Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A35A9CCB5AF11F18DE722603B11F970.roa
File:                     6A35A9CCB5AF11F18DE722603B11F970.roa (raw, json)
Hash identifier:          qPau/O5Ey2mdbTn8gdZKX8+eGx/furrTbVtqDSGcOg0=
Subject key identifier:   53:E1:55:BF:C6:88:09:EA:2B:4F:1C:A7:08:A4:AA:D0:12:DD:BB:97
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2F52
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A35A9CCB5AF11F18DE722603B11F970.roa
Signing time:             Mon 21 Sep 2026 11:27:23 +0000
ROA not before:           Mon 21 Sep 2026 11:27:23 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     197328
IP address blocks:        113.203.210.0/24 maxlen: 24
                          113.203.218.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.51.0/24 maxlen: 24
                          175.110.99.0/24 maxlen: 24
                          180.178.171.0/24 maxlen: 24
                          180.178.176.0/22 maxlen: 22
                          180.178.187.0/24 maxlen: 24
                          180.178.188.0/24 maxlen: 24
                          180.178.189.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24
                          180.178.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12114 (0x2f52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Sep 21 11:27:23 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ab1149b-e29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:d4:01:5e:71:2a:65:82:54:7b:b1:7e:ea:
                    fb:2c:df:cb:98:b9:d2:3c:82:ee:2d:b7:90:41:bc:
                    84:0d:06:dd:41:63:05:e0:8a:b7:cc:8d:c7:de:9f:
                    2e:85:49:25:1d:87:97:6f:7a:32:dd:c6:ca:ad:e3:
                    8f:a6:10:e5:45:18:0e:bb:45:4b:86:c3:37:ec:6f:
                    ab:02:5f:e5:0a:88:df:bf:f8:2e:5b:57:0b:92:5e:
                    af:19:25:e1:ec:b9:d8:6d:a8:a7:ec:20:e5:6d:c9:
                    d4:32:06:3d:7b:5f:0f:90:fd:16:96:ef:96:b4:1e:
                    67:53:08:2a:cc:96:c3:a8:be:d2:41:85:d7:1b:95:
                    4d:74:76:f0:59:ed:19:1c:1c:9f:b1:2b:86:b2:81:
                    d4:5e:68:88:d1:b1:61:c1:8e:98:06:d2:f6:5b:d2:
                    a0:c7:e3:6e:de:99:83:9d:a6:fe:60:4a:e9:f2:21:
                    5e:f8:ae:d6:f4:65:37:64:6a:e8:b9:4b:40:5b:a8:
                    da:90:86:ba:c6:5e:38:83:26:26:55:29:ed:1d:fe:
                    5e:e2:bc:5f:47:80:bd:c4:95:ee:e7:98:c6:11:80:
                    01:22:fd:ee:69:4c:8c:da:0e:fa:ed:1e:4d:7b:c1:
                    84:4e:76:dd:8b:1a:54:bb:c3:24:4f:0d:d4:9b:9e:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E1:55:BF:C6:88:09:EA:2B:4F:1C:A7:08:A4:AA:D0:12:DD:BB:97
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A35A9CCB5AF11F18DE722603B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.210.0/24
                  113.203.218.0/24
                  113.203.222.0/24
                  115.167.50.0/23
                  175.110.99.0/24
                  180.178.171.0/24
                  180.178.176.0/22
                  180.178.187.0-180.178.191.255

    Signature Algorithm: sha256WithRSAEncryption
         9d:82:7f:b3:d5:70:53:b0:02:86:d0:68:78:1d:4e:3b:ad:af:
         9d:a6:08:aa:d6:26:4e:e0:57:34:fd:c0:2b:bf:18:e4:20:6e:
         4a:30:a3:2b:11:bd:81:fd:30:7f:34:5d:4a:5f:bd:0d:d2:37:
         cd:27:81:ec:13:a4:9b:e4:c2:54:6c:a3:e6:c6:5d:2a:38:69:
         0b:e6:98:f2:b3:9d:0b:4b:e3:ff:2c:10:02:0f:6d:38:1a:e7:
         8f:d4:a4:93:f7:5f:73:30:34:9d:c5:4d:55:0c:5e:12:8d:a4:
         66:bc:d2:75:f8:5b:67:2c:27:3a:84:13:d8:5d:08:05:5f:6c:
         a4:67:a1:67:19:90:97:74:ac:b7:08:ea:5b:f9:09:dd:75:57:
         22:f6:90:dc:09:c7:c0:25:a8:9d:9f:b0:d0:60:4d:62:06:b0:
         c6:48:9f:3f:f2:25:d8:45:53:53:2a:5f:fd:34:ce:41:c8:a4:
         ae:37:1f:f2:ca:cb:2d:55:8c:12:2d:41:49:da:20:18:bb:5a:
         c1:31:76:6e:1e:87:51:a0:df:7a:2b:63:b9:3f:35:58:f0:60:
         c2:23:36:cb:04:d6:8b:f8:24:09:60:62:87:88:72:8d:b6:75:
         2a:80:22:6c:3b:de:ce:ea:76:a7:cc:d1:f3:8a:c5:f9:33:14:
         da:0b:d2:12
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgICL1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjYwOTIxMTEyNzIzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIxMTQ5Yi1lMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQHUAV5xKmWCVHuxfur7LN/LmLnSPILuLbeQQbyEDQbdQWMF4Iq3zI3H3p8u
hUklHYeXb3oy3cbKreOPphDlRRgOu0VLhsM37G+rAl/lCojfv/guW1cLkl6vGSXh
7LnYbain7CDlbcnUMgY9e18PkP0Wlu+WtB5nUwgqzJbDqL7SQYXXG5VNdHbwWe0Z
HByfsSuGsoHUXmiI0bFhwY6YBtL2W9Kgx+Nu3pmDnab+YErp8iFe+K7W9GU3ZGro
uUtAW6jakIa6xl44gyYmVSntHf5e4rxfR4C9xJXu55jGEYABIv3uaUyM2g767R5N
e8GETnbdixpUu8MkTw3Um57KrwIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFFPhVb/G
iAnqK08cpwikqtAS3buXMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNkEzNUE5Q0NC
NUFGMTFGMThERTcyMjYwM0IxMUY5NzAucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+
BAIAATA4AwQAccvSAwQAccvaAwQAccveAwQBc6cyAwQAr25jAwQAtLKrAwQCtLKw
MAwDBAC0srsDBAa0soAwDQYJKoZIhvcNAQELBQADggEBAJ2Cf7PVcFOwAobQaHgd
Tjutr52mCKrWJk7gVzT9wCu/GOQgbkowoysRvYH9MH80XUpfvQ3SN80ngewTpJvk
wlRso+bGXSo4aQvmmPKznQtL4/8sEAIPbTga54/UpJP3X3MwNJ3FTVUMXhKNpGa8
0nX4W2csJzqEE9hdCAVfbKRnoWcZkJd0rLcI6lv5Cd11VyL2kNwJx8AlqJ2fsNBg
TWIGsMZInz/yJdhFU1MqX/00zkHIpK43H/LKyy1VjBItQUnaIBi7WsExdm4eh1Gg
33orY7k/NVjwYMIjNssE1ov4JAlgYoeIco22dSqAImw73s7qdqfM0fOKxfkzFNoL
0hI=
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:56:33 2026 by rpki-client