Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2A22A8C836FB11F08EBE4712C4F9AE02.roa
File:                     2A22A8C836FB11F08EBE4712C4F9AE02.roa (raw, json)
Hash identifier:          mSoyA724gtJ1uw9C8gu79wZltSogihyf3nxd4bfmTUE=
Subject key identifier:   C4:4A:13:29:18:3F:4F:24:9D:35:69:C4:AB:8F:DE:F3:EC:CC:BB:50
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2767
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2A22A8C836FB11F08EBE4712C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:07:25 +0000
ROA not before:           Mon 02 Jun 2025 21:07:25 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     51765
IP address blocks:        115.167.73.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          175.110.89.0/24 maxlen: 24
                          223.29.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 20:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10087 (0x2767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:25 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e128d-54b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:09:c2:bc:13:fa:03:e1:31:03:7b:21:7d:e0:
                    82:06:28:3b:c6:b8:77:49:6a:04:43:e3:ea:4a:6f:
                    1a:6a:cc:a0:bf:05:2c:b3:e2:95:b3:1d:4a:f2:e2:
                    50:4d:02:c9:59:43:e0:a2:84:62:c9:ba:1d:b3:bf:
                    de:d5:be:e6:26:01:09:cd:38:6c:62:0d:69:f5:a8:
                    53:9e:46:0f:5a:bd:4a:dd:7a:bd:60:d8:ac:4f:a9:
                    18:e9:ac:16:40:bd:1f:af:82:5f:59:af:3d:b7:4b:
                    3e:b9:eb:4f:70:ca:04:77:88:02:08:d8:72:7e:75:
                    d5:6b:c7:1c:8f:76:75:8d:16:d5:46:c8:1a:5a:6a:
                    12:76:24:a3:e8:21:c4:b1:10:ed:e5:a6:68:b2:30:
                    dd:bc:20:cf:ef:ba:2a:ed:c1:4e:6b:44:02:85:60:
                    dd:b7:49:03:e0:7f:d8:3a:80:6a:ec:70:51:28:c1:
                    3a:e5:02:6a:e4:5d:c2:3c:37:3e:a8:b7:28:a7:4d:
                    7e:3a:49:88:9f:ca:5c:cc:3d:7a:e9:b9:42:41:b0:
                    31:19:a1:a6:6d:63:89:b3:8e:15:fd:7a:ca:42:02:
                    83:24:59:e6:6d:bd:3c:db:2c:3c:0a:18:79:b4:6d:
                    f2:d2:09:0c:28:6b:5f:8b:34:13:7a:a7:df:6c:01:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4A:13:29:18:3F:4F:24:9D:35:69:C4:AB:8F:DE:F3:EC:CC:BB:50
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2A22A8C836FB11F08EBE4712C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.73.0/24
                  115.167.78.0/24
                  175.110.89.0/24
                  223.29.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:4e:0a:28:6f:b0:64:38:1a:18:8e:25:e4:71:3d:33:96:7d:
         12:0b:34:90:ea:b0:f3:37:23:be:b3:4e:43:a8:b9:47:fd:7e:
         c0:fa:9e:54:90:11:44:62:ef:f1:69:ea:b7:c4:35:bb:de:4d:
         34:8e:fc:20:5d:6f:00:24:25:8a:61:9b:4d:0e:98:d0:74:0b:
         21:37:ea:88:be:0e:3e:af:ec:69:5a:36:94:a4:ce:00:a7:80:
         5e:65:d0:1d:dc:1c:0d:0d:fb:ae:06:07:16:4e:92:6b:09:cc:
         d8:ed:16:99:92:17:19:34:ac:01:1b:da:f2:0e:0f:0e:54:96:
         0c:a4:37:74:80:55:76:3e:21:c8:43:6b:87:b1:2b:c1:12:2b:
         6e:7b:f0:f4:5e:58:d4:46:9d:49:09:3f:ac:5d:8a:d7:a4:02:
         2b:75:43:0e:6e:59:71:e5:9b:8b:e9:6a:aa:b3:54:07:72:0d:
         06:81:85:62:dd:51:d6:6e:9c:65:f9:3d:be:a2:32:5e:0e:4a:
         54:84:49:54:bf:ad:51:79:39:e0:41:4a:2a:74:c5:26:3e:39:
         98:74:24:7e:c9:3a:56:0b:93:53:7e:c6:f7:07:70:48:9a:b1:
         7d:3a:d2:87:ef:47:0e:e7:81:42:18:44:be:b2:34:df:cc:37:
         28:33:93:0e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICJ2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwNjAyMjEwNzI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNlMTI4ZC01NGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3AnCvBP6A+ExA3shfeCCBig7xrh3SWoEQ+PqSm8aasygvwUss+KVsx1K8uJQ
TQLJWUPgooRiybods7/e1b7mJgEJzThsYg1p9ahTnkYPWr1K3Xq9YNisT6kY6awW
QL0fr4JfWa89t0s+uetPcMoEd4gCCNhyfnXVa8ccj3Z1jRbVRsgaWmoSdiSj6CHE
sRDt5aZosjDdvCDP77oq7cFOa0QChWDdt0kD4H/YOoBq7HBRKME65QJq5F3CPDc+
qLcop01+OkmIn8pczD166blCQbAxGaGmbWOJs44V/XrKQgKDJFnmbb082yw8Chh5
tG3y0gkMKGtfizQTeqffbAHd8wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFMRKEykY
P08knTVpxKuP3vPszLtQMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMkEyMkE4Qzgz
NkZCMTFGMDhFQkU0NzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABzp0kDBABzp04DBACvblkDBADfHe0wDQYJKoZIhvcNAQEL
BQADggEBALpOCihvsGQ4GhiOJeRxPTOWfRILNJDqsPM3I76zTkOouUf9fsD6nlSQ
EURi7/Fp6rfENbveTTSO/CBdbwAkJYphm00OmNB0CyE36oi+Dj6v7GlaNpSkzgCn
gF5l0B3cHA0N+64GBxZOkmsJzNjtFpmSFxk0rAEb2vIODw5UlgykN3SAVXY+IchD
a4exK8ESK2578PReWNRGnUkJP6xditekAit1Qw5uWXHlm4vpaqqzVAdyDQaBhWLd
UdZunGX5Pb6iMl4OSlSESVS/rVF5OeBBSip0xSY+OZh0JH7JOlYLk1N+xvcHcEia
sX060ofvRw7ngUIYRL6yNN/MNygzkw4=
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:21:26 2025 by rpki-client