Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DB729A72841E11F197C389985FA30FBC.roa
File:                     DB729A72841E11F197C389985FA30FBC.roa (raw, json)
Hash identifier:          pTa/qASavX+URYNy8msgFBKxN9+jFW4KW4d5SKD1h/8=
Subject key identifier:   51:BB:54:D3:E8:85:E2:1B:A0:73:35:9D:0D:CF:83:15:5A:43:14:FF
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2EC8
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DB729A72841E11F197C389985FA30FBC.roa
Signing time:             Mon 20 Jul 2026 09:39:09 +0000
ROA not before:           Mon 20 Jul 2026 09:39:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     208185
IP address blocks:        115.167.73.0/24 maxlen: 24
                          115.167.76.0/24 maxlen: 24
                          115.167.77.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 11:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11976 (0x2ec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul 20 09:39:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a5decbd-e2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f5:0b:9a:58:ed:21:5c:c6:9a:ce:6a:bc:6f:
                    e4:fe:66:3b:ab:7b:e4:5b:b6:66:9e:f5:db:8b:e9:
                    86:93:6f:48:d7:14:cf:1b:97:65:78:e1:06:30:a8:
                    70:2d:de:7f:56:95:45:3a:71:65:8f:1f:67:56:b7:
                    7e:4f:a5:e1:94:c4:e1:04:e0:f9:0d:96:b3:21:4e:
                    7f:53:72:da:a7:d8:97:34:6f:31:d1:0a:d6:50:41:
                    ed:41:a8:42:f9:41:86:45:ab:48:06:45:d1:23:4f:
                    db:f0:11:59:56:28:8b:41:11:ef:79:45:e2:9d:d2:
                    53:49:62:fb:25:8a:26:5c:09:45:94:df:8e:f9:36:
                    9e:1e:55:f9:1b:4b:01:3e:37:d5:9d:26:27:6d:dc:
                    70:bb:2a:33:02:e6:7e:ec:ec:6d:78:1a:e4:03:85:
                    97:71:36:47:a8:be:39:14:6a:53:ac:6a:24:0e:4c:
                    c5:40:c8:19:a8:53:e1:d0:58:f6:5c:59:bf:5b:ca:
                    1c:a8:51:cb:b7:01:0b:89:2a:be:75:8e:1a:9a:54:
                    03:07:04:ec:cd:60:9c:12:e8:81:3d:55:f7:46:26:
                    59:75:af:e3:d7:86:2c:e7:35:f3:6f:bb:7e:45:1f:
                    3c:b8:b0:0b:ce:cc:90:ba:8c:5a:73:43:cf:a6:e2:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BB:54:D3:E8:85:E2:1B:A0:73:35:9D:0D:CF:83:15:5A:43:14:FF
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DB729A72841E11F197C389985FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.73.0/24
                  115.167.76.0-115.167.78.255

    Signature Algorithm: sha256WithRSAEncryption
         52:f0:b6:64:76:8a:8b:32:9c:6c:f9:bf:41:49:23:1c:de:61:
         71:58:a7:78:f5:2f:d6:e9:64:b5:6a:36:d7:24:e4:42:56:07:
         46:f4:ff:14:75:63:67:6e:2d:aa:e0:f1:c9:f5:9e:c1:08:cd:
         20:4f:fd:23:f8:2e:8b:1e:6b:d3:7d:43:6c:86:3c:95:41:8c:
         7d:e0:0b:c7:2a:d6:db:84:67:3f:eb:dc:86:b8:c2:27:16:fb:
         e8:d4:c8:de:02:29:75:17:2a:40:f1:f1:b1:c0:5b:85:8d:1d:
         c0:d5:29:e1:bb:82:0f:b4:c9:84:45:3d:64:f2:c1:a7:0d:6f:
         89:00:ae:93:f4:5f:fb:7b:9e:04:a3:89:76:6a:9c:e0:f3:08:
         bd:39:bc:f9:3d:5e:10:65:6f:5f:00:83:cb:3f:2b:09:4e:08:
         03:4d:a3:82:ed:de:25:07:58:97:06:12:92:cf:13:e4:1b:eb:
         51:20:52:22:1b:83:48:c7:5b:4a:26:6f:01:df:78:13:83:85:
         f6:c2:78:99:6a:8e:1f:41:f8:68:c8:0c:9f:2a:df:69:c0:78:
         a4:b5:ed:fd:92:35:9c:fc:c9:a1:1a:7c:c5:08:97:a4:0b:18:
         fd:25:cf:f0:f7:8b:a9:41:7d:87:e4:15:4f:db:a4:0b:b0:10:
         5b:60:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:24 2026 by rpki-client