Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/350F534C073B11F1A8181FD5343D8C67.roa
File:                     350F534C073B11F1A8181FD5343D8C67.roa (raw, json)
Hash identifier:          gUyTnUlOjCjc8xduA4JE8EJtskfPLLQ0ooaLJ4ZqdXA=
Subject key identifier:   9C:F7:26:0A:63:CA:15:22:8F:44:F5:44:EB:14:17:F1:CA:B3:25:BE
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E22
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/350F534C073B11F1A8181FD5343D8C67.roa
Signing time:             Thu 04 Jun 2026 20:26:23 +0000
ROA not before:           Thu 04 Jun 2026 20:26:23 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     400536
IP address blocks:        115.167.60.0/24 maxlen: 24
                          115.167.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 20:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11810 (0x2e22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  4 20:26:23 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21df6f-c094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:14:60:98:0e:13:4e:81:f0:33:4d:3a:41:
                    a2:b0:ab:45:61:0d:57:46:f4:f8:ed:e4:54:c9:41:
                    cb:c5:01:1c:6f:29:bf:04:87:2c:ce:94:3c:73:f4:
                    d2:43:10:d5:3e:61:4e:9d:a2:92:5d:7a:43:62:ae:
                    de:aa:10:60:37:66:ae:35:11:b5:fa:c3:70:42:74:
                    f5:36:af:d4:d8:70:0f:7e:ff:b0:6d:a2:19:2f:76:
                    b2:a8:e7:12:5d:2c:d2:72:95:17:4b:99:91:b9:69:
                    66:da:2b:3c:8d:aa:a5:a6:0a:cf:c6:1e:fb:b3:89:
                    8a:24:ca:ad:b0:ec:8b:af:bb:78:60:5f:58:44:31:
                    d5:b2:09:30:86:b0:63:16:06:76:3a:d6:91:8a:2a:
                    ee:cc:db:32:b8:64:0a:7e:83:88:3a:85:a2:38:85:
                    d3:8b:4c:04:ba:d3:69:54:e6:5f:1b:5d:74:91:d9:
                    1d:3d:30:01:b0:f9:41:07:49:15:b5:ff:bb:02:dc:
                    b1:d4:79:4b:c7:5b:a2:70:09:53:af:28:15:27:b1:
                    10:6a:e2:68:1f:d5:9c:d5:34:25:d5:fe:45:43:4a:
                    bc:f0:16:cf:e2:74:14:06:fe:8c:60:ab:a8:09:37:
                    6b:ed:13:f1:b5:c9:25:c8:b8:6f:5f:4e:51:cc:ff:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F7:26:0A:63:CA:15:22:8F:44:F5:44:EB:14:17:F1:CA:B3:25:BE
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/350F534C073B11F1A8181FD5343D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.60.0/24
                  115.167.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:7b:ca:fe:12:cd:3b:93:d8:ab:7e:9a:78:a4:a8:3a:91:97:
         66:94:38:4e:b9:57:e0:79:cd:19:9b:c9:5a:4e:49:ec:71:bd:
         a1:a7:05:39:c1:a2:7b:97:03:7e:47:3a:04:49:6f:02:ff:2a:
         fa:6c:bd:88:d0:00:d9:0b:98:15:bb:5a:11:33:1a:c8:15:f4:
         d3:49:18:2d:93:25:8d:73:68:6a:e5:bb:4c:61:45:4d:51:90:
         dd:11:27:51:5c:d3:0e:1d:01:80:d8:cb:09:82:36:d6:10:64:
         ab:74:26:d5:f0:2a:39:41:cb:f9:26:5e:ab:55:a3:26:7f:85:
         ea:33:ef:6f:65:44:66:d0:6b:1e:cf:ee:b0:45:df:65:84:98:
         20:35:a6:7e:0f:5d:76:aa:40:a4:18:b2:a6:9d:d3:f6:21:dc:
         c1:50:7e:e8:99:55:f1:5a:a6:c7:1f:aa:8b:75:18:d1:04:79:
         d5:a6:74:1d:62:dc:ae:ee:88:a7:21:31:de:b7:f3:36:79:84:
         18:29:bd:96:61:e7:5c:0b:d2:e8:53:7e:61:ae:0f:99:b8:6f:
         c1:0c:01:ef:f9:33:c0:4a:bd:13:42:1e:0c:0a:21:73:67:a9:
         bb:b5:be:a6:8a:1d:fa:0a:ec:85:55:be:84:b6:90:84:3f:1a:
         f9:5c:51:de
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICLiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjYwNjA0MjAyNjIzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxZGY2Zi1jMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRAUYJgOE06B8DNNOkGisKtFYQ1XRvT47eRUyUHLxQEcbym/BIcszpQ8c/TS
QxDVPmFOnaKSXXpDYq7eqhBgN2auNRG1+sNwQnT1Nq/U2HAPfv+wbaIZL3ayqOcS
XSzScpUXS5mRuWlm2is8jaqlpgrPxh77s4mKJMqtsOyLr7t4YF9YRDHVsgkwhrBj
FgZ2OtaRiiruzNsyuGQKfoOIOoWiOIXTi0wEutNpVOZfG110kdkdPTABsPlBB0kV
tf+7Atyx1HlLx1uicAlTrygVJ7EQauJoH9Wc1TQl1f5FQ0q88BbP4nQUBv6MYKuo
CTdr7RPxtcklyLhvX05RzP/WjwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJz3Jgpj
yhUij0T1ROsUF/HKsyW+MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMzUwRjUzNEMw
NzNCMTFGMUE4MTgxRkQ1MzQzRDhDNjcucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAc6c8AwQAc6dmMA0GCSqGSIb3DQEBCwUAA4IBAQAye8r+Es07k9ir
fpp4pKg6kZdmlDhOuVfgec0Zm8laTknscb2hpwU5waJ7lwN+RzoESW8C/yr6bL2I
0ADZC5gVu1oRMxrIFfTTSRgtkyWNc2hq5btMYUVNUZDdESdRXNMOHQGA2MsJgjbW
EGSrdCbV8Co5Qcv5Jl6rVaMmf4XqM+9vZURm0Gsez+6wRd9lhJggNaZ+D112qkCk
GLKmndP2IdzBUH7omVXxWqbHH6qLdRjRBHnVpnQdYtyu7oinITHet/M2eYQYKb2W
YedcC9LoU35hrg+ZuG/BDAHv+TPASr0TQh4MCiFzZ6m7tb6mih36CuyFVb6EtpCE
Pxr5XFHe
-----END CERTIFICATE-----
Generated at Fri Jun 5 20:06:16 2026 by rpki-client