Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/715A7EC836C911F0901BC853C4F9AE02.roa
File:                     715A7EC836C911F0901BC853C4F9AE02.roa (raw, json)
Hash identifier:          Rgtep1bdR/C/EIbA0VetlYR+KD5XpJSRAC9paUhUjMg=
Subject key identifier:   FB:06:2A:E1:61:82:DC:1D:72:35:4D:AF:E7:D1:A5:5F:6B:01:A6:2E
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2764
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/715A7EC836C911F0901BC853C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:07:23 +0000
ROA not before:           Mon 02 Jun 2025 21:07:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     396073
IP address blocks:        115.167.122.0/24 maxlen: 24
                          223.29.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10084 (0x2764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e128a-b2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:92:63:66:dd:44:8d:d8:95:74:6f:d7:73:
                    64:de:90:7d:92:ce:c1:53:1d:e2:ff:b4:e5:bf:d7:
                    31:a1:23:df:e0:fe:2a:46:28:ea:53:2d:46:77:28:
                    b4:f1:41:cb:6a:aa:37:18:67:1b:ec:ed:9b:e7:10:
                    f2:57:6b:44:62:a7:86:eb:5e:e6:97:ed:cf:93:10:
                    39:6f:0c:f7:77:b7:7a:a4:1c:14:6b:c9:de:42:3e:
                    47:aa:bc:ab:a8:93:ca:15:ee:90:d8:bc:49:6d:fe:
                    63:41:71:0d:34:d9:c3:dc:fe:ca:04:4b:00:da:26:
                    de:a7:45:d3:1c:0c:cf:aa:80:24:d0:9b:ff:47:39:
                    f6:49:13:dd:98:b7:97:08:73:e2:63:72:41:6c:ac:
                    2b:f9:be:bb:20:94:04:df:1c:94:ce:91:ee:53:fb:
                    a6:cf:b2:8b:69:a5:48:f3:24:16:2f:fd:5e:94:a8:
                    05:47:dd:5e:5e:60:0f:1f:a1:57:be:1c:e3:e1:c4:
                    f3:cc:50:b9:01:8a:4d:96:4a:72:4d:00:98:86:f3:
                    39:5b:3d:b1:f0:09:bd:91:88:40:f8:f4:9b:1e:c2:
                    c2:cb:ec:d6:af:30:b7:6c:40:44:52:ac:29:81:83:
                    f0:d9:e8:c0:dc:b2:e8:ad:61:44:bc:4d:d4:5e:c7:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:06:2A:E1:61:82:DC:1D:72:35:4D:AF:E7:D1:A5:5F:6B:01:A6:2E
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/715A7EC836C911F0901BC853C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.122.0/24
                  223.29.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a9:a9:20:da:e7:3a:92:eb:c2:69:d2:64:d4:9f:7f:ab:58:
         5d:68:9a:df:b0:3a:b2:15:b0:a7:9d:8d:80:54:74:d9:e3:3b:
         2f:60:78:34:10:bd:e7:97:40:1d:37:ca:b2:a3:1e:6c:89:c9:
         c9:b6:87:53:a4:16:d7:4a:60:c5:ff:c9:ce:5d:a2:93:60:38:
         c0:94:de:3b:93:0a:5a:f8:08:1a:8d:34:55:35:8c:4d:6e:e5:
         15:b5:2c:1b:40:ec:ba:a3:14:ef:0d:af:58:78:78:62:e5:35:
         64:c3:c2:54:64:78:d8:8c:e3:a9:c2:9f:8c:ba:5d:26:70:f0:
         51:fc:9b:f4:38:c5:69:58:10:36:b7:9c:9f:e4:fd:95:0e:f1:
         58:04:2e:43:bb:9e:b4:b6:9e:28:3f:b0:14:34:ae:12:9e:63:
         a5:65:94:86:b8:f4:07:ed:d9:f4:a7:28:04:33:39:bf:94:18:
         d9:69:74:5c:86:86:bf:b2:57:10:a3:5a:47:96:2c:17:80:39:
         63:ac:26:b7:ea:64:03:e9:0d:61:82:6d:ab:8b:2b:9f:25:ca:
         76:af:21:99:ea:f9:2e:01:61:50:83:1e:e6:49:dd:d8:e0:82:
         d1:bf:af:fe:dc:4e:6d:07:18:be:70:ec:ef:0b:0d:43:d2:48:
         e6:48:5d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:54:57 2025 by rpki-client