Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0E719B06B89311F0B84F9D62C4F9AE02.roa
File:                     0E719B06B89311F0B84F9D62C4F9AE02.roa (raw, json)
Hash identifier:          VLvPrV8KpS/x8BS+qpY2aNWsOHbteffc2ht5X2hYxaQ=
Subject key identifier:   2E:D6:DF:AE:31:B3:A9:51:0E:4E:05:BA:CC:F7:07:D6:E2:42:43:95
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2A41
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0E719B06B89311F0B84F9D62C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 08:56:59 +0000
ROA not before:           Mon 03 Nov 2025 08:56:59 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     213441
IP address blocks:        223.29.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10817 (0x2a41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov  3 08:56:59 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69086e5b-83f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1e:cc:ef:69:84:58:d7:7d:f8:9a:67:9f:dc:
                    16:17:36:47:ed:3f:ed:88:82:6a:d4:0d:87:f4:dd:
                    ea:fc:5d:80:41:36:e3:6c:3d:a7:86:a7:85:97:90:
                    7d:a8:87:f6:be:41:eb:86:ec:66:cf:00:c7:02:09:
                    5e:3d:26:18:be:53:e6:84:cf:70:ee:43:1f:74:75:
                    d9:10:e1:3c:8f:c1:71:77:6e:a8:62:81:7c:21:40:
                    e2:a6:56:b0:33:84:38:4c:b0:2f:6b:75:45:58:8c:
                    be:bc:82:ac:0f:5a:f1:cb:58:65:fc:77:5f:37:a9:
                    c4:c1:71:d3:28:e7:c9:53:c9:fd:f4:4f:32:10:08:
                    f3:f7:69:b7:87:ac:2a:4b:6c:37:01:7d:56:fb:d5:
                    38:50:98:ca:b1:f4:b1:4e:99:e0:73:e0:36:58:86:
                    65:6c:f2:00:54:da:e5:cf:71:d5:28:6f:35:76:34:
                    6b:46:2b:a4:5e:58:5f:22:cd:37:5c:ab:9e:e1:a4:
                    52:28:82:f2:56:de:d9:eb:bf:fd:c6:35:85:36:a7:
                    74:5a:1f:67:c0:d9:39:ed:5c:b5:9c:4e:7c:22:80:
                    f8:90:1e:ee:98:3b:a7:c6:a9:86:43:64:9d:07:a0:
                    0a:c4:4d:2f:bc:f2:de:c9:93:45:a2:5b:2d:e1:9f:
                    3d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D6:DF:AE:31:B3:A9:51:0E:4E:05:BA:CC:F7:07:D6:E2:42:43:95
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0E719B06B89311F0B84F9D62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:73:e0:f5:b0:76:3b:c2:72:e1:fa:8c:79:96:48:43:f3:07:
         c4:05:17:a8:dd:99:7b:3b:62:51:59:fe:1a:39:71:88:59:f7:
         8c:f2:a5:80:d2:f1:64:ee:8a:46:52:22:32:dd:ee:81:1f:09:
         96:28:bc:e1:6b:c0:f4:66:f5:f4:58:29:fd:67:51:6c:ff:57:
         31:81:36:d1:fb:3a:5c:2a:91:41:6d:64:10:b3:ae:7a:48:c1:
         e7:5d:37:5e:45:3c:08:90:e9:83:23:0d:95:a7:7c:87:22:a2:
         8b:fb:f2:57:5b:b4:91:a9:92:75:9b:5e:96:ed:4d:8a:3a:7f:
         ff:12:ab:74:aa:8f:b4:40:ea:07:09:40:56:fe:dc:2f:b4:08:
         ca:99:15:56:83:fd:72:ed:66:4f:62:96:34:32:8c:81:dc:61:
         44:89:15:89:e5:fe:bf:4b:ef:cf:17:c9:45:8d:e5:58:9c:ab:
         bb:8b:c2:58:f0:fd:72:ca:cb:2a:ea:41:47:ba:f4:2a:b8:3d:
         2d:fa:22:af:7f:53:9d:c4:bf:9f:24:b5:20:fd:ad:ad:9d:09:
         1f:b7:44:c9:c8:5b:b5:e5:24:9f:83:8d:49:a4:f5:17:72:1a:
         3d:ee:0f:c4:07:92:5d:4b:f9:64:e2:95:5b:6a:1f:b7:8d:9c:
         2c:8f:b8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:02:34 2025 by rpki-client