Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ADDD43E27F1A11EF96B3E844C4F9AE02.roa
File:                     ADDD43E27F1A11EF96B3E844C4F9AE02.roa (raw, json)
Hash identifier:          kUeKAnnG0rgHwsOhw/eYNWaVApmeZ2G/OGd1ePq06Zg=
Subject key identifier:   4A:59:9C:4B:57:BE:2C:E3:DD:9D:A2:E6:8B:E8:E2:43:31:7A:2C:AE
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2765
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ADDD43E27F1A11EF96B3E844C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:07:23 +0000
ROA not before:           Mon 02 Jun 2025 21:07:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     397423
IP address blocks:        175.110.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10085 (0x2765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e128b-85ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:ae:09:9b:0e:74:6b:fa:6d:63:c9:64:f3:
                    15:95:13:e7:32:2d:e8:18:88:b1:39:8e:36:f4:4a:
                    f3:b5:1e:c6:b2:c6:cf:3c:88:1d:e3:30:98:a5:17:
                    b6:e0:b6:fc:82:10:a1:d5:be:3a:82:e2:1e:34:4a:
                    aa:66:24:15:57:d1:2e:f2:da:ea:72:a1:99:ee:6b:
                    8b:58:97:96:a5:ee:83:04:b3:34:72:a0:76:d6:ff:
                    af:66:3a:02:1f:6b:7c:de:1d:2d:b5:cf:f3:08:e0:
                    03:9a:95:75:57:63:67:38:b1:ab:11:15:e2:41:0c:
                    e0:cb:b8:ef:3d:2d:f3:ad:22:d7:e4:a6:c2:d1:8f:
                    4e:44:1f:a0:eb:cd:50:06:b4:13:34:d9:3d:4a:03:
                    83:ef:4e:80:ee:ad:67:b7:35:93:ea:35:1c:b7:db:
                    0d:f3:93:7a:aa:e3:a8:3f:19:75:2c:65:49:02:c5:
                    0e:a8:df:f7:57:59:2b:2b:74:23:0b:0b:7c:22:5f:
                    07:32:17:0e:e0:94:5c:07:cb:cc:fa:d3:81:65:32:
                    19:50:d6:ae:a3:d8:09:e7:93:1d:6a:f3:d6:d2:ce:
                    ed:df:79:c9:23:dc:be:0d:17:ce:08:c7:32:d3:08:
                    37:eb:7b:af:7e:56:f9:f6:cd:0f:a8:93:b3:73:bf:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:59:9C:4B:57:BE:2C:E3:DD:9D:A2:E6:8B:E8:E2:43:31:7A:2C:AE
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ADDD43E27F1A11EF96B3E844C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:a2:37:37:ec:ed:ec:61:e7:e6:46:b3:68:ef:81:cc:41:
         49:7a:62:19:6a:5f:b8:e7:70:65:46:98:ff:ad:e0:8d:a6:e2:
         4c:f4:2e:15:13:19:cb:d2:e0:eb:5a:5e:0d:d2:51:12:7a:84:
         da:c0:39:9e:9c:4a:17:56:cd:27:60:c1:29:ab:9c:74:c7:c0:
         26:32:95:8e:a9:de:5d:b5:53:d8:1a:b1:ac:3b:c3:f3:53:f1:
         1d:e5:ef:98:a5:71:41:b5:7d:7c:74:f8:93:e8:4b:23:8b:ee:
         50:70:65:f8:c5:c3:52:9e:97:e1:21:f7:06:77:d8:ba:08:40:
         db:77:76:df:ba:4a:d2:f0:7d:ab:1d:ee:17:4e:59:69:46:78:
         3a:a0:bc:c3:6e:9e:d7:2d:dc:7a:24:d7:14:15:72:e5:9b:ff:
         4d:b6:88:d8:12:17:ca:98:ce:1a:12:24:b5:33:12:58:a6:ae:
         aa:d2:7d:b2:b6:dc:de:75:f3:a5:fa:f0:53:50:da:16:76:0a:
         d7:bc:f3:ca:5f:b7:e7:8b:9d:28:04:a7:8e:6a:c6:f6:60:bf:
         81:f7:72:a6:54:ea:f6:87:4e:9d:52:b6:8a:b6:88:f0:11:15:
         0d:d0:23:d6:ff:c3:dd:4a:a4:a5:a8:af:b0:e3:31:7e:24:89:
         6d:a6:0f:aa
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJ2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwNjAyMjEwNzIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNlMTI4Yi04NWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu66uCZsOdGv6bWPJZPMVlRPnMi3oGIixOY429ErztR7GssbPPIgd4zCYpRe2
4Lb8ghCh1b46guIeNEqqZiQVV9Eu8trqcqGZ7muLWJeWpe6DBLM0cqB21v+vZjoC
H2t83h0ttc/zCOADmpV1V2NnOLGrERXiQQzgy7jvPS3zrSLX5KbC0Y9ORB+g681Q
BrQTNNk9SgOD706A7q1ntzWT6jUct9sN85N6quOoPxl1LGVJAsUOqN/3V1krK3Qj
Cwt8Il8HMhcO4JRcB8vM+tOBZTIZUNauo9gJ55MdavPW0s7t33nJI9y+DRfOCMcy
0wg363uvflb59s0PqJOzc78lmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEpZnEtX
vizj3Z2i5ovo4kMxeiyuMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQURERDQzRTI3
RjFBMTFFRjk2QjNFODQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACvblgwDQYJKoZIhvcNAQELBQADggEBAD9Uojc37O3sYefm
RrNo74HMQUl6YhlqX7jncGVGmP+t4I2m4kz0LhUTGcvS4OtaXg3SURJ6hNrAOZ6c
ShdWzSdgwSmrnHTHwCYylY6p3l21U9gasaw7w/NT8R3l75ilcUG1fXx0+JPoSyOL
7lBwZfjFw1Kel+Eh9wZ32LoIQNt3dt+6StLwfasd7hdOWWlGeDqgvMNuntct3Hok
1xQVcuWb/022iNgSF8qYzhoSJLUzElimrqrSfbK23N5186X68FNQ2hZ2Cte888pf
t+eLnSgEp45qxvZgv4H3cqZU6vaHTp1Stoq2iPARFQ3QI9b/w91KpKWor7DjMX4k
iW2mD6o=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:51:34 2025 by rpki-client