Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4ED07B6A34311F0BE20FD48C4F9AE02.roa
File:                     E4ED07B6A34311F0BE20FD48C4F9AE02.roa (raw, json)
Hash identifier:          GJYrIWbgQekIoRTCXwgg/r72JO/kmMKGwTTbfHHz+m8=
Subject key identifier:   A5:6E:E9:A2:6E:B0:BE:67:A5:3D:F9:32:80:76:7B:1C:B4:B6:05:F0
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E1D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4ED07B6A34311F0BE20FD48C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 20:26:14 +0000
ROA not before:           Thu 04 Jun 2026 20:26:14 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        115.167.65.0/24 maxlen: 24
                          115.167.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 20:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11805 (0x2e1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  4 20:26:14 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21df66-6c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:52:6c:01:ee:c0:3b:92:9e:8a:b9:44:9a:
                    8b:43:10:c9:8e:50:c8:a1:17:0b:fc:da:90:cd:67:
                    f9:9d:67:86:49:c1:10:33:78:fd:ee:c1:c4:71:4c:
                    19:72:ef:34:ec:0c:cb:8b:c3:cc:43:aa:76:16:33:
                    d0:a5:8a:8b:44:ce:13:15:73:66:a4:bf:71:7a:fa:
                    75:07:e0:7b:2e:1f:e4:1f:91:fe:7a:9a:a0:d4:78:
                    1d:b0:84:64:58:d7:e5:f4:ac:a3:77:48:51:c8:6f:
                    a4:4f:06:23:fd:b3:fd:37:83:97:76:b2:92:26:c3:
                    d5:38:17:24:94:c4:f3:3f:0f:fb:d7:18:5c:df:24:
                    25:7d:c0:dc:8f:4b:ca:0c:d5:73:71:f8:85:c9:8a:
                    8c:23:94:3b:63:65:64:e1:30:e9:c4:45:0e:34:3e:
                    2d:27:8f:73:06:60:5c:84:6f:55:90:de:88:4a:7a:
                    d2:97:d4:6b:d6:3b:7d:ad:82:bd:78:6e:22:db:a6:
                    1f:f7:04:6d:cc:dd:eb:b6:83:9f:b6:cf:de:10:38:
                    5b:73:30:85:dd:c8:06:02:53:c3:3b:5d:91:0d:90:
                    46:1f:29:4b:c1:7d:eb:8a:ab:26:5b:68:40:d5:5c:
                    ac:d6:0e:e2:2e:1a:f5:df:fb:50:8b:ec:80:bc:3d:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6E:E9:A2:6E:B0:BE:67:A5:3D:F9:32:80:76:7B:1C:B4:B6:05:F0
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4ED07B6A34311F0BE20FD48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.65.0/24
                  115.167.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:3c:93:f6:8c:a5:3c:53:c9:66:6d:bd:a2:42:cb:f1:a1:b9:
         75:15:5b:5f:67:79:c5:46:89:d0:89:4f:c0:66:5b:9b:5f:17:
         fe:f6:3c:41:d5:c7:f1:2a:e4:80:8f:7e:63:d3:73:7f:61:06:
         8f:3a:ab:e9:eb:4f:b6:22:97:62:c9:b5:16:66:77:c1:60:50:
         cf:00:26:59:88:28:0f:39:6d:21:61:fe:e7:a2:49:c8:08:28:
         42:b3:dd:ae:73:a1:8f:72:1a:51:e8:c4:1a:52:68:4c:05:c9:
         28:95:14:01:ea:57:78:04:78:ca:0e:9f:78:40:e2:ec:84:68:
         5a:36:78:19:8d:16:0b:bf:03:df:fe:cc:cc:cd:01:53:ec:23:
         39:cb:59:03:ac:09:b4:f6:fb:ca:1b:e9:7c:eb:17:6f:a9:4f:
         87:ae:0e:9a:dd:f3:ec:87:6d:88:cd:a9:87:62:2e:20:0c:77:
         ec:54:84:a5:67:ef:74:63:67:31:d8:52:55:e9:1b:08:75:98:
         87:a8:05:08:7f:82:62:fc:af:db:bc:35:49:22:7b:65:13:a3:
         34:e6:3c:44:5c:ca:3c:91:cf:ee:f3:98:14:65:d4:7c:a0:97:
         ea:8d:62:e4:e8:e3:7c:02:57:6c:3e:00:e5:9f:4a:cc:ca:87:
         5a:45:10:90
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICLh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjYwNjA0MjAyNjE0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxZGY2Ni02YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsTtSbAHuwDuSnoq5RJqLQxDJjlDIoRcL/NqQzWf5nWeGScEQM3j97sHEcUwZ
cu807AzLi8PMQ6p2FjPQpYqLRM4TFXNmpL9xevp1B+B7Lh/kH5H+epqg1HgdsIRk
WNfl9Kyjd0hRyG+kTwYj/bP9N4OXdrKSJsPVOBcklMTzPw/71xhc3yQlfcDcj0vK
DNVzcfiFyYqMI5Q7Y2Vk4TDpxEUOND4tJ49zBmBchG9VkN6ISnrSl9Rr1jt9rYK9
eG4i26Yf9wRtzN3rtoOfts/eEDhbczCF3cgGAlPDO12RDZBGHylLwX3riqsmW2hA
1Vys1g7iLhr13/tQi+yAvD0VQwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKVu6aJu
sL5npT35MoB2exy0tgXwMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRTRFRDA3QjZB
MzQzMTFGMEJFMjBGRDQ4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAc6dBAwQAc6dDMA0GCSqGSIb3DQEBCwUAA4IBAQC8PJP2jKU8U8lm
bb2iQsvxobl1FVtfZ3nFRonQiU/AZlubXxf+9jxB1cfxKuSAj35j03N/YQaPOqvp
60+2IpdiybUWZnfBYFDPACZZiCgPOW0hYf7noknICChCs92uc6GPchpR6MQaUmhM
BckolRQB6ld4BHjKDp94QOLshGhaNngZjRYLvwPf/szMzQFT7CM5y1kDrAm09vvK
G+l86xdvqU+Hrg6a3fPsh22IzamHYi4gDHfsVISlZ+90Y2cx2FJV6RsIdZiHqAUI
f4Ji/K/bvDVJIntlE6M05jxEXMo8kc/u85gUZdR8oJfqjWLk6ON8AldsPgDln0rM
yodaRRCQ
-----END CERTIFICATE-----
Generated at Fri Jun 5 20:05:31 2026 by rpki-client