Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BA69F0CA7D9711F091A20D70C4F9AE02.roa
File:                     BA69F0CA7D9711F091A20D70C4F9AE02.roa (raw, json)
Hash identifier:          xdDka61rv5glCr6qG8c97YXk7sGJE9nEQFV2GgeUvFU=
Subject key identifier:   89:A8:AC:45:01:0C:FF:55:86:6F:96:8C:19:EF:B9:8F:AE:C8:7A:97
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2981
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BA69F0CA7D9711F091A20D70C4F9AE02.roa
Signing time:             Wed 20 Aug 2025 07:31:47 +0000
ROA not before:           Wed 20 Aug 2025 07:31:47 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     213441
IP address blocks:        115.167.64.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10625 (0x2981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Aug 20 07:31:47 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68a579e3-8d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:cc:20:95:01:93:ef:39:cd:7e:55:38:7f:
                    f9:3b:aa:7e:21:68:00:99:bc:e4:d3:dc:cc:93:c8:
                    40:4d:2a:67:ea:20:af:f9:18:36:25:13:d7:cc:af:
                    fd:6f:1a:01:f0:c9:d4:8e:1c:70:c3:87:cc:43:b9:
                    27:7c:a0:10:5c:7d:99:56:15:b8:62:83:17:13:ac:
                    de:8b:e7:2e:27:5a:fc:b4:59:01:37:67:ef:82:f7:
                    9a:41:91:bb:9d:04:77:be:78:55:f8:1b:72:0a:d8:
                    db:77:4c:76:3b:8d:7d:21:74:f2:e6:f7:3c:9d:72:
                    79:85:4d:90:e3:29:bf:aa:1c:dd:06:a3:d1:f3:a5:
                    94:01:ba:dc:1a:52:32:31:57:7e:37:48:5f:be:76:
                    da:95:d3:43:98:35:d7:1f:5d:36:d0:a8:cd:b7:75:
                    70:7b:6b:f5:6f:b6:46:54:01:53:63:09:58:7a:71:
                    4a:86:16:d2:87:c3:85:bc:fd:f1:3c:8a:81:c6:99:
                    c1:9e:db:96:72:b5:2f:f4:f3:20:7f:37:97:6d:c1:
                    e3:11:e9:0b:73:83:a6:0a:f3:c6:73:e4:ce:69:96:
                    5a:1e:16:7c:b0:83:c3:85:bc:b0:da:5a:b9:2a:3e:
                    d0:e4:60:76:d1:10:66:70:24:98:2b:09:51:9a:39:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A8:AC:45:01:0C:FF:55:86:6F:96:8C:19:EF:B9:8F:AE:C8:7A:97
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BA69F0CA7D9711F091A20D70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.64.0/24
                  223.29.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:95:73:e4:50:f7:17:d1:67:e0:53:31:6b:c8:4e:31:53:c9:
         7f:00:0d:8c:dc:d2:d2:9c:82:87:db:2c:9f:b0:c8:14:ab:a7:
         dd:f5:2f:3d:81:20:bc:70:18:49:58:ab:9b:0d:96:98:6d:cf:
         66:ab:19:68:ea:74:5d:7a:46:96:ef:b1:e2:6f:69:10:63:bd:
         6e:85:81:af:a7:e9:43:09:61:b4:5c:11:2c:96:c8:c5:04:9c:
         28:db:89:5b:e3:49:8f:3d:1e:57:c6:21:23:d1:df:56:5b:c4:
         72:d3:4c:1a:bb:df:73:9a:fc:8e:c8:86:f2:c1:0f:a3:2a:69:
         94:0d:d3:7b:c3:cf:2a:52:ea:78:2c:c2:20:1b:35:b8:3b:9e:
         2e:31:d1:a8:b9:6c:90:09:d3:bf:98:6d:95:3f:c6:65:92:42:
         d4:93:14:fc:31:17:43:42:58:1b:08:60:e0:f8:a3:b8:1a:c1:
         b3:87:8e:d4:09:87:a2:e6:85:09:d6:db:2d:96:2f:03:5b:72:
         a0:66:61:47:78:66:4c:9b:7c:1d:e1:fa:c1:ea:09:e6:e1:32:
         47:50:c3:57:f1:ce:7c:d5:25:c1:3c:3f:6e:f1:88:f1:27:1f:
         33:1a:17:29:7e:c9:ef:98:69:a3:4d:e9:35:68:4c:25:55:76:
         fd:d5:ce:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:25 2025 by rpki-client