Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C26DDF547AC411F19C6BFA256BA30FBC.roa
File:                     C26DDF547AC411F19C6BFA256BA30FBC.roa (raw, json)
Hash identifier:          3hYgABGkMVQJJSho+LjkNXBmlMdAzldkYz8Rc7DPe/Q=
Subject key identifier:   AC:0F:A0:32:59:97:DD:C2:46:A9:41:88:ED:26:C3:FD:D0:26:47:D2
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E82
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C26DDF547AC411F19C6BFA256BA30FBC.roa
Signing time:             Wed 08 Jul 2026 12:01:32 +0000
ROA not before:           Wed 08 Jul 2026 12:01:32 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     60117
IP address blocks:        115.167.96.0/22 maxlen: 22
                          180.178.150.0/24 maxlen: 24
                          180.178.152.0/21 maxlen: 21
                          202.92.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 11:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11906 (0x2e82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul  8 12:01:32 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a4e3c1c-8db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:4b:cb:a2:d9:ac:6e:af:b7:ab:26:93:37:
                    d7:f7:5c:3a:47:9a:b1:ce:0d:3d:cd:b6:80:97:37:
                    8b:9a:43:b8:ee:0b:85:96:4c:d8:ad:9b:c1:77:1f:
                    89:a7:f0:13:8a:7f:ba:65:3e:24:a6:8e:94:72:03:
                    d2:20:ea:12:94:48:1d:1c:a1:a6:b4:61:5f:bf:f5:
                    67:6e:cd:1f:36:4a:b1:06:11:ac:f6:fc:88:23:3a:
                    dc:9f:22:0e:73:53:05:b2:de:39:26:8d:c1:4e:34:
                    03:c7:2c:c2:3b:c2:5e:d4:41:c1:f1:a0:ca:bb:95:
                    9b:c0:3a:63:ef:b3:f0:5a:0f:d3:32:2f:a3:a5:f9:
                    d0:94:8a:8a:02:a2:1f:22:69:e9:97:66:28:43:d3:
                    e8:94:9c:ce:e0:00:7a:04:f3:fe:cc:94:64:82:2c:
                    aa:19:b9:a8:b9:03:d1:93:09:7e:ef:dd:8c:ac:7e:
                    9e:25:3f:81:9e:cc:e4:6d:49:a3:b7:f5:e8:92:49:
                    51:74:fe:31:b2:33:af:dd:bb:67:29:32:82:d5:12:
                    dd:b0:c4:81:1a:83:28:ef:6c:2f:c3:72:38:84:f5:
                    31:f7:cb:4f:70:a7:74:da:37:ba:af:78:4e:e0:55:
                    4d:80:90:df:96:7f:ff:8c:ee:fa:36:90:69:33:23:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0F:A0:32:59:97:DD:C2:46:A9:41:88:ED:26:C3:FD:D0:26:47:D2
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C26DDF547AC411F19C6BFA256BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.96.0/22
                  180.178.150.0/24
                  180.178.152.0/21
                  202.92.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:2e:70:9f:85:fd:88:ac:a8:a3:76:61:67:c7:3c:70:d1:
         4c:10:17:23:a7:f4:5e:fd:7d:d0:2a:32:cf:42:fb:53:b9:69:
         46:f3:5b:20:34:a5:62:14:1e:49:66:55:24:10:3d:67:0b:7f:
         94:c2:b2:78:39:c0:0b:c7:cb:4d:3c:45:6a:31:70:9a:d2:c7:
         41:37:85:97:44:fe:44:2d:1c:1b:97:ce:38:78:f3:39:37:37:
         1e:28:7e:10:6d:c6:55:a2:2d:71:85:da:bd:76:d0:a1:a6:6a:
         a2:7d:b9:01:f0:3b:aa:6f:22:c4:a5:b3:e1:c3:51:df:8d:fb:
         2d:5b:ca:aa:b4:ba:eb:59:6f:d1:12:dc:be:14:4e:09:46:65:
         f5:96:3e:4f:c9:3d:a6:dd:fa:99:55:dd:34:fb:e7:40:40:49:
         c9:d2:97:01:89:72:cf:94:7d:5f:9e:c4:13:50:11:07:66:2b:
         79:22:59:4b:8a:ef:d6:64:bd:07:de:12:cf:00:0a:41:c2:ce:
         63:27:1d:18:6f:e0:0f:27:9f:17:4b:cc:35:04:ec:1a:c2:f6:
         8f:99:b7:11:b5:29:a6:01:69:c4:47:e8:fc:2c:e5:9d:c4:73:
         6c:be:b5:19:22:4d:01:c0:e2:34:e3:2e:ba:8a:b5:d6:5b:e2:
         3e:0c:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:26 2026 by rpki-client