Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A00CF2ACD74811F1A4B7BC3E2966CEF9.roa
File:                     A00CF2ACD74811F1A4B7BC3E2966CEF9.roa (raw, json)
Hash identifier:          kSk+CjbAZzlcBZgmJ8kZED/oz1v2y4oZcHj63ELIEfs=
Subject key identifier:   71:EA:CF:48:36:98:03:A0:32:0F:AE:DB:F9:EB:E7:7F:FE:99:F2:2C
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       3070
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A00CF2ACD74811F1A4B7BC3E2966CEF9.roa
Signing time:             Tue 03 Nov 2026 05:37:15 +0000
ROA not before:           Tue 03 Nov 2026 05:37:15 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     199899
IP address blocks:        113.203.224.0/24 maxlen: 24
                          115.167.2.0/24 maxlen: 24
                          115.167.3.0/24 maxlen: 24
                          115.167.7.0/24 maxlen: 24
                          115.167.13.0/24 maxlen: 24
                          115.167.14.0/24 maxlen: 24
                          115.167.15.0/24 maxlen: 24
                          115.167.28.0/24 maxlen: 24
                          115.167.29.0/24 maxlen: 24
                          115.167.30.0/24 maxlen: 24
                          115.167.31.0/24 maxlen: 24
                          180.178.178.0/24 maxlen: 24
                          180.178.181.0/24 maxlen: 24
                          180.178.183.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
                          223.29.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12400 (0x3070)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov  3 05:37:15 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ae9730b-646a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:62:e7:74:c4:02:83:d1:28:86:91:05:43:
                    a3:b5:f1:79:92:f6:42:9e:9e:8e:96:69:e3:02:db:
                    6f:87:d7:2e:d8:88:40:08:da:62:bc:7c:c4:86:88:
                    19:8b:f1:92:52:26:18:ed:92:3c:23:fa:e2:a5:1f:
                    ae:6d:66:b0:d6:96:b3:f0:1a:e1:fd:4d:03:c1:bc:
                    63:a2:dd:64:da:26:5b:f8:ca:18:09:76:aa:a1:f5:
                    1a:82:b4:7c:04:a2:9c:e0:ab:26:d4:47:74:37:94:
                    67:bf:d4:9f:db:ce:04:b1:70:a7:88:f1:ff:2e:7c:
                    11:86:67:61:39:ca:6b:24:c5:de:23:b5:e6:cf:29:
                    d8:56:97:bf:8d:d0:48:de:9f:1b:73:46:8c:01:de:
                    28:08:76:63:e0:4d:97:d7:8e:81:90:4e:80:8c:de:
                    95:78:98:68:a0:61:46:09:91:49:b2:f3:ea:b3:40:
                    39:0c:fa:3b:b8:43:00:67:60:07:4e:57:61:20:cd:
                    a9:3d:4c:8d:3e:db:f5:15:7d:08:2d:92:2d:fb:92:
                    8c:8f:37:b1:bf:55:a2:e7:57:9d:63:fc:a5:50:fc:
                    57:a4:ae:0a:2c:98:ec:89:99:59:5a:82:e3:21:6a:
                    63:57:70:5a:62:21:f7:bb:0c:30:89:69:94:06:c7:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EA:CF:48:36:98:03:A0:32:0F:AE:DB:F9:EB:E7:7F:FE:99:F2:2C
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A00CF2ACD74811F1A4B7BC3E2966CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.224.0/24
                  115.167.2.0/23
                  115.167.7.0/24
                  115.167.13.0-115.167.15.255
                  115.167.28.0/22
                  180.178.178.0/24
                  180.178.181.0/24
                  180.178.183.0/24
                  223.29.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:5b:f8:a7:2b:b9:74:ab:17:46:18:5f:5d:aa:55:c8:41:9d:
         ce:04:94:72:20:b6:a0:4f:d9:60:0b:a5:08:f0:ef:e1:ae:dc:
         0f:fa:48:ab:78:a6:aa:7a:6d:29:b1:5e:d4:21:a2:c8:35:8d:
         04:a8:33:a2:6a:a8:88:9c:18:01:13:a6:2a:93:9c:de:43:a1:
         e2:e6:3f:31:db:01:48:9f:d0:36:10:74:79:28:ad:47:85:25:
         fb:8f:ca:2a:ff:72:07:fe:7c:73:38:49:5d:11:d6:43:46:38:
         4c:65:e4:98:ba:81:ed:8b:83:4f:98:16:de:79:67:4a:e2:54:
         a6:e1:52:0a:4d:56:cc:88:b1:ec:77:a9:b3:a0:c0:46:31:e5:
         6b:9e:74:9f:3b:0b:bd:49:6c:a8:28:c5:3e:e5:f5:27:bd:00:
         e4:80:66:66:38:08:71:16:2e:76:14:44:81:f4:1a:79:58:de:
         1f:42:0b:1e:ad:4a:38:69:87:15:ac:3c:10:54:a0:a0:d0:06:
         c2:5f:9a:a3:09:1a:f1:b4:f2:31:f4:e1:54:17:a1:11:ec:f7:
         30:83:aa:47:78:c0:f2:d5:9b:a7:58:0d:99:ea:b7:89:72:1e:
         ee:2e:b3:1c:97:c3:62:50:c3:8a:f4:a5:01:eb:91:3e:ca:5c:
         93:8b:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:49 2026 by rpki-client