Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BB1317547D9711F091A20D70C4F9AE02.roa
File:                     BB1317547D9711F091A20D70C4F9AE02.roa (raw, json)
Hash identifier:          iVVkL+LScEXPDNnsmol53aToR9cVOGbra/KdEbLmqic=
Subject key identifier:   17:02:21:74:A3:A8:96:02:60:27:81:04:F8:D5:0E:7E:C4:A5:9C:C0
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2982
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BB1317547D9711F091A20D70C4F9AE02.roa
Signing time:             Wed 20 Aug 2025 07:31:48 +0000
ROA not before:           Wed 20 Aug 2025 07:31:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     60721
IP address blocks:        115.167.76.0/24 maxlen: 24
                          175.110.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10626 (0x2982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Aug 20 07:31:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68a579e4-42b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:86:ba:12:41:f2:89:cb:1a:0e:b1:36:d1:
                    35:8d:e4:1c:5d:83:d9:64:6c:17:12:52:f1:4e:23:
                    37:17:fb:31:c7:5d:56:65:a7:67:55:4f:b3:0b:3d:
                    88:13:5a:0a:b4:cb:fc:36:a1:6e:fb:fc:76:90:1e:
                    24:65:75:b9:de:70:bf:2b:53:31:76:a2:0f:73:31:
                    a8:49:77:fc:af:57:b8:66:59:f5:0d:91:f4:d3:fa:
                    d0:39:f4:7b:93:b4:09:77:50:19:f1:90:83:5c:bd:
                    75:95:d6:22:1a:7c:5e:f4:7f:99:77:90:ac:44:10:
                    2c:df:42:a4:74:0b:b5:ba:ba:fd:ec:54:b1:10:e3:
                    b1:b4:65:6f:4f:e3:05:f3:23:cd:1b:95:14:47:36:
                    a4:a9:98:68:0c:09:8e:64:7b:29:63:86:91:3a:af:
                    fa:94:3b:8a:50:aa:d9:d1:fe:db:be:db:fd:6b:98:
                    5c:94:c9:68:38:c9:60:1e:53:a5:53:2b:63:eb:77:
                    bf:a6:09:60:74:00:50:59:e6:c2:e6:77:79:a6:ad:
                    68:cb:7f:ca:0c:f8:4f:0e:f6:35:50:39:a4:db:8d:
                    aa:56:94:22:a7:5c:07:50:86:7c:a1:8d:22:81:3a:
                    8b:aa:e2:8b:79:d6:41:c6:5a:6c:03:fe:62:ae:ac:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:02:21:74:A3:A8:96:02:60:27:81:04:F8:D5:0E:7E:C4:A5:9C:C0
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BB1317547D9711F091A20D70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.76.0/24
                  175.110.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:16:aa:44:cc:9e:d0:2a:b0:25:b3:d3:7b:19:62:d7:d4:98:
         aa:33:c7:b3:9e:14:11:a8:60:ab:bb:be:3a:5c:ed:cd:14:78:
         b5:52:bc:49:f0:69:de:34:35:2b:03:88:51:cd:b4:74:af:4c:
         50:db:a1:8b:45:3e:a1:95:b8:85:7a:a9:a9:69:86:41:0d:3e:
         42:96:7f:62:17:fe:9d:71:e9:e7:fc:aa:e3:39:7e:aa:13:6a:
         ad:4b:bf:a3:91:6e:43:12:c5:98:7a:1d:bc:c5:73:0b:13:b9:
         c2:d3:90:16:1e:9d:b9:74:f5:ca:6e:8a:d5:d0:bd:95:fa:87:
         b4:d6:dc:18:c3:a1:9b:05:c5:27:3b:2f:06:a5:39:74:f7:1a:
         7d:24:a0:8f:0d:e1:06:0b:73:03:8f:2f:e7:7a:af:53:fe:e4:
         8c:bf:f2:c3:0a:01:a8:f7:20:41:53:98:73:38:6c:c7:f4:11:
         cf:8c:73:8b:b1:46:3a:db:f1:50:74:dd:b2:3a:f8:4e:77:6c:
         cb:6e:49:5f:ba:f9:b5:ec:90:29:53:e5:29:7e:4d:eb:0d:5f:
         6e:1d:8b:a4:86:09:c5:8e:4c:a7:d4:50:49:ca:78:ff:36:08:
         58:39:cb:e2:ad:fa:59:f5:19:8d:eb:d8:e8:d1:c6:94:fc:51:
         b9:6a:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:30 2025 by rpki-client