Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1E9057880CBD11F1AD321DFC2D3D8C67.roa
File:                     1E9057880CBD11F1AD321DFC2D3D8C67.roa (raw, json)
Hash identifier:          bXb3MmL7JlkUOBWf8v9ea3oz0F/r/GFsj+hFfNQLn/U=
Subject key identifier:   2C:68:23:A9:12:01:DA:17:85:84:67:7D:FB:F3:12:BF:0C:0C:5E:FD
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D0E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1E9057880CBD11F1AD321DFC2D3D8C67.roa
Signing time:             Wed 18 Feb 2026 11:37:27 +0000
ROA not before:           Wed 18 Feb 2026 11:37:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     215728
IP address blocks:        115.167.49.0/24 maxlen: 24
                          115.167.52.0/24 maxlen: 24
                          175.110.64.0/24 maxlen: 24
                          175.110.80.0/24 maxlen: 24
                          175.110.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 19:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11534 (0x2d0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Feb 18 11:37:27 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6995a477-ab64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:c1:ca:96:b1:a1:46:e4:45:04:36:bb:8d:
                    3a:f0:a7:fc:28:84:96:2f:d7:89:66:4c:52:c4:11:
                    a0:62:52:b2:5c:3e:2a:90:70:44:4f:04:73:b5:3c:
                    f7:cf:85:bf:46:1e:ee:5b:15:12:05:2e:6e:f4:7e:
                    3e:8f:cd:2f:4b:22:4b:7e:af:a0:97:59:3a:94:5f:
                    47:78:e1:81:2b:0c:d2:5e:2e:5d:5e:3e:dc:8b:33:
                    e6:5e:f7:9e:14:56:b8:51:5a:34:d3:6a:8f:17:23:
                    3b:55:11:b1:85:ab:d8:17:dc:a4:18:60:58:11:33:
                    71:e7:88:34:64:a0:a0:df:78:a5:a6:f7:f8:9b:13:
                    e5:d5:2b:47:9c:6d:db:bb:0d:a5:db:33:0e:a6:7a:
                    93:8e:e7:d4:63:aa:2f:37:b2:6c:8f:9b:9c:b2:a5:
                    b9:94:f6:ac:19:b4:4f:40:f0:c8:30:44:f0:25:ad:
                    72:b4:ed:83:80:46:e8:8c:1a:2d:66:4e:b2:82:07:
                    30:51:c4:f6:2a:a3:b7:1c:ec:e4:1f:9b:e1:bf:8a:
                    07:65:3e:e3:df:60:d3:ed:3e:f4:13:f0:4c:6c:18:
                    33:27:7e:a6:1f:fa:19:c0:6b:c6:81:25:bf:7d:28:
                    c4:e2:df:21:6b:85:59:2c:9b:3f:3d:0e:d5:5b:64:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:68:23:A9:12:01:DA:17:85:84:67:7D:FB:F3:12:BF:0C:0C:5E:FD
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1E9057880CBD11F1AD321DFC2D3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.49.0/24
                  115.167.52.0/24
                  175.110.64.0/24
                  175.110.80.0/24
                  175.110.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:25:1d:d2:a8:f2:6e:60:98:9b:b1:0c:b9:43:6d:f0:84:5b:
         86:44:8e:47:b5:6c:3d:fd:0a:60:89:b3:4e:f8:07:81:fd:14:
         4a:e3:4f:18:03:f1:fa:0a:dc:fb:d9:fa:57:5c:4a:ed:0b:b1:
         50:f8:66:ec:72:a8:4e:55:13:74:bb:cb:79:19:c3:41:2a:54:
         ba:b1:8e:96:de:a3:50:7b:27:81:f6:39:5a:43:e4:da:46:6a:
         ca:ee:76:7c:51:3c:1d:c6:60:15:a1:48:5c:91:ee:42:c5:5b:
         17:2c:90:32:80:4d:2a:8a:15:70:e1:b7:eb:e2:2e:17:2b:f5:
         05:08:07:0b:db:33:45:c3:74:b0:91:1e:9b:0f:58:1d:02:4e:
         17:b6:c2:c7:1a:7e:14:13:64:4c:ab:61:c7:ce:e8:e8:91:84:
         02:1a:df:59:89:0e:37:cb:f4:67:14:45:f6:4c:33:c8:e9:7c:
         86:f7:09:57:25:1a:1e:c5:ce:d6:04:e0:61:a9:90:f8:a0:f3:
         4e:a2:7c:53:15:e3:9d:02:8d:22:98:32:03:5d:3d:bf:97:a2:
         0e:96:fe:5a:1f:44:98:1c:60:3b:b0:04:1d:f9:cc:9a:4c:c2:
         bf:20:6b:9f:61:05:6b:48:4f:86:52:96:53:0a:2b:bd:76:64:
         95:11:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 11:56:30 2026 by rpki-client