Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/30C49B96A89E11EFADA8D758C4F9AE02.roa
File:                     30C49B96A89E11EFADA8D758C4F9AE02.roa (raw, json)
Hash identifier:          bngZA/1wwvXStj/2y0wHc/6MzaMVWP3R7is2TExbPpk=
Subject key identifier:   25:4D:CE:A8:8E:C8:14:7A:87:1B:DA:58:5E:4C:C1:6E:41:97:EF:1F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2758
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/30C49B96A89E11EFADA8D758C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:07:12 +0000
ROA not before:           Mon 02 Jun 2025 21:07:12 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     174
IP address blocks:        175.110.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 20:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10072 (0x2758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:12 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e127f-ac27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:70:ab:88:6f:fe:58:d5:07:7a:3d:cb:71:
                    2f:63:42:1a:ad:59:6e:7e:1a:26:b7:f0:c9:5c:73:
                    25:e7:25:1d:3b:9b:9c:c0:9c:d8:75:29:14:ad:e0:
                    1a:93:f5:c1:33:df:a3:4e:8b:b0:ab:d1:ee:90:75:
                    10:d3:42:2d:d5:2c:e9:c8:2b:00:dc:35:0a:8c:e4:
                    f8:ef:da:8a:38:df:25:49:e2:73:bb:c1:7c:6d:32:
                    65:4e:be:cb:6d:c2:14:c0:8f:79:22:f3:b0:03:7d:
                    f8:76:55:4c:50:6a:9e:f2:aa:a1:1d:04:d2:8b:9d:
                    13:d3:19:f9:8b:aa:db:61:95:93:bb:e7:d8:45:4f:
                    3f:7f:57:9b:15:4d:0b:4c:e4:b4:b6:83:87:35:38:
                    7f:53:59:b9:61:dd:c4:6c:f3:96:d3:08:a4:b6:ff:
                    00:1c:f1:24:e0:c2:4f:9c:8e:f5:12:1b:ba:7e:d7:
                    e8:f0:58:5b:f4:67:9a:83:79:bb:96:c9:32:40:b9:
                    65:80:d2:6d:a7:a1:0f:d0:80:a3:58:40:ce:90:9b:
                    18:7c:a3:55:c5:ba:9a:e9:36:64:af:46:d8:f1:c7:
                    8b:be:76:57:2b:06:1d:21:bc:89:e9:0c:86:01:16:
                    90:08:27:ba:6e:be:a7:2a:1e:20:c2:5f:4b:b2:43:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4D:CE:A8:8E:C8:14:7A:87:1B:DA:58:5E:4C:C1:6E:41:97:EF:1F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/30C49B96A89E11EFADA8D758C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:9e:5e:d5:d0:34:0a:7c:69:50:77:ff:44:f0:18:ef:f7:1c:
         fb:4f:1a:a7:da:7f:a3:6f:59:88:91:47:ba:63:90:72:df:9c:
         74:d4:dd:09:f0:56:61:22:14:4d:ca:d3:84:c0:52:04:8a:68:
         d7:3f:08:de:85:37:ca:06:15:48:59:11:36:62:a9:58:90:d3:
         23:12:44:a1:00:68:07:b1:7f:d1:7a:cb:ac:ac:ae:4c:cf:48:
         c1:59:75:a2:43:11:3f:ac:d6:28:0b:52:ad:27:95:64:a4:a5:
         dc:1b:83:09:6e:5f:ba:64:78:2b:67:1b:ce:5a:16:48:5e:26:
         f4:5f:7f:47:0c:67:09:22:d3:b2:71:41:7f:3f:62:8f:78:03:
         a1:6a:54:59:81:e0:c4:a5:ce:c3:36:e5:76:e2:1b:e5:9f:e1:
         5c:94:09:18:ca:03:8f:c5:0f:cd:57:58:2d:90:cc:0b:24:26:
         d3:ba:dd:95:7a:c7:0b:7b:98:a1:a1:b2:5a:a8:07:93:3b:ff:
         eb:97:be:66:bf:e6:5b:13:50:98:80:f0:da:17:e8:f1:ac:24:
         d0:ec:df:fd:d2:b6:d9:1e:56:6c:14:87:4e:ba:2e:8b:be:41:
         23:80:1d:ad:ef:af:f0:77:76:6b:93:68:80:9b:9d:63:af:af:
         e5:8f:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:44:35 2025 by rpki-client