Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AA23566C85B11F1B1BE427E4211F970.roa
File:                     5AA23566C85B11F1B1BE427E4211F970.roa (raw, json)
Hash identifier:          NASz2ih119htk+nVqQP+9LOCkaTGvtBO/9WOHz/NeXc=
Subject key identifier:   E5:3D:CC:D7:7A:FD:9B:F8:12:58:EF:0E:E9:97:D0:04:18:23:FD:E9
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       301A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AA23566C85B11F1B1BE427E4211F970.roa
Signing time:             Thu 15 Oct 2026 05:43:31 +0000
ROA not before:           Thu 15 Oct 2026 05:43:31 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     197328
IP address blocks:        113.203.218.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          180.178.171.0/24 maxlen: 24
                          180.178.176.0/22 maxlen: 22
                          180.178.187.0/24 maxlen: 24
                          180.178.188.0/24 maxlen: 24
                          180.178.189.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 20:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12314 (0x301a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct 15 05:43:31 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ad06803-c91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:66:cf:39:84:72:db:97:cd:2d:42:bf:d7:
                    a0:25:f5:11:f3:45:ae:9d:44:1c:8a:3e:68:d5:5c:
                    cf:97:be:cc:b8:9f:35:8d:b7:45:fa:00:2e:a6:37:
                    67:76:15:f6:8a:f9:52:d2:92:59:b6:b2:53:17:69:
                    ad:50:54:86:cd:74:24:20:33:da:ab:89:31:2c:60:
                    5c:3c:1e:17:24:61:2d:48:b1:9b:87:91:42:17:1b:
                    e0:45:84:c9:7b:9e:11:66:3c:1b:56:16:84:a9:38:
                    13:5d:f2:1e:f7:2a:17:32:5e:bf:01:a1:5e:ce:ad:
                    56:e7:6b:a4:0b:35:c1:d3:a6:81:86:14:09:be:b6:
                    de:16:3d:2f:b5:b9:f1:89:24:c5:74:36:d5:36:0d:
                    ba:23:30:6b:6c:ec:1b:3b:29:56:10:54:7c:02:7f:
                    25:b9:bf:d0:5f:b0:46:ef:7e:89:58:56:c1:af:14:
                    86:6e:6e:ae:82:de:38:59:7d:4a:b8:8f:b4:09:46:
                    9e:c2:38:0d:d4:e5:71:4e:88:28:2f:ee:d9:be:03:
                    1a:54:bc:25:e0:3f:eb:a0:8b:83:27:f8:48:c6:8c:
                    e1:cb:45:54:f1:34:b8:76:93:41:c1:da:b7:b4:79:
                    b8:5e:e4:12:69:1c:40:72:93:64:f1:ea:98:93:28:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3D:CC:D7:7A:FD:9B:F8:12:58:EF:0E:E9:97:D0:04:18:23:FD:E9
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AA23566C85B11F1B1BE427E4211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.218.0/24
                  113.203.222.0/24
                  180.178.171.0/24
                  180.178.176.0/22
                  180.178.187.0-180.178.190.255

    Signature Algorithm: sha256WithRSAEncryption
         ae:39:ba:e2:13:61:b9:0e:05:a7:c8:67:bb:3c:0e:18:6b:76:
         27:48:58:af:52:5d:3e:7d:81:b0:4f:10:be:ae:70:1f:ea:7f:
         34:7e:e8:f4:73:41:0d:dc:1d:40:0b:79:82:a9:39:8c:d3:b0:
         68:d5:f9:37:02:9e:50:29:30:c6:60:db:14:22:a5:26:93:ad:
         02:2e:a3:2f:e0:ea:81:b6:a0:52:ca:62:af:16:b5:f7:27:c2:
         0b:d7:3b:2a:e5:2c:60:9a:e6:fb:64:01:31:07:ea:07:52:d4:
         b7:72:54:76:f1:ea:a6:15:84:c1:09:1d:d5:27:2c:84:dc:5b:
         8c:40:26:34:b9:e3:27:6f:cd:4e:34:aa:70:0a:6f:e1:41:b7:
         3c:65:5b:7c:e9:aa:4f:56:ce:83:6d:53:da:33:c1:e3:d2:4e:
         90:c0:74:72:b7:c9:4d:f3:c5:01:f7:6c:c6:22:0d:45:cb:a7:
         64:87:af:71:48:c0:e3:6c:15:5a:04:ae:24:6d:a6:d5:16:94:
         99:a8:f7:53:a6:b1:4b:4f:21:91:12:9d:11:24:a2:e1:5c:12:
         78:b8:3e:5a:a1:99:a7:45:b8:91:ad:67:4d:6d:e2:fb:9e:aa:
         3b:b5:5e:30:f5:3e:f1:3b:fa:b7:3e:e5:18:1e:81:76:c5:45:
         c0:a2:e6:02
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgICMBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjYxMDE1MDU0MzMxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQwNjgwMy1jOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0JmzzmEctuXzS1Cv9egJfUR80WunUQcij5o1VzPl77MuJ81jbdF+gAupjdn
dhX2ivlS0pJZtrJTF2mtUFSGzXQkIDPaq4kxLGBcPB4XJGEtSLGbh5FCFxvgRYTJ
e54RZjwbVhaEqTgTXfIe9yoXMl6/AaFezq1W52ukCzXB06aBhhQJvrbeFj0vtbnx
iSTFdDbVNg26IzBrbOwbOylWEFR8An8lub/QX7BG736JWFbBrxSGbm6ugt44WX1K
uI+0CUaewjgN1OVxTogoL+7ZvgMaVLwl4D/roIuDJ/hIxozhy0VU8TS4dpNBwdq3
tHm4XuQSaRxAcpNk8eqYkyiCTwIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFOU9zNd6
/Zv4EljvDumX0AQYI/3pMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNUFBMjM1NjZD
ODVCMTFGMUIxQkU0MjdFNDIxMUY5NzAucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs
BAIAATAmAwQAccvaAwQAccveAwQAtLKrAwQCtLKwMAwDBAC0srsDBAC0sr4wDQYJ
KoZIhvcNAQELBQADggEBAK45uuITYbkOBafIZ7s8DhhrdidIWK9SXT59gbBPEL6u
cB/qfzR+6PRzQQ3cHUALeYKpOYzTsGjV+TcCnlApMMZg2xQipSaTrQIuoy/g6oG2
oFLKYq8WtfcnwgvXOyrlLGCa5vtkATEH6gdS1LdyVHbx6qYVhMEJHdUnLITcW4xA
JjS54ydvzU40qnAKb+FBtzxlW3zpqk9WzoNtU9ozwePSTpDAdHK3yU3zxQH3bMYi
DUXLp2SHr3FIwONsFVoEriRtptUWlJmo91OmsUtPIZESnREkouFcEni4PlqhmadF
uJGtZ01t4vueqju1XjD1PvE7+rc+5RgegXbFRcCi5gI=
-----END CERTIFICATE-----
Generated at Wed Oct 21 20:14:50 2026 by rpki-client