Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3E91ACCEF43311EFAEFD0D66C4F9AE02.roa
File:                     3E91ACCEF43311EFAEFD0D66C4F9AE02.roa (raw, json)
Hash identifier:          elKGehtdr0ne7FAbeCkfBbs7PLRkyB9rfR2BoRPOxak=
Subject key identifier:   55:91:FB:BB:1A:3D:F3:00:27:5E:39:59:52:60:10:C7:57:66:58:EE
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2753
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3E91ACCEF43311EFAEFD0D66C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:07:07 +0000
ROA not before:           Mon 02 Jun 2025 21:07:07 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     13213
IP address blocks:        115.167.7.0/24 maxlen: 24
                          115.167.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 11:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10067 (0x2753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:07 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e127b-b649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:d5:54:d9:29:68:28:5b:a6:25:bf:75:c3:
                    57:a0:85:68:28:cc:0c:2e:dc:6e:84:5d:a3:92:38:
                    d2:03:0a:5f:ac:c1:e8:2e:e3:3a:19:5c:95:88:74:
                    08:35:38:d5:fd:2a:35:cc:cc:4d:4a:e5:84:86:b3:
                    1b:67:1c:d7:ef:03:59:e7:f6:96:de:b8:84:8c:a6:
                    7b:4f:b4:34:60:24:39:d3:ee:ff:cc:67:47:6b:8b:
                    3e:1b:29:97:1f:23:32:43:46:28:92:22:00:44:bf:
                    b3:2b:15:ba:90:ff:b1:6c:eb:25:7f:c1:b3:00:20:
                    ba:c9:e3:e7:29:2c:ff:b7:7d:8c:7f:64:6f:c6:b2:
                    f5:aa:38:a2:94:bd:b6:3e:0c:7c:fd:70:44:ac:78:
                    a3:e1:bd:68:49:ae:d7:be:8c:a0:b5:92:2c:d4:39:
                    e5:0d:0b:80:4f:30:c4:18:9b:1c:99:28:4c:94:d2:
                    4a:1f:4d:58:fc:eb:7f:dc:89:ff:cc:fe:02:e4:aa:
                    87:38:61:7b:e4:87:e3:f2:00:68:4e:db:f7:3f:0a:
                    cf:93:e4:70:ca:44:36:7f:5f:37:6c:a2:72:5f:01:
                    02:62:1d:0b:a5:7f:66:da:74:17:5e:be:8c:5a:0c:
                    9d:38:27:21:7f:cf:c7:81:fa:de:78:af:2a:4f:55:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:91:FB:BB:1A:3D:F3:00:27:5E:39:59:52:60:10:C7:57:66:58:EE
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3E91ACCEF43311EFAEFD0D66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.7.0/24
                  115.167.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:5b:9f:43:8a:d1:0a:26:95:40:b1:85:c8:9c:54:c1:73:f2:
         a2:f2:30:79:37:9d:fb:47:80:3c:d2:a2:23:75:27:03:7d:6c:
         e7:63:5a:a1:6b:aa:20:7d:17:a8:ae:62:6a:bb:97:79:b2:4e:
         82:35:d4:5b:51:4b:8e:5d:e6:11:9f:48:8d:92:c2:b3:c0:6c:
         4f:67:7c:7b:9b:c1:74:41:0f:2b:a6:49:b8:83:15:b8:c5:fb:
         39:1b:4f:a5:20:a3:08:37:96:a9:6d:0e:7e:88:aa:62:2b:f8:
         26:48:ea:4d:2a:dd:dc:de:f4:ac:06:20:09:51:a2:2c:65:12:
         c6:34:ec:6f:48:e1:e9:f6:94:e8:1e:74:cc:6a:38:cd:34:0a:
         b3:fb:40:81:c9:df:73:2c:b8:d3:02:0a:d1:8a:f2:30:46:ff:
         44:04:0c:91:8e:ac:3d:6d:74:b9:cf:77:af:ca:30:bd:00:f6:
         d2:89:87:30:70:88:83:ba:18:57:24:90:d5:58:a6:4b:b1:e5:
         6e:7e:3f:76:36:9d:e2:be:36:2c:ec:4e:73:fb:ba:ac:96:bf:
         b8:6a:50:b1:50:d9:8f:23:f3:07:c0:87:50:44:70:02:bc:e9:
         26:d1:d2:08:74:c4:33:8c:5e:17:c1:5c:23:92:e0:e0:b0:d9:
         78:77:84:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:49:18 2025 by rpki-client