Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/563E7B72011611F19A5C9E62456F56BC.roa
File:                     563E7B72011611F19A5C9E62456F56BC.roa (raw, json)
Hash identifier:          b8zLO/cBNnRf0KXbj+hwh3+fOOEJr36c5b9fQesiAgU=
Subject key identifier:   A0:F5:45:9C:2F:18:66:38:9C:EE:9F:77:9D:83:F7:69:0E:B2:2F:D0
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E27
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/563E7B72011611F19A5C9E62456F56BC.roa
Signing time:             Thu 04 Jun 2026 20:26:33 +0000
ROA not before:           Thu 04 Jun 2026 20:26:33 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     9387
IP address blocks:        103.151.27.0/24 maxlen: 24
                          115.167.72.0/24 maxlen: 24
                          115.167.74.0/24 maxlen: 24
                          115.167.75.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 20:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11815 (0x2e27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  4 20:26:33 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21df78-b54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:06:58:2b:e2:48:12:3b:5a:3b:cd:e5:51:
                    2a:80:6e:f0:ac:aa:7b:07:23:88:a8:17:cd:09:e4:
                    64:95:42:e6:92:22:50:ff:56:25:da:15:4d:ce:97:
                    56:e5:b3:2e:24:4a:b3:4b:d2:4f:94:46:c4:ea:1c:
                    c8:4b:15:e8:55:e7:3b:fc:15:c9:c0:c1:fe:a4:9a:
                    79:7f:e8:37:88:e5:27:db:f5:63:f5:02:b0:de:98:
                    9b:c5:8a:a6:b7:fb:a0:04:42:30:32:25:82:1c:34:
                    fe:32:98:c6:12:70:75:76:b0:e1:8d:be:a6:59:e8:
                    98:4b:88:56:97:7d:d5:a0:1e:fb:3f:47:52:97:d8:
                    1a:6b:b1:e5:bc:8a:2c:79:d5:1c:e0:a2:12:a3:d8:
                    07:6d:33:56:f8:58:0a:e6:79:a5:e6:7b:7a:0d:a3:
                    fc:56:34:92:b4:07:9a:e0:2f:d1:67:0e:e2:9a:f1:
                    0e:2f:80:57:84:f7:b6:fc:6e:4b:f3:ef:f4:fc:b2:
                    dc:61:f3:a0:e1:53:7c:45:47:66:5d:a0:e7:b2:36:
                    7a:58:cc:9d:b8:a6:8e:f3:6f:3b:f5:b5:d5:f3:7b:
                    8c:d3:bd:5d:13:1d:5f:0a:3d:ac:4b:ee:da:55:2c:
                    da:cf:ef:42:1c:b7:97:d7:6d:3c:56:41:02:11:18:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F5:45:9C:2F:18:66:38:9C:EE:9F:77:9D:83:F7:69:0E:B2:2F:D0
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/563E7B72011611F19A5C9E62456F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.27.0/24
                  115.167.72.0/24
                  115.167.74.0/23
                  202.92.18.0/23
                  202.92.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:57:09:c7:be:95:5d:98:f8:0e:af:93:bb:88:a0:39:2d:68:
         10:65:46:35:ae:ee:f8:ea:78:5a:8f:fc:64:ef:0d:97:ea:82:
         60:36:a1:0f:56:b9:8e:d9:bb:6e:a6:86:41:76:8a:1f:75:c3:
         e3:85:d6:2a:26:65:5c:19:ef:54:09:c3:f1:bf:93:cc:a5:b9:
         47:da:16:54:ee:85:4d:aa:2a:25:b1:d9:d0:58:68:3e:c4:5f:
         bd:5d:2c:22:83:72:e7:5c:b6:2f:45:56:0a:10:13:ae:1a:62:
         ca:e7:f6:16:78:93:5d:38:31:d2:6b:f1:91:11:a2:c6:66:97:
         b9:80:41:81:d2:23:bb:e1:7c:1e:c1:4b:ae:83:ea:9f:4c:c4:
         87:d0:c2:8a:98:b1:51:ce:98:e2:61:b8:0f:94:ec:b6:be:79:
         9b:e9:3a:61:da:ab:ae:8d:5f:8a:65:db:47:96:d5:43:85:1e:
         14:24:e5:c5:0a:28:af:ea:71:2e:a4:af:e3:0b:f5:72:7c:a1:
         a2:fe:91:09:11:7c:3c:bd:c4:0f:e8:99:6a:b4:5f:ac:6c:29:
         57:09:60:d7:a0:95:c6:e4:4f:18:92:2b:cf:d1:9f:92:0e:88:
         d8:f1:f2:9f:f4:c9:e9:e2:d0:55:d0:52:3f:d0:5f:91:44:eb:
         b3:bc:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 20:07:47 2026 by rpki-client