Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8A03E168321D11F08298C839C4F9AE02.roa
File:                     8A03E168321D11F08298C839C4F9AE02.roa (raw, json)
Hash identifier:          BR1tNqdaU+w/5CmVMsqb1fbnUkTytvUXCwt/Ns7sURo=
Subject key identifier:   8E:9B:DE:F7:FB:38:03:03:7D:96:A5:69:18:2E:3B:76:12:12:03:81
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2769
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8A03E168321D11F08298C839C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:07:27 +0000
ROA not before:           Mon 02 Jun 2025 21:07:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     60721
IP address blocks:        115.167.9.0/24 maxlen: 24
                          115.167.62.0/24 maxlen: 24
                          115.167.63.0/24 maxlen: 24
                          115.167.76.0/24 maxlen: 24
                          175.110.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10089 (0x2769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e128f-645b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0c:93:cf:4d:d4:1d:f2:ab:42:67:0f:6f:36:
                    17:85:b6:dd:a7:3e:07:7e:f7:97:ad:dc:c3:97:19:
                    a6:e6:57:a7:a7:e7:1d:9e:f9:d9:9a:95:cc:dd:86:
                    f1:44:58:44:cc:88:88:ac:cb:14:b1:c2:d5:5b:83:
                    f4:e0:ce:12:96:89:d1:ab:fa:37:54:5d:c5:af:69:
                    cb:df:25:c2:8b:21:4a:65:d9:40:64:11:74:c7:b9:
                    ac:8e:05:4c:ec:7e:cf:16:f5:d9:b7:b0:44:a0:be:
                    7b:d1:3e:8b:2f:3f:36:8b:97:19:1f:1e:e6:68:66:
                    d4:2b:2d:07:09:91:88:bc:98:ee:78:a6:70:da:09:
                    42:3a:89:f6:e0:e0:de:bd:95:00:b2:13:a4:e9:d8:
                    c1:6e:c0:09:1f:41:8c:bf:91:83:bc:8a:2f:d0:09:
                    de:05:ea:11:25:16:39:37:91:54:d5:12:4a:66:38:
                    5d:a2:86:cf:3e:94:cd:e4:b7:62:cb:31:3f:bb:92:
                    b1:17:1d:44:77:7d:e3:a7:37:b1:7b:48:6e:53:7b:
                    2a:28:16:b9:5e:ec:c8:15:95:78:c5:9f:fc:77:3f:
                    ab:a7:2e:ad:bf:1b:00:77:fd:49:e4:66:d8:b2:a1:
                    b2:61:c1:fb:d3:b7:52:e4:39:52:66:3d:9c:85:33:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9B:DE:F7:FB:38:03:03:7D:96:A5:69:18:2E:3B:76:12:12:03:81
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8A03E168321D11F08298C839C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.9.0/24
                  115.167.62.0/23
                  115.167.76.0/24
                  175.110.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:18:16:01:9a:cf:61:d0:1c:12:3f:18:33:3f:ca:67:73:e6:
         68:5b:14:3e:d5:16:43:dc:f3:20:7b:bc:6f:a6:b1:d8:cf:bb:
         1f:5c:d1:ce:7b:ef:89:c9:f4:34:e8:45:86:4c:d2:86:6e:1a:
         82:e4:59:a7:be:77:31:f2:6d:76:ec:03:b4:87:0b:1c:d4:90:
         64:18:5f:2f:69:f2:25:ed:ec:86:42:8f:8a:05:13:11:e6:e9:
         f7:af:43:d4:f5:8c:3e:43:1a:52:dd:f1:3f:39:9e:7a:5d:be:
         fc:4d:3e:30:54:d4:2e:3a:3f:ce:70:64:24:b9:90:ab:52:41:
         a6:61:8e:7d:d7:d1:b4:a9:b3:81:95:14:4d:09:01:cc:b5:b4:
         96:9b:bb:99:a4:17:bc:cf:52:ba:2a:84:c4:96:e3:77:df:0e:
         63:8e:16:2e:77:b2:b2:91:26:47:21:05:7d:7f:e6:0b:9a:bc:
         11:36:26:35:ed:68:b6:13:2f:ce:39:bf:3a:11:ac:d0:64:e8:
         79:2b:f7:c3:d8:15:49:f7:09:06:03:1d:04:19:2b:dd:94:f0:
         3b:6c:25:83:a8:9e:7a:09:e4:ff:db:19:2a:4d:15:37:e5:fc:
         03:60:a6:ea:bc:9c:8e:d3:a8:15:6f:b5:40:74:eb:ba:fb:22:
         b8:9d:1d:12
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICJ2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwNjAyMjEwNzI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNlMTI4Zi02NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5QyTz03UHfKrQmcPbzYXhbbdpz4HfveXrdzDlxmm5lenp+cdnvnZmpXM3Ybx
RFhEzIiIrMsUscLVW4P04M4SlonRq/o3VF3Fr2nL3yXCiyFKZdlAZBF0x7msjgVM
7H7PFvXZt7BEoL570T6LLz82i5cZHx7maGbUKy0HCZGIvJjueKZw2glCOon24ODe
vZUAshOk6djBbsAJH0GMv5GDvIov0AneBeoRJRY5N5FU1RJKZjhdoobPPpTN5Ldi
yzE/u5KxFx1Ed33jpzexe0huU3sqKBa5XuzIFZV4xZ/8dz+rpy6tvxsAd/1J5GbY
sqGyYcH707dS5DlSZj2chTNmvQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFI6b3vf7
OAMDfZalaRguO3YSEgOBMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOEEwM0UxNjgz
MjFEMTFGMDgyOThDODM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABzpwkDBAFzpz4DBABzp0wDBACvblAwDQYJKoZIhvcNAQEL
BQADggEBAJIYFgGaz2HQHBI/GDM/ymdz5mhbFD7VFkPc8yB7vG+msdjPux9c0c57
74nJ9DToRYZM0oZuGoLkWae+dzHybXbsA7SHCxzUkGQYXy9p8iXt7IZCj4oFExHm
6fevQ9T1jD5DGlLd8T85nnpdvvxNPjBU1C46P85wZCS5kKtSQaZhjn3X0bSps4GV
FE0JAcy1tJabu5mkF7zPUroqhMSW43ffDmOOFi53srKRJkchBX1/5guavBE2JjXt
aLYTL845vzoRrNBk6Hkr98PYFUn3CQYDHQQZK92U8DtsJYOonnoJ5P/bGSpNFTfl
/ANgpuq8nI7TqBVvtUB067r7IridHRI=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:02:10 2025 by rpki-client