Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7306A20255811EE8CC9220BC4F9AE02.roa
File:                     D7306A20255811EE8CC9220BC4F9AE02.roa (raw, json)
Hash identifier:          LDnpzcik5p3C3Ojy2i2l7X0Cv1jUsrprzOZCUKgDSno=
Subject key identifier:   C2:A9:25:B2:2B:E6:F5:E8:A8:26:3E:20:03:50:D9:9F:B3:17:E4:3F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       275A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7306A20255811EE8CC9220BC4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:07:14 +0000
ROA not before:           Mon 02 Jun 2025 21:07:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     206092
IP address blocks:        115.167.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10074 (0x275a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:14 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e1281-3155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ff:c9:67:9f:4c:44:b1:5d:37:a0:78:e5:b9:
                    e6:17:26:c8:a5:78:93:b4:d3:db:b4:36:b3:e6:25:
                    ff:43:07:aa:65:85:59:db:96:f6:b6:14:51:1f:3e:
                    a4:61:e4:aa:4c:20:ae:a8:12:32:30:92:0f:cc:7d:
                    dc:bf:44:53:75:c7:da:ca:23:68:18:c9:0f:6b:27:
                    72:9d:b0:e7:24:e1:17:81:0b:8b:ef:d3:99:e6:14:
                    0d:93:e8:d8:fe:c2:84:05:27:5e:40:da:28:48:27:
                    ac:7f:d1:4c:2b:9d:9b:53:7b:65:40:df:4f:e5:92:
                    5c:7c:fd:ef:d3:fe:7a:2c:63:ab:bf:dd:a3:80:b3:
                    bb:9c:17:4a:f2:3e:fb:9b:88:5a:3c:a9:d3:90:e7:
                    1a:9e:4c:e8:aa:35:5f:9a:d1:8c:d4:74:15:95:ed:
                    e5:de:0b:e6:02:0e:b0:24:af:a1:09:b3:4e:0d:94:
                    37:b9:bb:10:ae:be:db:9b:d6:02:87:a0:cd:db:74:
                    46:95:41:8e:b3:b3:fd:de:49:99:6c:f1:f0:47:20:
                    2b:97:26:d1:ad:89:c5:89:1d:fe:4a:3f:68:08:07:
                    5c:c0:ba:20:1f:76:13:5f:44:93:04:2a:32:ae:a6:
                    b2:fa:5a:db:58:0b:86:dd:49:6f:3c:f2:ca:19:a9:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A9:25:B2:2B:E6:F5:E8:A8:26:3E:20:03:50:D9:9F:B3:17:E4:3F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7306A20255811EE8CC9220BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:a9:80:20:16:65:32:e4:74:62:78:f1:be:2b:76:b9:34:cc:
         37:7a:7d:5e:0f:19:2e:bb:e9:f2:9f:ab:fd:16:d9:b3:2c:10:
         ea:87:f1:3e:51:b6:8b:87:6c:19:af:2a:6a:15:16:34:00:da:
         12:f7:83:00:7f:fe:bb:fe:a8:54:50:89:9d:3b:d7:c4:be:77:
         c8:94:2b:18:b9:cd:bc:79:51:49:db:46:6d:3e:f5:a5:b8:a7:
         f7:36:76:82:16:a2:32:66:95:af:48:a0:82:f7:65:45:e3:5e:
         37:ec:db:0f:2d:56:45:fb:05:e0:e8:9e:12:13:a7:1c:25:92:
         65:93:a1:f6:1c:28:63:86:e5:0b:d6:0e:71:32:07:7d:3c:fc:
         30:df:e1:70:8d:61:c5:80:3a:9f:03:0a:b8:72:09:02:8a:9e:
         a4:08:93:29:b9:77:89:d8:e0:01:77:20:4f:2b:3c:51:65:2c:
         36:c2:36:b2:c9:5a:87:eb:6a:78:2d:97:75:1e:60:79:11:c8:
         9c:f3:2f:6a:5c:32:ab:10:4e:b9:08:19:35:9c:14:2e:d2:9c:
         42:d0:9a:ba:ca:dd:b1:df:e0:21:79:96:25:bb:6e:99:8f:56:
         8b:38:d2:e0:da:ba:eb:2a:c1:e7:e8:13:1a:f5:3b:9e:82:bd:
         3d:06:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:53:20 2025 by rpki-client