Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B0998772C3C311F1A34123AE5711F970.roa
File:                     B0998772C3C311F1A34123AE5711F970.roa (raw, json)
Hash identifier:          mgmmrIZAW5ropSesSqC5Qgvs+e+LpOgCFjV1XNPz3XU=
Subject key identifier:   E1:C1:75:07:74:1B:41:C6:25:C4:CA:51:CD:A1:8D:41:C1:DC:C9:EB
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       300A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B0998772C3C311F1A34123AE5711F970.roa
Signing time:             Fri 09 Oct 2026 09:27:48 +0000
ROA not before:           Fri 09 Oct 2026 09:27:48 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     199899
IP address blocks:        113.203.211.0/24 maxlen: 24
                          113.203.212.0/24 maxlen: 24
                          113.203.224.0/24 maxlen: 24
                          175.110.106.0/24 maxlen: 24
                          175.110.108.0/24 maxlen: 24
                          175.110.109.0/24 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          180.178.178.0/24 maxlen: 24
                          180.178.181.0/24 maxlen: 24
                          180.178.183.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
                          223.29.227.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 26 Oct 2026 11:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12298 (0x300a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct  9 09:27:48 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ac8b394-e57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:04:8f:8f:9a:63:95:cf:ac:b6:7d:05:db:
                    d0:46:e7:e7:26:ba:7b:2e:48:4f:13:fe:9a:94:87:
                    b9:00:da:9d:21:9c:e6:79:9d:6c:80:4c:0e:a2:da:
                    40:0e:ee:04:ad:cf:b5:52:22:39:90:10:0d:b5:2e:
                    f4:3a:c1:1b:35:b4:c5:9b:d0:76:63:8b:4a:e9:6a:
                    d6:d3:25:aa:24:78:2e:59:b7:e5:d9:87:57:f7:16:
                    e1:57:83:72:c0:fb:99:5c:46:1b:f0:d1:dd:46:d1:
                    cb:15:77:95:4a:6f:90:e2:f7:db:59:bd:35:fb:f9:
                    2b:28:e3:1f:2e:7b:7d:0e:3f:78:70:ce:85:f3:80:
                    02:75:3f:21:ce:a6:86:31:9d:cf:96:cd:d8:9b:af:
                    5b:6c:65:d4:9c:7a:ac:fd:d5:0e:55:36:19:37:70:
                    95:11:7e:d8:32:af:28:05:ca:b3:90:28:cd:19:9b:
                    6e:9b:46:86:cc:ef:c6:97:df:d3:f5:47:47:a5:26:
                    d6:d1:fc:06:62:4e:c3:45:c7:29:e8:5b:a8:5e:73:
                    01:27:81:31:d6:c3:b3:be:6a:89:6d:71:dc:d9:7a:
                    56:a5:27:02:34:09:ba:41:c1:e3:d0:df:0d:d2:34:
                    1d:2d:39:86:63:a4:21:3b:72:d4:2a:70:10:34:39:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C1:75:07:74:1B:41:C6:25:C4:CA:51:CD:A1:8D:41:C1:DC:C9:EB
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B0998772C3C311F1A34123AE5711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.211.0-113.203.212.255
                  113.203.224.0/24
                  175.110.106.0/24
                  175.110.108.0/22
                  180.178.178.0/24
                  180.178.181.0/24
                  180.178.183.0/24
                  223.29.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:d4:45:09:fb:88:60:5d:4e:5b:97:37:7b:f6:b4:82:1f:
         db:14:5a:45:b1:9a:32:bb:66:15:ef:b0:14:62:96:77:ff:90:
         6f:71:b5:a0:9f:f9:10:2c:25:5e:68:d6:88:ff:e3:76:0b:e8:
         1d:91:60:b2:9b:9d:a8:06:16:56:f4:e3:ae:71:fb:92:26:d7:
         e6:ad:3a:17:50:d5:64:80:87:9d:7c:66:3d:67:8d:d9:2c:6a:
         78:df:9e:91:55:85:ca:52:b6:8e:be:4c:d3:43:b1:0f:9e:16:
         0e:ae:4b:d7:69:32:e0:7a:f1:11:3f:02:da:ae:6f:fe:1f:d4:
         11:4a:c9:26:99:c8:1c:ba:2a:24:74:cf:64:02:87:0a:95:02:
         72:e3:93:92:d3:0c:60:93:d1:ec:94:52:1f:92:3b:09:66:1d:
         1d:ae:42:4a:c2:cc:e5:df:bf:e4:71:86:6a:47:30:99:a5:83:
         76:70:8e:86:61:29:74:4b:bb:ba:8a:09:c8:84:ee:75:1f:78:
         af:d6:33:16:62:87:0b:dd:d4:a6:84:bd:a5:85:a2:46:6e:73:
         c2:db:5d:4c:9b:81:9a:2a:64:e1:3e:36:ec:d3:7f:de:e1:30:
         cc:5e:27:5f:29:7e:0a:98:fa:c9:f0:f0:ac:63:78:60:e7:0b:
         83:b0:98:97
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgICMAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjYxMDA5MDkyNzQ4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM4YjM5NC1lNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PUEj4+aY5XPrLZ9BdvQRufnJrp7LkhPE/6alIe5ANqdIZzmeZ1sgEwOotpA
Du4Erc+1UiI5kBANtS70OsEbNbTFm9B2Y4tK6WrW0yWqJHguWbfl2YdX9xbhV4Ny
wPuZXEYb8NHdRtHLFXeVSm+Q4vfbWb01+/krKOMfLnt9Dj94cM6F84ACdT8hzqaG
MZ3Pls3Ym69bbGXUnHqs/dUOVTYZN3CVEX7YMq8oBcqzkCjNGZtum0aGzO/Gl9/T
9UdHpSbW0fwGYk7DRccp6FuoXnMBJ4Ex1sOzvmqJbXHc2XpWpScCNAm6QcHj0N8N
0jQdLTmGY6QhO3LUKnAQNDmEFQIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFOHBdQd0
G0HGJcTKUc2hjUHB3MnrMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQjA5OTg3NzJD
M0MzMTFGMUEzNDEyM0FFNTcxMUY5NzAucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+
BAIAATA4MAwDBABxy9MDBABxy9QDBABxy+ADBACvbmoDBAKvbmwDBAC0srIDBAC0
srUDBAC0srcDBAHfHeIwDQYJKoZIhvcNAQELBQADggEBAJDg1EUJ+4hgXU5blzd7
9rSCH9sUWkWxmjK7ZhXvsBRilnf/kG9xtaCf+RAsJV5o1oj/43YL6B2RYLKbnagG
Flb0465x+5Im1+atOhdQ1WSAh518Zj1njdksanjfnpFVhcpSto6+TNNDsQ+eFg6u
S9dpMuB68RE/Atqub/4f1BFKySaZyBy6KiR0z2QChwqVAnLjk5LTDGCT0eyUUh+S
OwlmHR2uQkrCzOXfv+RxhmpHMJmlg3ZwjoZhKXRLu7qKCciE7nUfeK/WMxZihwvd
1KaEvaWFokZuc8LbXUybgZoqZOE+NuzTf97hMMxeJ18pfgqY+snw8KxjeGDnC4Ow
mJc=
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:17 2026 by rpki-client