Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E2B747084AA211F0AE2B5485C4F9AE02.roa
File:                     E2B747084AA211F0AE2B5485C4F9AE02.roa (raw, json)
Hash identifier:          h3yDzvwqqJPTpGAuAvkHBGTRjzBWVgacm6X/J1LKJhs=
Subject key identifier:   7F:48:63:9F:B4:4E:D1:61:E8:A3:FA:E0:E1:5E:CA:C7:15:34:D2:65
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       27D4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E2B747084AA211F0AE2B5485C4F9AE02.roa
Signing time:             Thu 19 Jun 2025 07:58:47 +0000
ROA not before:           Thu 19 Jun 2025 07:58:47 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     3561
IP address blocks:        103.11.68.0/22 maxlen: 24
                          115.167.10.0/24 maxlen: 24
                          175.110.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 07:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10196 (0x27d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun 19 07:58:47 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6853c337-1ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:39:f7:85:70:f1:cd:46:ed:9c:bb:64:38:3a:
                    03:e7:91:88:6c:92:97:14:3a:1a:be:8c:57:9a:c7:
                    5f:30:a1:61:66:f5:b1:42:72:a2:82:e7:1b:66:af:
                    c9:50:78:8c:e9:3c:2d:14:57:f4:83:80:51:c6:e6:
                    5b:24:d9:57:7c:06:1c:be:ce:f0:f7:25:d1:91:58:
                    ef:67:fa:0d:23:af:ea:c3:05:1b:d1:62:af:ea:a3:
                    7d:11:01:b4:40:f9:6d:2e:68:54:25:91:60:96:32:
                    a5:f7:c0:99:88:a1:7a:f2:e9:2b:00:6b:03:c1:35:
                    95:c7:13:b5:07:fd:ee:c3:ba:64:be:0e:4e:2a:da:
                    60:80:92:12:d3:64:52:64:8a:d8:55:3d:57:06:40:
                    04:00:dd:b4:39:19:08:a8:e0:d2:4f:05:ea:66:8f:
                    01:c6:06:41:fc:55:73:d5:77:9d:e7:be:54:6e:b9:
                    c3:36:94:72:42:bc:7c:da:bb:c6:35:d8:6f:30:e9:
                    11:fd:bd:33:51:3c:3b:0c:78:2f:e7:79:d8:09:63:
                    4b:4d:f2:8c:f5:60:da:d8:8b:1f:95:c6:6e:f5:75:
                    5e:86:2d:31:5e:73:4b:d2:2c:45:82:5f:97:a7:df:
                    69:ea:22:c8:bb:d5:72:9a:f7:10:7f:6a:2d:cd:ad:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:63:9F:B4:4E:D1:61:E8:A3:FA:E0:E1:5E:CA:C7:15:34:D2:65
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E2B747084AA211F0AE2B5485C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.68.0/22
                  115.167.10.0/24
                  175.110.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:2f:fe:57:38:4a:ab:7a:63:03:f5:33:d3:b2:eb:e6:2e:b4:
         1f:f1:b2:a9:99:6e:63:e5:d6:f8:50:e1:70:a9:5b:72:eb:f0:
         36:2b:a0:bd:c8:ed:b6:ac:70:d1:4c:f3:a0:a8:e1:25:0d:9c:
         03:bb:17:91:ac:19:f1:90:af:d4:7d:60:c2:2f:27:53:13:3e:
         e4:57:bc:cc:fd:57:59:d2:62:8b:9e:b0:ff:63:ad:e5:3a:f0:
         a2:da:9b:4e:68:dd:3e:6d:e6:f2:aa:d8:70:b0:0e:7c:f5:c8:
         ec:45:ba:55:f2:ac:0a:85:4a:fb:02:36:ac:6e:9a:82:90:93:
         51:27:7f:a6:9e:3e:40:a4:ca:5b:3a:9a:af:f2:0d:f6:53:b8:
         00:89:b7:62:8d:16:c2:f6:fa:9e:04:29:10:d8:f3:84:d0:ca:
         6b:56:e4:35:56:90:29:10:0a:be:9a:53:3e:73:5e:33:20:85:
         24:f0:54:c2:2f:b6:1a:27:9d:f0:a0:a6:2d:01:d3:dd:54:e5:
         72:fe:0b:4a:83:b0:56:b7:e4:29:4c:0d:08:13:5f:52:a7:f6:
         fd:fe:77:1c:79:b4:2c:b1:ab:4f:9c:95:31:62:17:87:ba:5b:
         70:04:20:59:54:86:f9:6a:ce:9d:f6:80:b8:34:f5:e7:24:59:
         e2:89:1a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:21:47 2025 by rpki-client