Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/93374B5A296011F0AE965421C4F9AE02.roa
File:                     93374B5A296011F0AE965421C4F9AE02.roa (raw, json)
Hash identifier:          9X8E9VHgmPXjC/TAMMviaS7wbRGx+hAd1+D2NpLlPLM=
Subject key identifier:   F5:2B:DA:51:8C:62:40:73:F0:D9:B8:93:8F:BC:F9:96:C9:0A:8C:15
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2760
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/93374B5A296011F0AE965421C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:07:19 +0000
ROA not before:           Mon 02 Jun 2025 21:07:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     215224
IP address blocks:        115.167.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10080 (0x2760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e1287-db2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:1c:87:b3:b1:50:ea:8c:aa:44:b1:05:ea:
                    76:5d:37:9c:8e:af:66:04:a9:d4:6a:17:ad:e7:64:
                    4a:81:66:a3:98:e7:1f:72:bd:c0:ab:a2:a4:d2:a7:
                    0e:58:9a:be:67:9e:e2:17:f0:bb:23:f6:ae:cc:a8:
                    41:94:af:4c:8e:69:97:36:6a:91:29:07:ba:8e:fc:
                    b4:8e:6f:2c:a7:fb:8d:fc:8a:13:a2:f8:f5:2e:de:
                    cc:29:0f:ff:65:5c:6c:45:ae:3c:4e:05:20:70:fc:
                    8c:d8:29:e8:bb:64:6a:cf:36:fa:22:0b:fc:fa:53:
                    39:81:14:5f:53:17:9e:f3:b7:6a:18:4e:61:71:ae:
                    82:f9:bb:96:63:c1:8e:d7:cb:65:9a:9c:4b:08:8e:
                    82:99:1f:5a:3b:7b:9f:89:76:a0:f0:56:08:c9:5d:
                    2a:a3:c7:26:e9:63:80:d1:cd:4a:f3:d4:4c:b7:65:
                    b0:cf:d4:44:13:97:fe:bd:73:4c:25:28:97:5a:d2:
                    ab:4a:89:8d:7e:3c:bc:0b:ce:4c:ef:a4:0a:a7:10:
                    6f:59:91:a0:3b:a1:e3:89:04:b3:a2:f3:c2:d3:a7:
                    68:ff:1a:e7:bc:f3:01:76:50:64:2c:f0:fe:36:10:
                    46:d6:ad:87:e7:26:95:91:f2:3f:ee:e8:ef:cf:d3:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:DA:51:8C:62:40:73:F0:D9:B8:93:8F:BC:F9:96:C9:0A:8C:15
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/93374B5A296011F0AE965421C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:6a:5a:e5:96:83:9e:5f:fd:49:bf:be:08:15:96:49:6d:ff:
         f9:f6:bf:11:91:32:8d:44:63:22:dd:46:8c:d3:0c:48:05:36:
         62:eb:a1:0b:a4:6e:e2:b8:2a:85:a9:14:a5:1b:bd:38:56:ee:
         56:d4:a8:5e:fe:20:bc:c2:1e:ab:87:c0:ea:5c:5d:c9:f4:25:
         f3:dd:48:d5:fa:56:14:73:34:0d:fb:c2:ab:3c:29:15:cb:88:
         1b:a7:fc:51:85:d3:fa:58:5a:ba:7a:53:ef:a4:d3:13:f2:f2:
         d6:ec:c6:92:4d:ee:dd:4a:83:70:4c:f1:b9:ce:e6:83:79:88:
         c2:27:01:0e:0e:1d:d5:17:d2:a4:fb:46:a5:1c:ef:ee:83:18:
         28:86:cc:9e:a1:32:d9:26:2c:d4:8a:90:be:37:5d:19:4e:33:
         2d:13:d6:8b:72:80:eb:d1:aa:3f:de:f3:9c:9d:a6:9b:67:09:
         ca:7b:5b:d7:a5:14:f7:f3:e9:61:8e:d6:6d:1d:89:8e:9a:86:
         a0:78:13:34:c1:41:43:ed:b5:52:91:9e:c9:36:72:8c:27:9c:
         4f:dc:a4:93:a5:6a:02:4d:a1:06:61:69:8a:ae:e5:55:5d:83:
         b2:4a:53:53:d5:95:e7:64:6d:31:aa:78:eb:86:29:7d:04:9f:
         ae:6a:80:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:50:39 2025 by rpki-client