Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/563E7B72011611F19A5C9E62456F56BC.roa
File:                     563E7B72011611F19A5C9E62456F56BC.roa (raw, json)
Hash identifier:          upUSHi2btPAyrA+YllfJsUHmtVYlkjR+Ifd4dcIXMck=
Subject key identifier:   92:C9:0E:15:51:46:4C:D3:08:65:84:9B:94:C6:E7:0E:F3:21:77:50
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D2A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/563E7B72011611F19A5C9E62456F56BC.roa
Signing time:             Sun 01 Mar 2026 21:27:18 +0000
ROA not before:           Tue 03 Feb 2026 15:38:07 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9387
IP address blocks:        103.151.27.0/24 maxlen: 24
                          115.167.72.0/24 maxlen: 24
                          115.167.74.0/24 maxlen: 24
                          115.167.75.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 19:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11562 (0x2d2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Feb  3 15:38:07 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4af36-26db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:22:a9:a5:0a:2f:1a:d0:d9:22:9c:05:9d:
                    51:58:10:8b:f0:c0:00:19:09:43:16:98:1b:2f:78:
                    c7:3c:7b:c8:60:b8:10:bc:00:f0:2a:2a:00:6d:46:
                    e7:6c:65:2d:41:c9:bf:b9:98:1b:10:5c:ee:83:92:
                    4f:dc:10:87:33:15:20:23:40:05:30:f8:d7:6c:0c:
                    fa:71:ec:5c:93:ff:4d:a3:61:15:6d:05:86:f2:3b:
                    19:2d:5d:62:22:c3:e2:86:02:da:1d:ca:84:4d:7d:
                    04:8b:57:6f:3b:bb:b3:86:2e:ca:2c:ba:dc:89:33:
                    21:8c:ea:5c:ee:f5:9e:28:71:e3:1a:a9:22:b9:4a:
                    8e:5c:ef:77:f0:c3:26:15:38:8f:30:b4:d7:64:98:
                    78:2f:c3:49:fa:58:84:c0:99:99:fe:cb:36:65:08:
                    21:69:18:ed:e9:3f:ea:2a:03:fc:5a:29:b5:f9:ce:
                    5b:30:35:a6:45:be:dc:41:a3:9d:2a:87:4d:4f:41:
                    44:5b:dd:b5:73:c0:b7:11:dc:24:70:aa:1c:a7:10:
                    6d:97:76:bd:9f:cb:af:64:64:40:ff:78:61:d1:08:
                    c2:24:14:55:89:77:71:ad:81:e1:37:94:0d:3a:8d:
                    6f:3b:05:49:e0:12:f8:10:ef:67:20:3d:a2:2e:cb:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C9:0E:15:51:46:4C:D3:08:65:84:9B:94:C6:E7:0E:F3:21:77:50
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/563E7B72011611F19A5C9E62456F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.27.0/24
                  115.167.72.0/24
                  115.167.74.0/23
                  202.92.18.0/23
                  202.92.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:6f:01:cb:eb:35:96:f3:06:ab:6d:72:a8:ab:e7:df:b4:57:
         3c:0c:e9:2f:a4:ef:3f:6c:91:8d:87:19:4e:27:d8:4e:8e:72:
         b7:5e:a9:b9:c9:c6:85:69:74:47:a4:a2:e1:c2:95:a6:8c:89:
         0a:9c:08:0f:c2:b4:d8:b5:20:27:59:82:27:2f:a6:b1:ae:0d:
         6b:28:93:83:77:e1:ef:12:32:f1:6c:79:a5:da:dc:c9:85:8c:
         c1:bf:f5:54:14:0e:c2:8b:f5:f3:25:07:89:da:69:bb:bc:3f:
         2d:11:96:56:fd:77:c8:97:23:62:be:e2:55:65:aa:0c:eb:04:
         8c:e6:24:d1:09:fb:63:0e:74:b8:5e:ed:2a:8f:81:54:54:a3:
         e0:b9:0e:d2:94:45:6b:8a:6d:16:e3:6a:30:22:86:e5:77:86:
         23:4c:ab:d4:12:33:0a:4a:57:6b:d9:64:39:8e:78:ee:a1:4c:
         e7:8b:43:88:ad:a6:e2:07:60:3b:c1:2b:90:5b:96:60:10:ef:
         cc:44:30:58:7b:79:b7:2a:ea:a1:36:59:24:0e:e3:e4:29:6b:
         20:49:4b:17:3d:c6:3e:39:33:44:fd:44:1c:2a:78:57:d6:cd:
         cb:e7:e3:0e:cd:e6:c1:bb:46:df:c6:86:b8:07:5f:68:82:a5:
         14:68:fd:1d
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICLSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjYwMjAzMTUzODA3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWYzNi0yNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArH8iqaUKLxrQ2SKcBZ1RWBCL8MAAGQlDFpgbL3jHPHvIYLgQvADwKioAbUbn
bGUtQcm/uZgbEFzug5JP3BCHMxUgI0AFMPjXbAz6cexck/9No2EVbQWG8jsZLV1i
IsPihgLaHcqETX0Ei1dvO7uzhi7KLLrciTMhjOpc7vWeKHHjGqkiuUqOXO938MMm
FTiPMLTXZJh4L8NJ+liEwJmZ/ss2ZQghaRjt6T/qKgP8Wim1+c5bMDWmRb7cQaOd
KodNT0FEW921c8C3EdwkcKocpxBtl3a9n8uvZGRA/3hh0QjCJBRViXdxrYHhN5QN
Oo1vOwVJ4BL4EO9nID2iLsvPLQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFJLJDhVR
RkzTCGWEm5TG5w7zIXdQMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNTYzRTdCNzIw
MTE2MTFGMTlBNUM5RTYyNDU2RjU2QkMucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk
BAIAATAeAwQAZ5cbAwQAc6dIAwQBc6dKAwQBylwSAwQAylwbMA0GCSqGSIb3DQEB
CwUAA4IBAQAXbwHL6zWW8warbXKoq+fftFc8DOkvpO8/bJGNhxlOJ9hOjnK3Xqm5
ycaFaXRHpKLhwpWmjIkKnAgPwrTYtSAnWYInL6axrg1rKJODd+HvEjLxbHml2tzJ
hYzBv/VUFA7Ci/XzJQeJ2mm7vD8tEZZW/XfIlyNivuJVZaoM6wSM5iTRCftjDnS4
Xu0qj4FUVKPguQ7SlEVrim0W42owIobld4YjTKvUEjMKSldr2WQ5jnjuoUzni0OI
rabiB2A7wSuQW5ZgEO/MRDBYe3m3KuqhNlkkDuPkKWsgSUsXPcY+OTNE/UQcKnhX
1s3L5+MOzebBu0bfxoa4B19ogqUUaP0d
-----END CERTIFICATE-----
Generated at Fri Mar 6 05:15:19 2026 by rpki-client