Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B7D2290484F311F191F2E76E63A30FBC.roa
File:                     B7D2290484F311F191F2E76E63A30FBC.roa (raw, json)
Hash identifier:          Sg0REK411dXi800DJPsC5ZLBjcjs7SXkNu8X0YMwn+I=
Subject key identifier:   80:BA:9A:7A:2A:84:44:A0:28:4B:66:86:AA:00:CC:CC:F3:22:D1:11
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2ED3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B7D2290484F311F191F2E76E63A30FBC.roa
Signing time:             Tue 21 Jul 2026 11:02:52 +0000
ROA not before:           Tue 21 Jul 2026 11:02:52 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     199899
IP address blocks:        113.203.224.0/24 maxlen: 24
                          180.178.178.0/24 maxlen: 24
                          180.178.181.0/24 maxlen: 24
                          180.178.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 11:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11987 (0x2ed3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul 21 11:02:52 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a5f51dc-c84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:d0:65:1f:9f:ba:93:08:d2:10:4d:3b:b0:
                    04:15:02:32:60:bd:3f:95:3f:8b:d3:cb:84:8c:88:
                    ec:18:f6:ea:78:87:29:8c:58:ad:36:a9:9e:95:cf:
                    1f:85:f6:bf:72:d7:88:29:07:ec:6c:6a:2d:86:ce:
                    f0:66:32:af:92:92:7e:7b:e3:5d:32:9a:8f:0f:0d:
                    52:52:1a:f5:dc:38:67:82:a2:34:da:8a:49:b9:c5:
                    02:28:ae:12:67:3e:cc:07:23:64:2e:57:39:bf:90:
                    7f:34:cb:92:be:eb:e6:3f:41:12:4e:50:77:eb:f2:
                    f9:77:0b:8d:b4:e2:66:b6:7b:f3:13:d6:4c:2b:d5:
                    6f:96:5b:9a:6a:8e:09:b3:04:6e:2c:6d:59:cc:c2:
                    d9:77:12:e0:e0:d7:18:dd:71:c6:9f:fa:5d:59:44:
                    54:50:51:a7:28:51:ac:33:14:18:52:1b:11:0f:75:
                    32:57:aa:72:01:37:9d:d1:36:8f:91:a9:c1:42:69:
                    63:2a:6b:5a:9d:f8:e6:f0:1f:ef:e2:31:9f:db:2b:
                    8a:6b:d5:17:88:0f:57:a5:7a:81:21:2f:1a:7e:c5:
                    90:a2:d1:a1:76:e5:41:13:b3:8e:61:1a:40:54:c7:
                    fb:d9:60:e4:0b:2b:27:4c:2b:cb:72:f7:55:96:32:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BA:9A:7A:2A:84:44:A0:28:4B:66:86:AA:00:CC:CC:F3:22:D1:11
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B7D2290484F311F191F2E76E63A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.224.0/24
                  180.178.178.0/24
                  180.178.181.0/24
                  180.178.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:00:35:ab:eb:30:7c:07:20:bd:87:34:15:b0:75:b8:a8:a4:
         13:17:f5:19:15:e5:11:05:af:7a:8b:cd:66:b4:42:97:6d:a1:
         d6:09:d4:39:e9:f7:3e:36:9b:ae:76:ea:aa:24:a6:b0:0c:29:
         a8:07:bf:e7:47:e9:ad:a5:2a:45:3e:df:39:c0:66:db:05:3d:
         d2:25:7b:56:ef:42:b0:ec:75:15:98:71:92:c0:2f:a4:3c:58:
         07:a5:7f:a1:7e:73:4f:fc:2d:7b:d5:7d:9f:43:8a:ad:52:13:
         3f:4a:58:4f:fc:49:53:d8:0f:8b:21:00:6a:4c:ce:92:d8:62:
         e1:95:f4:04:3a:e1:65:8b:70:50:9b:c3:6e:92:f7:fb:ea:8a:
         77:63:3b:69:7d:1d:00:47:9c:91:cf:39:d6:4b:d3:f9:93:9c:
         d9:85:a2:8d:bc:a0:e4:8b:fc:1b:1e:85:fa:d7:b3:a5:c0:9c:
         f3:41:70:54:d2:e2:a4:cc:69:de:18:ec:64:1b:59:63:e2:80:
         d2:e1:0a:e9:71:ed:80:df:06:23:9a:1f:82:9d:56:5e:40:1b:
         51:ef:f0:a9:05:52:c9:74:36:8f:d0:96:ea:11:65:2f:e2:f1:
         fd:cf:21:97:b3:69:6b:03:cd:5f:79:3c:72:d5:e5:55:f3:5c:
         ce:12:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:38 2026 by rpki-client