Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E586E134D68111F1A7DA8A6F2866CEF9.roa
File:                     E586E134D68111F1A7DA8A6F2866CEF9.roa (raw, json)
Hash identifier:          z9Fq38NtKX3nZGr3x1Pd39mxgrR0d3AQ2rJCS2f1xZw=
Subject key identifier:   0C:2A:51:48:10:84:08:ED:3C:87:C6:64:97:53:59:2C:87:07:5D:C0
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       306A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E586E134D68111F1A7DA8A6F2866CEF9.roa
Signing time:             Mon 02 Nov 2026 05:54:41 +0000
ROA not before:           Mon 02 Nov 2026 05:54:41 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     10753
IP address blocks:        115.167.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 19:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12394 (0x306a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov  2 05:54:41 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ae825a1-f8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f3:e7:2e:70:86:0c:80:69:1c:48:8c:ee:77:
                    b3:0e:31:89:45:d9:b1:25:02:19:38:d9:71:22:97:
                    6d:20:b7:d1:38:46:e8:27:fb:f6:be:41:45:9b:8b:
                    9d:91:0c:55:fd:8f:5d:ba:42:d4:5c:f7:22:04:5a:
                    b5:05:e8:24:7e:88:65:2b:db:2d:99:67:2c:dd:83:
                    9c:36:6b:21:22:c5:a3:62:4c:fc:3a:d2:62:94:55:
                    28:55:0b:b0:09:f9:4c:7a:fa:41:9f:b2:e4:5f:a2:
                    f0:13:25:fc:90:02:51:8d:4f:dd:27:49:c5:d1:c1:
                    d7:d9:0a:8c:9e:0e:00:26:63:25:6c:00:1a:5d:3b:
                    98:25:e8:aa:19:a3:14:0f:c5:46:f2:71:0b:a0:e8:
                    f3:48:f9:e8:ef:8b:ca:aa:22:2c:bd:89:7c:99:99:
                    2d:21:77:e5:19:b5:03:22:9a:89:e3:50:e3:14:2d:
                    fc:5c:80:c9:34:f9:d6:04:23:9a:ed:ac:f3:c7:b5:
                    9c:21:16:0c:2a:ee:5f:e3:ca:c0:04:7a:f4:8b:df:
                    53:ba:88:4d:1f:83:a2:a5:62:3a:83:9a:39:48:de:
                    cf:29:73:84:33:27:82:69:cd:6f:6d:75:e1:cb:55:
                    ce:be:64:63:f5:c3:a8:22:35:91:a7:67:11:16:56:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2A:51:48:10:84:08:ED:3C:87:C6:64:97:53:59:2C:87:07:5D:C0
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E586E134D68111F1A7DA8A6F2866CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:63:8c:0a:a0:77:a5:fe:d5:52:98:93:4d:0b:60:33:fd:97:
         30:e2:59:55:ac:43:d7:82:f8:9b:0f:7a:d5:3f:c5:9f:37:77:
         56:61:6c:7c:a6:8c:03:81:0e:f9:0f:87:da:61:b6:4d:fd:6c:
         24:b9:c4:01:64:ad:1a:6e:75:25:43:67:49:2e:02:6c:12:0a:
         d0:4c:18:02:e7:f5:3e:92:65:20:e6:b3:85:2e:ed:ae:6b:c4:
         55:f3:f1:66:75:da:cb:7b:51:33:76:0a:a0:b9:5a:cf:95:2e:
         0b:b0:f8:d4:ae:d4:17:a7:bf:ec:8c:0d:29:d4:f2:e0:e9:f1:
         c6:df:ac:4f:37:a7:13:0c:f9:2b:53:35:e6:43:b8:ca:88:83:
         88:e9:b2:32:07:73:3e:a1:d3:d8:45:68:3e:6b:d9:46:d7:7e:
         0b:26:e8:a0:66:f1:40:0c:82:43:c0:4c:21:22:25:82:73:e3:
         e9:72:a1:45:41:05:08:00:d2:8d:01:1b:7f:87:e7:a7:b5:e8:
         99:39:e0:72:13:46:ba:2d:d0:52:60:2d:5d:5b:6c:ce:98:31:
         a5:0e:84:5d:bd:89:1b:68:63:c8:9d:6c:f6:db:0e:ff:f2:70:
         60:cf:a9:72:8a:9e:e4:4f:34:fd:4e:95:cf:8f:ca:4f:57:14:
         6c:54:e2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 10:44:20 2026 by rpki-client