Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C32AE2E21AB811F08F3C8B74C4F9AE02.roa
File:                     C32AE2E21AB811F08F3C8B74C4F9AE02.roa (raw, json)
Hash identifier:          HqiaR3fanz/RrtY5zaScKgsG+d25PnrZMIldi6Ky2gs=
Subject key identifier:   50:A2:42:DB:12:3B:54:35:28:F1:73:FD:8C:5A:99:02:09:66:DE:98
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       26DF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C32AE2E21AB811F08F3C8B74C4F9AE02.roa
Signing time:             Wed 14 May 2025 09:55:27 +0000
ROA not before:           Wed 14 May 2025 09:55:27 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     213441
IP address blocks:        115.167.3.0/24 maxlen: 24
                          175.110.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 20:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9951 (0x26df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 14 09:55:27 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6824688f-e058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:fa:26:84:23:ca:2a:9c:f7:6a:8e:32:be:
                    d1:22:4a:c0:69:75:3e:a5:fb:bc:2d:5a:b8:16:f5:
                    cd:79:55:ff:87:00:c9:57:5a:5d:42:02:7f:1c:42:
                    80:1a:b6:6f:d2:c3:62:c4:0a:ca:d3:df:75:b9:f4:
                    5f:81:a8:17:a0:bd:a9:b3:d8:8c:70:19:9c:2f:77:
                    1c:f3:a3:95:86:45:1c:6b:27:d6:37:e9:ec:4b:03:
                    7e:dc:2a:4a:da:41:da:cb:18:0e:d2:34:94:df:a3:
                    ad:20:c1:eb:69:91:a9:f7:82:1f:cf:e3:1b:a5:3e:
                    b7:c1:84:56:84:af:57:eb:39:a2:4e:15:81:c8:f7:
                    cf:3b:83:0b:bb:8f:cc:4d:b2:d5:63:f0:6b:2c:c6:
                    86:14:f0:c3:a6:7d:60:a5:7d:e6:e5:aa:3b:5c:ab:
                    7b:9f:47:80:c4:44:d0:63:f8:c7:79:c0:28:88:79:
                    50:3f:5c:df:9c:fb:33:f8:6c:e4:a4:ae:00:99:89:
                    b7:80:0e:20:16:53:24:be:86:3e:38:4e:b5:b7:17:
                    2f:88:dc:36:61:c9:df:ef:fb:42:86:53:c4:be:b9:
                    3e:66:3c:a5:77:1c:0f:d8:76:3d:24:f1:9d:d0:0a:
                    7b:3d:8f:49:6e:c0:c6:44:4a:9d:0a:b4:c3:b7:4b:
                    38:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A2:42:DB:12:3B:54:35:28:F1:73:FD:8C:5A:99:02:09:66:DE:98
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C32AE2E21AB811F08F3C8B74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.3.0/24
                  175.110.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:b2:1c:dc:ef:7d:20:0b:64:cb:10:c6:5c:fa:31:23:75:d8:
         ff:00:b0:f3:f7:ea:df:ed:06:6c:08:6a:e4:bc:d1:19:29:9f:
         3a:e2:d5:40:11:aa:c7:16:d4:15:c2:c9:3b:72:7c:9e:e5:41:
         5d:26:ec:e9:6a:95:fc:57:88:e2:12:ab:cc:3a:fe:8f:85:64:
         80:16:4d:1b:bb:dd:1d:47:b3:de:40:b7:a9:f6:e4:38:86:8b:
         a3:8e:2c:76:c3:b4:34:74:ff:fe:c8:91:f4:03:de:d7:96:cd:
         b3:db:9e:ad:88:a7:46:c5:c9:d3:89:50:9e:bc:8d:fc:3f:b5:
         48:fc:d8:86:af:20:02:95:1c:86:e9:cf:31:4d:48:90:5b:e1:
         8d:bb:b6:77:5e:12:37:27:00:d6:b0:51:6f:03:c9:ef:d1:68:
         06:28:ef:fd:8f:eb:f3:c6:6b:26:2c:67:13:77:3b:f8:ce:f0:
         b5:ff:0d:89:e7:65:16:f9:46:87:92:59:63:1d:42:a8:98:02:
         e3:bb:0d:df:7e:15:9a:75:f0:b8:c6:9f:6f:26:14:c6:b8:97:
         30:bf:a7:bb:f2:13:40:d2:9f:f9:65:7a:46:19:28:a9:1b:12:
         cf:45:8e:9c:30:91:29:47:01:8c:d8:29:5c:89:70:6a:56:d0:
         b2:48:be:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:32:04 2025 by rpki-client