Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0EE6EDE4767A11F0B680DC45C4F9AE02.roa
File:                     0EE6EDE4767A11F0B680DC45C4F9AE02.roa (raw, json)
Hash identifier:          EiYJ1DhkRyfqhpls2BVrHqeGpkk8s/4Ie6lL6Qaz4c8=
Subject key identifier:   9B:37:D0:05:D9:D3:53:D3:C6:7D:F3:C4:3F:FA:20:95:75:9E:1B:6D
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2954
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0EE6EDE4767A11F0B680DC45C4F9AE02.roa
Signing time:             Mon 11 Aug 2025 06:11:46 +0000
ROA not before:           Mon 11 Aug 2025 06:11:46 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58212
IP address blocks:        115.167.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10580 (0x2954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Aug 11 06:11:46 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=689989a1-f638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:36:13:e8:d3:93:4a:7d:4b:26:bd:a3:31:
                    21:a4:6b:39:3c:f2:e7:3a:f9:de:77:94:3d:a8:b5:
                    80:89:c5:58:af:d9:0a:ce:6e:e1:55:e5:47:64:a5:
                    9f:e0:2f:5d:37:be:b3:4b:4e:df:61:dc:e6:1b:4e:
                    b4:eb:1c:9d:f0:ec:67:df:2a:51:bc:f6:3c:24:2e:
                    b0:24:e7:66:ac:5b:94:dd:23:ac:27:5f:7a:68:d8:
                    4e:9a:b9:ce:07:3b:77:f4:b0:d6:98:c2:c1:be:3b:
                    04:7f:db:9c:be:0e:04:0c:03:ee:b9:49:23:7b:55:
                    3b:24:48:cc:61:91:04:db:4d:c4:cf:57:0c:93:f6:
                    65:21:40:86:a9:68:87:d5:28:cd:a4:f3:8c:55:53:
                    9c:3d:ea:5b:68:e8:0f:04:7a:b5:02:5a:22:49:a8:
                    29:32:da:ae:a2:23:ce:a5:e8:ec:69:23:20:e0:5c:
                    97:5f:25:40:f4:99:c9:38:0a:42:01:46:b6:4c:0d:
                    08:b8:e3:52:40:a5:c9:fb:90:16:1a:62:1a:a4:b2:
                    24:05:ac:3c:d5:ea:e2:10:90:e4:a2:9b:ac:46:e4:
                    40:90:12:79:be:70:80:e1:e4:c1:7e:a2:24:c2:49:
                    75:3e:69:4c:16:ce:57:7e:72:40:81:cc:30:6d:88:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:37:D0:05:D9:D3:53:D3:C6:7D:F3:C4:3F:FA:20:95:75:9E:1B:6D
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0EE6EDE4767A11F0B680DC45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:da:39:86:c8:24:b5:17:89:18:53:e4:5b:9d:d8:4b:47:aa:
         a9:42:da:2f:2f:f2:7f:6f:41:69:01:9b:37:33:3d:56:dc:ba:
         4a:ee:1f:69:ea:5d:d1:62:1e:5b:4b:c4:f0:fd:e8:e8:fd:00:
         29:f2:e2:1c:f5:3d:6e:07:d0:5b:a3:b2:2d:e0:28:10:04:75:
         19:5e:85:c4:6f:2e:ea:2f:b3:e0:e0:9e:72:11:3c:c7:15:55:
         15:73:cf:28:8f:19:90:e0:a7:4f:5c:63:b1:86:3d:06:3c:1e:
         61:5b:74:7c:91:44:da:c3:1e:21:6d:9c:5d:42:e7:e9:d5:57:
         c0:ce:13:95:db:14:b0:0d:ac:53:cb:26:f0:97:28:1e:81:c9:
         54:f9:1a:d5:92:cc:8a:1f:4f:d9:ac:76:25:8f:32:3d:f5:8e:
         b5:ae:0c:77:3e:7d:2a:ba:d3:09:06:e6:f7:75:34:96:ca:63:
         d2:37:b1:0f:d1:9a:0c:f2:b9:24:77:f7:6d:22:42:f9:a6:8f:
         51:40:ec:f4:5b:d6:b0:47:4f:fb:48:ef:34:d6:f6:df:b5:fc:
         ec:b6:10:91:be:3a:68:88:5a:6c:be:2e:2d:24:90:2f:8a:ae:
         10:78:04:66:15:24:e5:4f:10:5d:57:7b:c7:9d:0a:4b:35:a5:
         42:41:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:57:35 2025 by rpki-client