Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D8F7690E50C011F08D3C8186C4F9AE02.roa
File:                     D8F7690E50C011F08D3C8186C4F9AE02.roa (raw, json)
Hash identifier:          SGHfV64huJw7Lu6RfOS2KFC7JTFhD2ZTTcMF9LCAOW4=
Subject key identifier:   DE:21:AA:3F:A8:A3:67:CD:EC:85:2E:00:48:C8:18:63:30:25:04:2B
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       27DF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D8F7690E50C011F08D3C8186C4F9AE02.roa
Signing time:             Tue 24 Jun 2025 06:02:45 +0000
ROA not before:           Tue 24 Jun 2025 06:02:45 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     213993
IP address blocks:        115.167.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 20:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10207 (0x27df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun 24 06:02:45 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=685a3f85-0957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:9e:02:1b:93:a2:b1:e5:1b:d2:1d:39:88:
                    03:fd:4d:cb:97:b4:f2:34:65:ca:37:cd:83:50:f7:
                    3e:5d:f8:92:24:7a:6c:dc:e8:7e:48:dc:5d:51:d0:
                    3f:3d:7a:9a:b2:96:89:0b:4b:7d:b6:92:2f:20:d3:
                    1f:73:a8:4a:60:e4:5c:4f:eb:68:0f:08:51:74:d8:
                    dc:9f:1d:9d:3b:ac:d7:4e:90:51:38:83:4e:74:37:
                    bd:b2:a2:b5:bf:db:c9:8b:6f:88:0f:ad:9c:0e:4f:
                    39:eb:77:5a:2d:b1:97:52:ff:a8:c7:53:fc:c9:87:
                    99:c4:41:99:9b:d0:44:12:e2:6c:c5:9a:b8:2a:11:
                    9f:32:7e:62:96:c8:98:66:a5:7a:8f:43:93:6a:fd:
                    cd:14:ac:91:0f:22:ee:cc:c6:86:88:48:3a:7d:5c:
                    11:0b:c2:33:80:fc:79:cc:41:b1:fd:5c:b5:55:94:
                    8b:02:90:48:85:61:4f:4b:bb:bd:3c:f0:b8:da:26:
                    dc:70:62:23:f9:66:ad:92:77:0b:f4:50:0d:4c:45:
                    e8:2b:1f:82:23:db:9e:37:fd:13:64:3b:a7:a8:c5:
                    45:71:b9:a4:fd:1d:df:59:78:79:26:8e:a3:f7:0a:
                    72:94:df:51:7b:5c:b5:85:40:3c:a1:86:9c:0b:a5:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:21:AA:3F:A8:A3:67:CD:EC:85:2E:00:48:C8:18:63:30:25:04:2B
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D8F7690E50C011F08D3C8186C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:64:06:8b:68:f9:06:34:f4:bb:3a:19:86:3e:08:d3:2b:43:
         5f:3d:fe:f7:d4:89:4b:57:33:bc:f1:99:36:83:c3:23:51:c1:
         92:b7:30:4a:9b:b1:a3:c5:70:75:09:fe:38:1a:2c:9a:60:fe:
         d9:04:00:c8:ec:39:28:f6:06:5c:0d:37:7d:e4:8b:1a:c7:5d:
         d2:30:25:9d:1c:fd:c4:18:c4:5a:71:1a:75:cd:34:64:21:cb:
         dd:98:57:a0:51:01:1a:9f:be:a7:ad:0b:b2:08:ce:72:f2:6a:
         29:18:b1:eb:ad:90:34:a2:7d:ee:28:15:83:18:36:f5:e6:25:
         88:ed:13:9e:13:a9:8a:94:88:4e:c2:9b:7d:62:32:23:0f:e2:
         71:3a:c4:52:67:07:b6:98:b5:33:51:7b:9d:31:b0:95:91:8b:
         8e:8f:18:4f:0c:e5:b4:3b:c7:a2:09:4e:b0:45:98:73:0e:7a:
         06:05:76:e5:44:76:94:63:8f:f9:e9:77:00:a6:71:a1:b0:ba:
         73:39:8b:b2:0f:a5:a6:4c:9f:2d:64:f2:83:a8:74:2a:0c:53:
         40:22:c3:d2:5d:59:74:89:98:9f:a2:f5:13:0e:20:0c:81:c5:
         9a:cd:81:48:c9:9d:46:32:4d:58:fc:d7:f3:80:04:88:9c:60:
         d9:9e:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:52:44 2025 by rpki-client