Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/90F868E2741F11F0B579390AC4F9AE02.roa
File:                     90F868E2741F11F0B579390AC4F9AE02.roa (raw, json)
Hash identifier:          1MIct/lzaphmI8lSEVaB9WRjOIe2YP47rd6McPExCcc=
Subject key identifier:   82:3A:69:BA:D8:F6:63:FC:BE:24:6F:A4:4C:29:73:28:E6:14:64:46
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2914
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/90F868E2741F11F0B579390AC4F9AE02.roa
Signing time:             Fri 08 Aug 2025 06:18:57 +0000
ROA not before:           Fri 08 Aug 2025 06:18:57 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     213441
IP address blocks:        115.167.64.0/24 maxlen: 24
                          175.110.99.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10516 (0x2914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Aug  8 06:18:57 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=689596d1-01ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:d7:36:aa:dc:65:a2:b2:25:aa:70:9a:2f:
                    fa:d7:4c:28:bf:f6:10:ea:c9:84:f2:ed:68:f1:8d:
                    ec:aa:33:f8:18:17:4a:a4:34:3c:ae:6f:96:4f:b3:
                    26:28:53:37:35:fa:b3:0c:64:bc:20:43:1a:3a:6b:
                    0d:32:69:75:42:3d:b7:bc:57:20:9a:53:2d:26:46:
                    9e:5b:6c:bd:5d:36:17:20:27:d9:11:7e:76:5a:d6:
                    49:72:ad:a2:89:19:aa:c1:f8:c7:41:ff:6c:5a:f3:
                    54:30:da:04:46:02:ee:82:bc:58:09:d7:a1:bc:82:
                    3c:c2:80:8c:5b:09:13:d5:24:35:73:1c:e5:64:39:
                    ee:eb:b6:82:d4:30:1c:6b:d5:a3:72:9a:5f:8f:79:
                    0c:43:be:5d:b9:b5:cd:a1:73:53:ae:ba:0a:37:66:
                    e9:a8:fe:1b:23:5b:f1:e9:52:c5:61:ab:e5:b4:be:
                    09:19:85:fd:4d:d2:b4:ab:ad:61:61:a3:96:33:03:
                    1a:dc:72:a1:bd:78:4a:11:57:e3:d4:5f:4d:b0:bb:
                    f9:8b:fb:da:75:b3:80:97:59:dd:09:8d:0a:dc:ac:
                    02:cb:11:96:90:15:dd:71:32:e3:f1:36:f2:e1:8f:
                    fc:3d:4b:9c:3a:c1:c8:c6:1f:93:56:a1:52:a5:9f:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3A:69:BA:D8:F6:63:FC:BE:24:6F:A4:4C:29:73:28:E6:14:64:46
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/90F868E2741F11F0B579390AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.64.0/24
                  175.110.99.0/24
                  223.29.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:fb:a2:e2:89:82:97:90:8f:fd:02:9b:45:1d:7f:5a:0a:0d:
         8e:37:8c:d8:cc:f5:f3:f3:cd:e9:fd:fc:e5:6d:23:e8:9d:78:
         dc:b0:8b:b1:01:24:bd:7f:c9:df:44:63:2a:9d:a8:20:82:01:
         1f:ac:af:52:e8:8e:05:ab:29:85:3a:a0:41:7b:10:5a:c3:40:
         ec:01:0b:69:a9:3b:a1:76:6a:e7:18:39:2f:b7:6d:5d:2c:5d:
         69:bc:7f:3f:8b:20:f9:20:83:a3:d8:8a:74:ea:14:b0:8f:86:
         8e:aa:8c:22:41:9b:25:aa:f9:6f:09:e9:7b:9a:2a:0b:89:1f:
         8f:a3:de:a5:02:46:91:e0:08:49:0f:41:0e:93:b9:04:b8:66:
         18:df:1f:fc:09:7e:d7:25:2b:05:52:af:36:f6:dc:e3:85:ab:
         2e:c8:bf:97:dd:02:f4:ac:52:09:5e:b2:07:29:88:80:d6:39:
         b6:f9:6b:57:b1:39:03:a1:fb:ca:b3:a3:a0:0e:41:1e:07:82:
         d7:ff:6c:67:38:d2:8c:ea:f1:10:05:cc:9d:7b:bd:62:4b:c9:
         15:a8:fa:bb:55:af:d1:c7:79:06:90:9c:48:a9:b5:fc:da:db:
         bb:2e:36:ac:8c:41:e9:74:ea:60:5f:a0:67:ea:79:58:60:c1:
         8b:f6:0b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:49:58 2025 by rpki-client