Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF05145E3F0511F18151B5E0C9833773.roa
File:                     BF05145E3F0511F18151B5E0C9833773.roa (raw, json)
Hash identifier:          32f0zvwV2nZ42ImShuJDZZcBODmr2NjZl/IYcXaer/A=
Subject key identifier:   43:2C:A3:7A:F5:24:75:25:46:04:D0:DB:05:84:5A:45:98:B1:A8:8A
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D84
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF05145E3F0511F18151B5E0C9833773.roa
Signing time:             Thu 23 Apr 2026 11:15:34 +0000
ROA not before:           Thu 23 Apr 2026 11:15:34 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     206092
IP address blocks:        115.167.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 20:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11652 (0x2d84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 23 11:15:34 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69e9ff56-a596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:9e:20:77:d8:00:5d:a3:ee:d1:4f:a1:b0:
                    e7:88:7f:4a:93:86:79:f6:1c:5a:13:c0:ca:2d:eb:
                    36:dd:72:5f:a8:0b:3e:a1:d5:a8:2e:b1:ff:30:40:
                    48:dc:75:61:46:84:74:22:e6:de:cb:1e:e9:4b:d6:
                    24:63:69:74:a1:60:80:10:41:18:c3:fc:bf:fc:6a:
                    bf:49:30:c3:62:3d:24:90:de:ed:71:88:5b:05:4b:
                    cc:65:df:d2:27:15:8c:84:d4:7a:f3:76:13:2d:0a:
                    02:69:47:71:68:c6:f0:1d:22:ab:88:6d:8c:07:ac:
                    0d:c7:60:28:c7:b9:11:ab:06:3b:e9:22:36:df:05:
                    f8:43:7f:58:5f:a0:03:1d:5f:6e:cf:84:70:ef:64:
                    36:df:ea:93:68:94:d5:7f:6e:58:d5:e1:b9:16:a9:
                    ba:3b:d4:2e:cc:1e:51:8e:91:33:f1:c7:c2:85:64:
                    de:e7:c5:3e:1a:f6:3f:97:9f:77:e6:1e:17:ac:63:
                    28:51:d7:02:29:01:a3:b3:30:fa:9f:59:3f:c3:09:
                    71:93:d6:4d:3e:0b:ea:82:cd:92:5f:37:7a:dd:89:
                    54:74:4a:2d:ee:6b:82:74:dc:f9:30:ef:4d:0a:e5:
                    81:c7:b9:40:8d:85:5f:4a:37:fa:49:22:18:a1:0e:
                    a3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:A3:7A:F5:24:75:25:46:04:D0:DB:05:84:5A:45:98:B1:A8:8A
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF05145E3F0511F18151B5E0C9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:50:38:5a:3b:90:fa:88:aa:fe:d2:cd:71:33:f7:af:ce:
         dd:23:ba:a1:d1:00:9f:1f:4f:d9:f5:4a:36:32:03:4a:25:a3:
         dc:f4:28:12:40:49:ff:e7:c8:9a:9a:e6:20:b4:f1:b1:13:1c:
         81:ce:80:c7:c8:94:3c:12:a1:e5:23:39:32:ec:3e:e7:73:2c:
         ed:a0:dc:cd:fc:ff:aa:67:47:8d:f7:2a:5c:6a:49:80:f6:59:
         ce:b3:6b:72:0f:f1:a8:d7:b3:8a:bf:36:ff:7e:9c:dc:46:0e:
         88:9b:97:50:1c:98:20:3d:88:d3:79:b6:ea:61:21:5e:b8:94:
         43:46:23:bf:e3:31:8e:0b:57:f4:c2:d9:fc:f1:87:3c:e5:7e:
         67:ad:27:56:3e:5d:7b:eb:68:53:d7:f1:fa:d7:f0:ee:d4:ce:
         70:43:a7:02:1a:96:bb:ed:c0:37:4c:25:6c:f8:f1:94:a1:63:
         bb:e4:3b:dd:45:56:85:b9:22:79:80:8c:35:9a:2f:6a:8f:ef:
         a1:f6:92:b4:92:8e:9c:45:7f:4a:20:bc:14:7a:af:a3:9e:0a:
         67:bd:06:b5:c4:2e:19:df:c2:c2:b5:b0:a6:e3:ee:33:fb:73:
         cd:b8:47:c1:dd:0f:98:4f:64:96:bc:54:5c:1d:58:21:7f:a4:
         7b:38:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 03:42:34 2026 by rpki-client