Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1FA2E616ECAD11F0AADF4CF7636F56BC.roa
File:                     1FA2E616ECAD11F0AADF4CF7636F56BC.roa (raw, json)
Hash identifier:          nDwMnCxd8GTYDUOYy1aE3Y8RcHEDUA2ejj6ER6XtWcQ=
Subject key identifier:   72:01:CE:5C:45:0F:0C:98:EE:A2:70:D2:A6:0D:E2:B3:C5:2F:9D:84
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D27
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1FA2E616ECAD11F0AADF4CF7636F56BC.roa
Signing time:             Sun 01 Mar 2026 21:27:15 +0000
ROA not before:           Thu 08 Jan 2026 16:14:35 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     214366
IP address blocks:        115.167.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11559 (0x2d27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jan  8 16:14:35 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4af33-2a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:5e:43:b0:28:67:94:81:4a:7a:75:aa:72:
                    e8:fd:c0:b6:08:9a:c6:06:18:1a:2a:40:b3:67:20:
                    b4:86:58:f1:ed:d4:56:2e:48:7f:c4:b7:5e:c2:df:
                    5e:a0:66:ad:9a:e0:5a:2b:2e:b6:42:87:fc:32:7d:
                    ef:f1:7a:6c:0f:57:ed:b7:50:83:cd:1a:c0:00:1f:
                    0e:45:c3:6a:76:b1:cf:cd:8d:fe:6d:b7:e8:43:a7:
                    19:c8:63:bd:19:4e:f5:4a:11:74:da:6e:15:8a:01:
                    b4:b1:92:9e:3a:e3:9c:0c:a4:d9:2f:c0:ef:98:ef:
                    73:98:6d:e7:f7:41:f7:ce:b9:89:3d:16:5a:32:0c:
                    a7:c5:52:61:01:85:9b:fe:a7:91:c9:3d:a4:a7:94:
                    75:25:95:a4:02:47:72:c6:f4:f7:5e:1c:1d:f1:0e:
                    2d:cb:33:bb:c0:dc:48:3d:59:13:f9:07:0f:96:ff:
                    ae:c0:23:fb:63:e1:7f:ad:94:ac:9e:f0:a3:b1:1f:
                    f5:07:68:8a:79:60:66:7e:86:23:d1:81:4f:67:c4:
                    6e:e8:3b:8e:2f:78:85:a1:49:38:d8:ab:5c:39:0d:
                    e9:1a:2e:39:97:82:fa:92:00:fc:58:16:02:2d:c2:
                    97:b8:f5:11:3c:a4:12:43:99:b1:9d:e3:fa:20:9a:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:01:CE:5C:45:0F:0C:98:EE:A2:70:D2:A6:0D:E2:B3:C5:2F:9D:84
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1FA2E616ECAD11F0AADF4CF7636F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:13:c3:76:9b:aa:f6:bb:06:eb:ce:3c:a6:e3:e9:b3:9d:be:
         fe:5d:61:92:72:9e:db:bf:3f:8d:b9:f2:d7:6e:5a:4a:b4:7a:
         8d:5a:78:34:97:c6:23:86:c1:58:5f:13:58:a0:b7:77:80:e1:
         41:29:5e:fa:c7:a0:3c:fd:b6:fe:8f:1e:00:55:9b:89:5f:5a:
         c2:20:49:de:75:bc:a0:21:15:96:0d:ca:4d:f8:63:80:96:d2:
         eb:00:6e:06:c8:5d:81:ce:e6:03:30:9c:05:d0:b4:db:75:66:
         ed:2a:d9:80:3a:58:d1:c3:84:d1:89:08:f1:25:4c:d1:25:81:
         76:78:8e:4c:86:7b:2e:f8:99:28:d1:a5:5c:e8:ae:df:eb:82:
         19:07:f3:26:ad:1f:cb:08:af:51:a1:7e:a0:fd:a5:26:e1:a8:
         a6:13:9f:0b:30:76:30:0b:d0:fc:ee:d8:54:d1:a7:76:9b:b2:
         56:23:fc:ac:55:43:70:df:d8:c1:08:d2:52:61:53:b2:77:40:
         06:31:9c:f2:82:79:6a:ae:aa:4f:1d:3a:68:8d:01:52:1e:ff:
         b0:7c:91:81:e8:46:9e:92:c8:24:e9:da:ec:7a:c5:3d:cb:04:
         54:d5:95:4b:bd:74:4b:ad:ca:bb:de:5d:ab:73:6b:79:6f:20:
         b8:35:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:13 2026 by rpki-client