Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EB267A60A8C311F0AE780647C4F9AE02.roa
File:                     EB267A60A8C311F0AE780647C4F9AE02.roa (raw, json)
Hash identifier:          clgeuBKKny/+rNY3Xfc73ia6iGB5a6tiSeScGtILOOY=
Subject key identifier:   48:C1:C2:E3:23:1C:CA:BF:AA:18:DD:37:B6:A7:18:B4:96:A5:A1:B7
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2A2E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EB267A60A8C311F0AE780647C4F9AE02.roa
Signing time:             Tue 14 Oct 2025 06:06:27 +0000
ROA not before:           Tue 14 Oct 2025 06:06:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     396073
IP address blocks:        223.29.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10798 (0x2a2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct 14 06:06:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68ede862-a499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:00:5a:c4:e4:05:bf:00:83:ba:0a:bf:55:
                    12:df:75:e2:7e:01:36:f5:64:91:4e:2b:5e:80:43:
                    07:d9:2f:0d:32:cd:f1:61:40:13:9a:69:6f:d1:7e:
                    76:60:82:72:fa:5e:4a:51:a2:c7:74:19:72:c8:4c:
                    a4:f4:82:d6:c7:79:19:09:97:90:db:af:6b:59:9f:
                    ff:6b:e8:20:f1:78:8f:f1:2e:80:15:6d:ac:42:69:
                    9b:7d:22:9b:8d:62:48:4e:39:12:70:81:b4:b5:f6:
                    ff:3c:c2:fc:9c:99:3c:eb:32:97:c9:51:2b:3c:20:
                    c2:42:74:c0:6e:69:57:53:43:0a:ee:71:d5:02:1c:
                    d3:9d:03:8d:55:aa:dc:88:81:51:f4:2b:3e:72:4f:
                    dd:b2:d6:76:34:1a:41:dc:ed:e7:77:dc:02:8a:45:
                    84:9c:ca:ed:9d:5c:4a:54:bc:d3:4b:20:3c:22:3c:
                    35:a6:01:46:d6:d5:b6:9f:40:3c:30:20:5a:da:a7:
                    21:75:85:16:b6:4c:8b:e2:68:f4:b6:f7:95:d6:57:
                    21:28:d0:b6:ce:a9:13:ab:82:33:aa:fd:b2:de:65:
                    79:b7:2b:66:dd:90:51:39:88:b4:93:34:d3:d1:71:
                    df:f9:07:e6:e5:13:d2:89:fa:f3:7b:74:37:0f:1c:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C1:C2:E3:23:1C:CA:BF:AA:18:DD:37:B6:A7:18:B4:96:A5:A1:B7
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EB267A60A8C311F0AE780647C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:08:9b:b4:f9:d4:55:b5:de:87:e7:c8:7b:fb:6e:ee:99:2d:
         46:ff:73:09:01:68:f7:31:b8:02:5d:47:6e:34:7a:e9:0e:15:
         d9:9a:ed:13:fb:d1:27:42:bc:7e:35:e2:f2:a4:22:6b:d2:00:
         7c:39:ac:e6:99:23:07:03:57:88:4c:3b:17:66:8b:0d:7f:a9:
         d0:3f:46:4a:e5:c0:49:f1:97:88:a3:b4:81:28:bb:5c:75:e9:
         55:12:17:fa:66:7f:61:d5:bb:0e:c0:e9:9e:f1:1a:e1:4c:e2:
         85:cd:c7:c9:84:be:67:f5:b6:04:10:0f:e4:f4:1b:96:e8:2b:
         57:c1:5e:2e:cc:4f:29:27:e1:ff:d2:b3:17:f3:0f:37:66:df:
         ff:44:fe:5e:34:fb:8a:4a:7f:8b:81:8c:65:1f:d7:0f:b3:ff:
         c8:5a:f8:e7:c9:87:01:05:13:30:37:ce:bc:33:c9:54:e5:ad:
         0a:a9:8e:8f:74:17:e1:8a:7a:25:f4:9e:8c:fc:e8:d7:b2:89:
         74:54:ff:46:73:dd:8b:40:5b:7c:6d:48:68:dc:83:0d:3f:99:
         63:b2:49:2f:a1:2a:a4:c0:23:ed:2e:df:5c:da:63:c8:5d:e8:
         1c:59:27:92:e8:fa:4d:ee:d7:80:5d:cf:0a:31:36:ab:0f:87:
         c3:98:86:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:05 2025 by rpki-client