Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F56C311C642B11F18DC8F93C6347A888.roa
File:                     F56C311C642B11F18DC8F93C6347A888.roa (raw, json)
Hash identifier:          Z0f+ktBhzj+1bMEhGEJoFcF0FtDg4dU/oXO4Wm78Tyc=
Subject key identifier:   C0:14:9D:4B:DC:E6:C3:CA:35:7E:3B:6E:2D:85:40:31:CB:98:94:5A
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E31
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F56C311C642B11F18DC8F93C6347A888.roa
Signing time:             Tue 09 Jun 2026 17:54:33 +0000
ROA not before:           Tue 09 Jun 2026 17:54:33 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     60117
IP address blocks:        115.167.96.0/22 maxlen: 22
                          115.167.104.0/22 maxlen: 22
                          202.92.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11825 (0x2e31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  9 17:54:33 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a285359-4281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:05:ee:24:0d:96:4a:83:78:59:40:ab:5e:
                    96:65:b3:60:4d:80:22:df:da:a1:c8:ca:ab:b2:97:
                    09:12:85:54:1b:a6:85:a5:49:e1:38:bd:a6:ae:30:
                    af:83:1f:86:55:1f:43:87:d9:57:7b:2c:15:40:55:
                    b8:40:55:1a:d2:8f:a2:8f:5c:a8:04:ce:66:38:da:
                    d5:1f:da:9b:55:7b:c7:96:f7:3b:d1:9d:fe:f3:89:
                    07:10:9e:24:bf:fc:9a:42:fe:cd:d2:93:2c:d2:50:
                    1b:ed:7c:be:1c:e9:9f:fb:c6:51:41:17:c3:cb:69:
                    f4:48:78:4b:c3:92:a6:3c:0c:a3:dd:73:62:01:7e:
                    d6:da:47:69:c3:f8:5f:5c:1c:19:7d:e7:33:4c:1b:
                    21:65:75:a8:a0:ec:ee:b4:4b:c1:3d:81:15:de:dd:
                    ee:34:e7:92:b9:53:ae:98:16:f1:45:e3:74:67:32:
                    65:db:a9:67:8b:ab:c2:0e:05:72:d9:a0:1e:e7:73:
                    bc:09:24:9c:0f:1d:27:5b:41:2a:fb:2a:e7:19:24:
                    ab:ac:57:5d:be:1d:9d:e2:36:75:0f:6a:34:bc:17:
                    d7:a8:7c:27:2b:76:bb:db:d7:e4:10:3b:4b:47:8b:
                    96:87:6c:74:ed:f7:f6:3a:d4:5b:1f:19:71:5a:85:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:9D:4B:DC:E6:C3:CA:35:7E:3B:6E:2D:85:40:31:CB:98:94:5A
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F56C311C642B11F18DC8F93C6347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.96.0/22
                  115.167.104.0/22
                  202.92.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:cb:d1:b0:87:91:44:17:c5:15:43:e8:72:92:ed:66:29:f0:
         9c:20:93:03:1a:8d:26:65:a9:7f:bf:2a:6d:59:c8:31:9d:62:
         26:64:0b:12:e2:f9:15:52:3c:70:44:f1:fd:6a:63:1a:b0:9d:
         04:e6:ec:b6:c9:9d:00:67:07:74:e5:82:17:58:6d:8c:e6:f7:
         54:e5:57:79:87:e7:a9:16:5c:a0:2d:42:e3:51:4b:95:d6:e8:
         74:10:ac:74:11:e8:46:77:1f:66:91:fa:95:0d:5a:61:1b:c5:
         15:48:33:fa:78:59:54:e2:b9:cd:53:01:1e:6c:b3:df:c4:dc:
         51:a8:dc:ee:ae:f2:36:c6:b2:72:13:c6:da:10:3b:ef:88:f2:
         51:ae:8e:3c:b5:57:dd:de:61:62:6f:b3:32:e9:a1:79:cd:25:
         b9:67:2e:45:4b:7a:b3:66:29:76:ec:49:2c:54:10:66:07:6e:
         0b:63:2a:1d:01:1d:d0:14:cf:22:fa:07:35:51:24:c6:31:17:
         18:50:bc:e4:68:51:59:37:30:0d:99:3e:65:45:de:06:a6:7b:
         32:3d:46:d8:bb:21:6c:24:b8:d3:6d:7e:de:af:64:5c:8e:50:
         8d:73:87:b1:05:d1:71:83:cf:08:fd:dd:6d:6c:62:ef:d8:76:
         1b:3f:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:55 2026 by rpki-client