Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF05145E3F0511F18151B5E0C9833773.roa
File:                     BF05145E3F0511F18151B5E0C9833773.roa (raw, json)
Hash identifier:          RMHW4dUwdJGlWMLDjoplKVhvyuwLRInKD+eG9xG2KPQ=
Subject key identifier:   DC:5C:76:59:A9:05:3E:7F:6B:E7:F4:35:C6:68:49:3D:CF:EC:1D:4C
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E16
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF05145E3F0511F18151B5E0C9833773.roa
Signing time:             Thu 04 Jun 2026 20:26:01 +0000
ROA not before:           Thu 04 Jun 2026 20:26:01 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     206092
IP address blocks:        115.167.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11798 (0x2e16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  4 20:26:01 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21df59-7fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:51:15:e2:16:c1:4f:e5:4c:cf:6c:d1:f7:
                    e9:3d:1b:bb:92:66:da:a0:5c:3a:aa:0d:3f:85:cb:
                    5d:e5:ff:7b:f9:07:ad:4c:ac:bd:e3:04:64:b7:24:
                    3a:3c:ae:bd:50:49:81:e2:dc:57:76:51:e5:be:33:
                    84:e2:de:0a:b6:1d:b0:af:cb:c2:ff:9f:d2:aa:02:
                    c0:e6:fd:9b:c6:78:c6:43:7c:c9:cf:30:52:70:a4:
                    60:71:5c:8b:94:80:49:93:d3:b3:1d:b4:b0:39:38:
                    6f:1e:14:e4:cc:2e:e8:d4:e0:39:ae:cb:8f:83:38:
                    87:ee:b7:31:ff:2a:05:b2:40:0b:d8:1f:23:79:c2:
                    92:14:e5:72:dd:b3:dd:f7:3d:0d:1b:63:bc:54:f3:
                    11:fe:83:b4:04:c4:28:72:e7:23:c4:a6:49:42:8a:
                    60:b5:11:83:0d:5d:45:4b:27:a9:8c:d2:b3:47:e0:
                    c5:c9:7a:f6:2f:1b:d2:ae:79:33:60:13:2e:fd:c8:
                    8d:c3:eb:20:e1:6e:90:69:27:c2:46:70:e6:0b:11:
                    b4:4e:37:dc:8c:fb:d6:91:88:8e:35:04:23:df:cb:
                    1e:de:19:c1:0b:6b:64:9a:cd:8c:62:cc:1b:ba:f2:
                    65:f3:77:0a:23:45:3f:ca:c5:01:b1:48:b3:be:32:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5C:76:59:A9:05:3E:7F:6B:E7:F4:35:C6:68:49:3D:CF:EC:1D:4C
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF05145E3F0511F18151B5E0C9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:6a:4d:98:51:1d:e0:f1:28:1e:4b:8c:5e:3c:80:c3:4e:ff:
         45:84:ef:2a:53:3e:fc:3d:bf:cb:74:83:f7:7b:4e:4d:af:fb:
         50:39:4a:39:86:29:19:70:be:9a:52:9a:09:e6:22:b4:94:8c:
         30:40:29:5c:66:f8:92:99:cb:9f:cb:3c:47:8a:e1:29:1c:26:
         8d:17:eb:0a:a9:e0:8b:ad:4a:39:eb:e0:05:7e:40:79:8e:64:
         83:d5:03:b7:23:a8:51:d1:49:fa:d5:90:2a:f0:c6:66:43:0d:
         37:db:47:2b:92:2e:ca:3d:0b:52:99:ac:99:6c:4e:f0:c5:39:
         63:2b:90:cf:48:58:00:2f:21:1e:0b:b2:d6:85:eb:6a:88:75:
         56:75:44:1b:94:73:5d:76:a7:c9:0e:ad:22:09:ed:db:1c:e2:
         91:df:00:12:cc:b9:c7:ab:db:d0:cf:11:e3:06:e0:0a:de:34:
         83:2f:41:6f:07:7f:d5:35:28:d8:c7:16:f8:d9:d8:e9:7a:39:
         c7:7e:01:21:0e:9a:10:50:28:1f:95:c3:87:73:71:00:60:c4:
         c2:7d:56:f7:f9:ad:36:23:ee:40:52:02:9a:aa:24:7b:61:5d:
         c7:9d:b6:7f:2b:41:39:80:06:84:79:59:4d:fc:a4:b3:5d:e2:
         1a:d4:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:35 2026 by rpki-client