Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/00EE1B822E6111F1A6CD59EB9C833773.roa
File:                     00EE1B822E6111F1A6CD59EB9C833773.roa (raw, json)
Hash identifier:          aGbq+IzUT0T1TRwxzKWd1zRceVSfXwgypsRsKPNMwQs=
Subject key identifier:   BD:62:B5:88:28:1F:01:01:AC:AA:9C:1F:98:34:C4:19:0C:02:B9:E1
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E25
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/00EE1B822E6111F1A6CD59EB9C833773.roa
Signing time:             Thu 04 Jun 2026 20:26:29 +0000
ROA not before:           Thu 04 Jun 2026 20:26:29 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     7018
IP address blocks:        115.167.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11813 (0x2e25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  4 20:26:29 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21df75-9c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:89:27:03:0e:71:6d:bb:00:4c:db:5b:3a:72:
                    ac:c3:ef:e9:e4:ed:12:b0:e6:7f:1c:43:69:0f:6c:
                    cd:4c:cd:66:49:09:0f:62:ed:46:bc:13:7b:f9:50:
                    f8:77:44:2d:14:d1:73:da:29:a0:53:ce:93:a8:16:
                    2f:13:f6:bc:74:e4:82:6d:d0:41:51:c2:6f:0d:28:
                    52:da:89:a9:5d:5e:28:33:cd:c3:a8:5e:81:10:c5:
                    28:9d:71:25:f5:1a:a6:e7:f8:f5:4f:59:ed:eb:4f:
                    ff:64:99:66:23:dc:52:60:10:86:57:02:62:74:97:
                    83:78:d5:72:8e:6b:b4:80:38:b2:9d:08:14:1a:8c:
                    6c:13:42:25:9e:5d:b0:5a:a5:bd:83:6a:5c:79:0a:
                    01:48:f0:ba:9c:34:f1:5c:17:a8:35:44:dd:fe:5a:
                    b7:d9:df:1d:4a:6a:0d:b3:f4:2f:9a:9b:98:fe:a4:
                    42:cf:05:50:bc:d2:84:3f:e5:04:31:78:9b:a3:f4:
                    e2:81:9e:e6:3f:73:b0:e3:eb:34:bd:e3:57:4f:bc:
                    10:02:74:1d:23:3a:2a:42:1b:c5:a9:f2:00:c4:33:
                    f0:31:06:36:e0:06:cf:53:11:0f:2e:31:48:66:90:
                    2a:b9:e9:59:70:09:48:23:a1:bc:45:26:2b:64:e3:
                    08:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:62:B5:88:28:1F:01:01:AC:AA:9C:1F:98:34:C4:19:0C:02:B9:E1
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/00EE1B822E6111F1A6CD59EB9C833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:3c:ff:55:a5:09:5a:52:84:c8:69:25:02:5d:60:b6:2e:
         83:35:e2:53:4a:24:65:cd:73:10:e5:b4:5d:92:30:b7:51:94:
         cd:8a:ae:e1:42:9a:93:ce:43:a9:70:37:79:92:a0:12:36:50:
         70:32:ee:8a:18:43:a3:b7:ac:fc:55:ab:a6:a3:b6:64:b5:8a:
         f6:6d:e6:92:3e:80:07:76:0b:84:60:3d:04:00:26:bd:15:4f:
         5b:e5:ee:28:3e:5e:91:03:b0:de:8b:6d:dd:96:50:0a:da:f3:
         3a:16:08:a1:02:62:01:41:b5:93:be:ba:a0:35:5f:95:7c:f8:
         f2:e3:56:c2:84:27:bf:88:42:55:76:ed:4a:e0:56:49:36:3f:
         f1:3f:21:17:39:3e:36:dd:84:62:81:d3:16:67:0f:2d:5c:2d:
         21:4f:b3:cd:13:17:43:1e:8f:1c:a7:16:64:06:1a:bd:f4:b1:
         9c:1d:47:d4:b1:86:69:49:ca:b9:62:f0:03:d4:dc:50:15:6d:
         fe:57:fe:92:ba:c4:2b:21:65:c2:57:1a:76:1d:cd:b7:aa:f5:
         73:38:86:c3:d5:4b:b9:45:c0:0f:a7:62:21:d1:d4:85:57:94:
         df:0e:10:9d:66:9d:2d:ff:b7:03:1e:f3:c5:54:f4:ac:c2:5d:
         d5:b1:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:11 2026 by rpki-client