 by rpki-client