Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C4DFA9AEE00211F1BC3931120966CEF9.roa
File:                     C4DFA9AEE00211F1BC3931120966CEF9.roa (raw, json)
Hash identifier:          hwBqxOs1zwpAhFOSgezl1PtJ/jI8XeuuEehIbwErRec=
Subject key identifier:   65:A7:A2:10:95:31:39:94:BB:2E:A3:A1:9E:13:DA:33:C2:9B:08:06
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       309D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C4DFA9AEE00211F1BC3931120966CEF9.roa
Signing time:             Sat 14 Nov 2026 08:09:52 +0000
ROA not before:           Sat 14 Nov 2026 08:09:52 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142019
IP address blocks:        180.178.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 19:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12445 (0x309d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 14 08:09:52 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6af81750-4433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:5e:07:9b:09:6c:f1:b8:a0:68:f3:a3:fd:
                    06:3b:9b:e6:7b:70:c3:98:4d:dc:46:dd:4f:8d:2a:
                    8f:c6:3d:7f:06:63:83:e5:b5:86:96:38:0d:ed:c3:
                    af:37:20:65:7f:b3:ba:9d:da:1b:a2:91:e5:0c:b4:
                    c4:de:0c:63:89:b5:33:eb:71:ba:40:ee:06:af:3a:
                    11:35:fd:e0:63:6c:c7:41:bf:23:32:d5:99:79:c7:
                    1a:fd:21:0b:24:db:b2:c4:96:dd:e6:ab:41:47:52:
                    bb:fa:30:b4:19:80:51:53:77:8e:6b:c8:35:fd:26:
                    4d:0d:79:b7:cd:8f:95:af:2b:59:83:75:0f:84:b2:
                    3d:70:b9:08:70:7e:f2:48:4b:ff:8d:de:5b:e4:65:
                    b8:3c:ff:2a:d9:8d:fa:cf:48:ba:0e:e1:ea:f4:b6:
                    e5:d7:1c:ea:47:cd:fb:45:47:60:76:7c:d9:67:9f:
                    bf:1f:f1:60:f9:83:4e:23:95:be:95:d7:e3:be:36:
                    e3:9b:c4:aa:67:88:07:c8:e2:46:bc:80:3d:b2:fe:
                    df:20:54:4f:1b:30:bd:77:8b:72:f5:78:c2:96:61:
                    d5:83:41:c2:78:3a:a0:94:6f:e1:d0:9e:ee:14:f5:
                    a4:53:d2:4c:e3:fe:fa:a6:02:43:84:4f:86:eb:40:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A7:A2:10:95:31:39:94:BB:2E:A3:A1:9E:13:DA:33:C2:9B:08:06
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C4DFA9AEE00211F1BC3931120966CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:2b:10:1f:9c:2a:80:20:b4:12:3b:83:cd:76:60:ce:ad:89:
         55:65:01:a7:0b:4e:3b:dd:46:e9:7b:37:33:4e:e3:e7:d0:8b:
         97:5d:49:95:a0:98:52:44:0c:be:bf:bd:22:c5:65:ef:7d:2d:
         8d:83:ed:15:75:07:9e:1d:29:10:b4:bd:aa:b2:14:d0:a6:cd:
         ac:73:5d:91:d6:76:02:89:53:b2:46:62:62:24:de:07:66:d8:
         0b:62:2f:06:1a:5b:ca:4b:85:68:93:cf:87:37:55:58:ba:84:
         88:13:ff:f0:5d:7f:a3:16:84:bd:2e:eb:01:79:fe:66:6e:2a:
         cc:fa:98:30:bd:e3:30:ec:38:e2:0b:f4:05:5e:4c:3d:28:69:
         7d:2b:d9:fc:82:47:e3:33:a7:21:c1:82:97:f9:42:62:6b:c5:
         36:8f:af:b4:2b:c7:a1:5c:60:4b:78:80:8b:79:16:81:31:9c:
         95:0d:b2:3f:6c:a5:47:50:e3:6a:b3:6c:56:ee:c8:f0:cf:8c:
         f5:53:97:e6:ce:be:95:51:72:66:34:d1:3a:e8:ea:51:a6:bd:
         92:5e:a9:87:74:b0:d9:53:97:d4:35:8f:29:77:0b:d2:d5:08:
         98:95:34:1b:85:10:3c:81:be:c7:da:0d:4b:5a:ca:d3:d0:ec:
         40:45:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:45:25 2026 by rpki-client