Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/467CB10AA02611F098F0483CC4F9AE02.roa
File:                     467CB10AA02611F098F0483CC4F9AE02.roa (raw, json)
Hash identifier:          ko3yORzYl3Jya3roph7oTevxkPdoOS2bPCeX2o0bXEU=
Subject key identifier:   7B:06:C4:C5:20:27:1A:27:93:C0:06:E9:03:70:FA:E6:69:ED:C6:1F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2A12
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/467CB10AA02611F098F0483CC4F9AE02.roa
Signing time:             Fri 03 Oct 2025 06:57:50 +0000
ROA not before:           Fri 03 Oct 2025 06:57:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     43260
IP address blocks:        115.167.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10770 (0x2a12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct  3 06:57:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68df73ee-eb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:2d:db:22:66:68:a8:30:5c:6d:7e:d1:ad:
                    46:ce:64:e3:c0:b7:09:5a:1a:34:3a:83:a2:d5:82:
                    de:68:41:56:69:5d:7e:4e:30:05:18:6e:8f:2c:c5:
                    aa:86:3c:27:41:8e:07:38:8e:62:00:ad:be:d0:e5:
                    13:ae:47:c6:c2:d1:b1:32:0f:e8:51:7e:d9:c3:a0:
                    f7:72:24:40:8e:9b:1c:33:ab:a0:8d:84:a7:eb:69:
                    f3:22:1c:2c:f4:bc:21:e8:21:fc:85:ef:7f:aa:f5:
                    79:7f:da:dc:4a:3a:3e:43:d8:37:09:46:a0:e8:0c:
                    28:33:8d:32:ee:d2:9e:95:a1:01:2b:34:53:62:c0:
                    ff:1d:be:66:d7:8c:30:a8:af:ae:61:72:6f:ff:9c:
                    d5:01:96:84:4e:5b:bc:09:6c:f5:3d:7c:e1:ae:8b:
                    80:42:a1:06:db:c7:fc:c6:11:43:9a:b4:25:d7:8e:
                    32:dc:f9:6c:57:3e:0a:d7:dc:c5:a1:1a:6e:e0:1b:
                    cf:d4:5e:d2:42:88:4a:3c:b4:99:2c:8b:01:88:b3:
                    3b:be:a0:52:6f:56:63:3f:0b:b7:16:c1:0b:c4:50:
                    ca:3d:96:37:06:ca:bb:c9:56:27:d6:36:b3:af:93:
                    41:66:47:66:02:ba:c5:7b:b5:d9:ce:67:75:5c:60:
                    ac:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:06:C4:C5:20:27:1A:27:93:C0:06:E9:03:70:FA:E6:69:ED:C6:1F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/467CB10AA02611F098F0483CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:fc:3d:62:93:5e:e1:68:c6:4a:d5:7f:de:cd:5d:29:bf:
         93:63:04:4e:a7:fa:dd:de:19:18:e8:ad:f8:f1:9c:dd:a8:af:
         0c:73:56:d5:25:1d:19:0e:3e:b8:67:b4:0e:7d:b7:34:95:32:
         81:1b:45:66:43:81:9f:2e:75:33:ca:86:3b:a7:7e:99:5d:35:
         f5:81:aa:38:89:6d:df:c0:ac:cb:c1:a1:f0:42:c8:94:60:e9:
         5d:f5:eb:b5:f6:24:65:c2:69:cb:31:9e:47:d1:19:dd:24:5b:
         64:7f:40:38:98:d9:9f:8d:9e:1e:0c:a5:31:b7:9c:ac:36:47:
         57:cd:0c:0c:0a:4a:cf:ec:16:d4:27:85:a4:6a:01:10:34:19:
         0f:39:7e:48:58:8a:a4:91:47:02:11:27:ef:e3:dc:ea:80:f2:
         eb:db:19:a7:25:ca:26:7d:84:9c:78:10:1f:f9:11:12:f3:0b:
         d4:d7:93:8d:32:f5:e7:0a:5d:46:9a:4c:83:d8:f5:d5:80:4c:
         09:ca:d9:25:1b:3f:25:ca:19:8b:5f:55:da:59:ca:83:6d:70:
         43:82:e5:a4:6c:f3:0d:18:28:1d:46:b6:6b:a5:ad:bf:27:61:
         d0:35:2e:5e:70:06:a7:44:5c:9e:7f:3d:e0:1f:69:0e:dc:87:
         0e:ac:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:50:13 2025 by rpki-client