Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A284E80CDF3411F1BBD63E5F0C66CEF9.roa
File:                     A284E80CDF3411F1BBD63E5F0C66CEF9.roa (raw, json)
Hash identifier:          MC4ZTErNY+cpK4jgRAIK+4blpRCzS5tJtV3RKmMaHG4=
Subject key identifier:   9D:3D:77:C7:87:2F:BA:F4:A1:D6:58:B7:54:F5:5F:3A:7C:50:F4:D7
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       309B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A284E80CDF3411F1BBD63E5F0C66CEF9.roa
Signing time:             Fri 13 Nov 2026 07:34:18 +0000
ROA not before:           Fri 13 Nov 2026 07:34:18 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        113.203.224.0/24 maxlen: 24
                          113.203.225.0/24 maxlen: 24
                          113.203.226.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.228.0/24 maxlen: 24
                          113.203.229.0/24 maxlen: 24
                          113.203.230.0/24 maxlen: 24
                          113.203.231.0/24 maxlen: 24
                          113.203.244.0/24 maxlen: 24
                          113.203.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 19:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12443 (0x309b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 13 07:34:18 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6af6bd7a-bb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:d2:ef:8f:02:a2:40:e1:cb:87:07:ea:78:
                    d1:d8:fe:7f:df:46:ec:29:78:fa:7f:8d:83:49:e7:
                    77:92:a2:78:ba:80:41:4b:00:fe:59:d2:9e:03:ef:
                    d9:d9:a9:bc:fc:90:bc:e3:b3:b4:ea:c5:91:b4:17:
                    3a:ec:12:0f:85:41:15:bc:53:d1:38:50:b0:d3:3e:
                    e6:d3:30:bf:3a:12:16:4d:b7:4f:69:73:a1:26:5c:
                    b0:b1:06:19:69:30:5b:d2:f2:45:25:01:67:bd:55:
                    3c:37:7f:d1:44:bb:5f:ee:04:5f:92:cb:e8:ee:b0:
                    43:ab:49:87:e9:4f:e7:3b:69:31:56:5a:52:a7:50:
                    ad:d3:1b:14:0e:64:aa:9d:d7:0c:4a:42:de:76:4c:
                    12:dc:d3:ab:e3:a0:98:66:07:a5:3a:19:e8:9b:ca:
                    6f:21:05:c2:39:45:09:bc:a3:57:24:ed:2c:26:01:
                    5c:6e:73:1f:de:ba:ef:95:c5:c6:c3:d8:a0:3e:49:
                    75:da:de:8e:1c:f6:03:92:34:62:0a:a3:cf:08:98:
                    55:c0:6d:70:12:19:be:de:58:4c:7d:17:9d:8d:76:
                    20:be:84:95:ed:bb:a7:8d:e1:3f:6d:5e:3e:19:88:
                    ba:3f:e3:a2:01:7c:e4:da:ac:be:02:4d:18:53:16:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3D:77:C7:87:2F:BA:F4:A1:D6:58:B7:54:F5:5F:3A:7C:50:F4:D7
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A284E80CDF3411F1BBD63E5F0C66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.224.0/21
                  113.203.244.0/24
                  113.203.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:89:4f:90:65:56:d0:41:d4:7a:3e:d4:a9:3d:f6:dd:be:67:
         e3:f3:9b:68:88:b8:76:c3:01:a8:c0:a2:30:81:30:06:29:1c:
         c0:76:2a:41:05:3e:08:73:25:c0:a3:3d:a2:30:05:b8:a2:b5:
         ab:81:b2:da:f4:4f:73:86:55:f0:3a:91:69:1c:eb:b9:55:f0:
         d4:31:07:63:98:89:df:84:a6:13:d1:ea:9c:5d:5a:53:91:be:
         6d:f6:5d:53:67:0d:f7:8d:ab:83:7b:a0:7b:e5:94:78:15:9d:
         70:83:10:b2:18:c5:3d:7d:97:51:5a:43:e3:e5:90:73:f5:99:
         2a:25:31:83:2c:5b:2b:7e:bd:f1:da:68:c4:74:3c:d7:b8:34:
         0d:2f:68:ed:25:09:1a:53:45:26:32:80:96:03:32:8f:08:ff:
         49:b1:26:a2:36:e6:8c:29:d9:f3:45:85:d4:06:e3:53:77:e6:
         29:d7:f0:4c:7a:7d:7e:98:59:09:a6:82:d1:97:eb:7c:b3:43:
         71:6d:c4:09:72:13:a5:03:a2:11:8a:c0:f9:f9:96:d0:36:ed:
         d1:89:55:ea:1d:47:1a:8d:6a:ad:ca:72:a6:d6:42:23:52:16:
         66:ad:04:64:65:74:cb:f8:a2:28:23:28:16:e1:bd:a6:97:f6:
         ab:bf:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:29:33 2026 by rpki-client