Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DB8D917CC88111F18DC744765011F970.roa
File:                     DB8D917CC88111F18DC744765011F970.roa (raw, json)
Hash identifier:          L6QXRBlTPELIbPVUpN1FU6rl99byiyfGE7rNKtEWf+M=
Subject key identifier:   B6:BB:4A:94:BB:A8:DB:6E:91:4F:63:56:37:46:DD:B9:A0:73:5C:09
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       301D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DB8D917CC88111F18DC744765011F970.roa
Signing time:             Thu 15 Oct 2026 10:19:09 +0000
ROA not before:           Thu 15 Oct 2026 10:19:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        113.203.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 09:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12317 (0x301d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct 15 10:19:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ad0a89c-a8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:44:2c:5c:f7:a3:1d:ad:e7:e0:45:cd:6c:
                    8e:2e:52:75:f3:e7:2f:1e:eb:4f:d2:61:c5:20:6c:
                    25:d7:2d:11:f6:d4:20:8a:17:56:8d:5b:f1:40:ad:
                    68:17:8f:34:17:7f:0b:b1:e9:9b:e9:3b:2e:9b:7b:
                    43:74:e7:d1:04:d9:74:61:37:90:44:4f:c9:13:96:
                    33:f4:4b:a6:d2:1b:0a:5c:28:89:19:6d:5c:7a:75:
                    c7:f6:6b:08:0d:63:a8:94:83:75:7e:11:41:79:60:
                    8f:1a:52:0f:3e:7a:ae:00:97:15:2f:5f:3b:a1:62:
                    65:32:5d:2e:d2:d8:4d:9a:86:e9:da:c1:a6:b4:4e:
                    a2:3f:7f:1c:cf:77:ad:35:f0:05:e2:83:77:ae:2d:
                    81:16:55:11:32:e5:ec:cf:bb:6f:db:17:7a:b1:4c:
                    f3:8b:f0:63:72:ca:4a:1f:77:c0:f2:b9:2a:7a:4d:
                    9e:b8:18:81:f4:63:f7:de:e0:4e:ff:df:19:be:0f:
                    d4:e2:9e:f0:94:4e:7e:12:cd:52:6b:c4:29:3b:7d:
                    d9:39:77:f4:cd:0a:69:54:00:22:6b:bf:50:dc:72:
                    24:64:ef:e8:14:65:dc:d9:86:81:5a:56:57:55:72:
                    4a:ae:56:ab:93:9b:54:e9:33:32:85:e0:71:04:13:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BB:4A:94:BB:A8:DB:6E:91:4F:63:56:37:46:DD:B9:A0:73:5C:09
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DB8D917CC88111F18DC744765011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:15:ba:2d:d4:89:46:9d:0f:1c:e7:4a:da:5c:59:56:b6:13:
         bb:2b:5b:39:19:2e:01:9a:da:4f:e4:d1:43:ab:ca:6f:4a:e3:
         87:e7:f9:61:00:55:3c:3b:79:73:0a:27:37:8f:9c:a8:73:19:
         4d:ba:81:5d:87:b2:85:2e:76:cd:0f:89:67:cf:49:58:8c:a0:
         d4:dd:b5:e6:17:fe:8b:86:85:af:01:a5:7f:70:c0:a8:61:62:
         b0:f8:44:5a:53:68:27:bc:09:15:c2:09:92:ae:2d:30:38:c4:
         4f:07:05:39:f7:bc:bc:c1:fb:ee:98:93:7c:1f:e9:8d:cd:75:
         33:69:c6:e1:6a:d7:38:cc:d6:e6:06:ef:01:b9:b3:4f:51:b8:
         3c:68:d1:2e:4c:3c:34:ef:73:5d:cf:9d:09:62:5b:f5:f6:be:
         94:9a:fb:66:72:7e:bc:6f:56:07:89:55:19:a8:57:e4:81:f1:
         02:d0:77:85:96:23:fa:f2:89:1d:6f:f1:19:44:ab:c2:d5:df:
         b0:dd:be:66:13:32:7e:1b:0a:fc:0a:c9:f5:74:d7:10:e0:47:
         02:dc:6b:3d:39:a0:85:86:99:79:57:b3:15:95:ff:bc:ec:af:
         12:50:36:fc:3d:5d:5b:be:e7:2e:3d:90:02:5c:eb:09:2d:6a:
         d7:18:67:da
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjYxMDE1MTAxOTA5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQwYTg5Yy1hOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKJELFz3ox2t5+BFzWyOLlJ18+cvHutP0mHFIGwl1y0R9tQgihdWjVvxQK1o
F480F38Lsemb6Tsum3tDdOfRBNl0YTeQRE/JE5Yz9Eum0hsKXCiJGW1cenXH9msI
DWOolIN1fhFBeWCPGlIPPnquAJcVL187oWJlMl0u0thNmobp2sGmtE6iP38cz3et
NfAF4oN3ri2BFlURMuXsz7tv2xd6sUzzi/BjcspKH3fA8rkqek2euBiB9GP33uBO
/98Zvg/U4p7wlE5+Es1Sa8QpO33ZOXf0zQppVAAia79Q3HIkZO/oFGXc2YaBWlZX
VXJKrlark5tU6TMyheBxBBOWgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLa7SpS7
qNtukU9jVjdG3bmgc1wJMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvREI4RDkxN0ND
ODgxMTFGMThEQzc0NDc2NTAxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCccv4MA0GCSqGSIb3DQEBCwUAA4IBAQBKFbot1IlGnQ8c50raXFlW
thO7K1s5GS4BmtpP5NFDq8pvSuOH5/lhAFU8O3lzCic3j5yocxlNuoFdh7KFLnbN
D4lnz0lYjKDU3bXmF/6LhoWvAaV/cMCoYWKw+ERaU2gnvAkVwgmSri0wOMRPBwU5
97y8wfvumJN8H+mNzXUzacbhatc4zNbmBu8BubNPUbg8aNEuTDw073Ndz50JYlv1
9r6Umvtmcn68b1YHiVUZqFfkgfEC0HeFliP68okdb/EZRKvC1d+w3b5mEzJ+Gwr8
Csn1dNcQ4EcC3Gs9OaCFhpl5V7MVlf+87K8SUDb8PV1bvucuPZACXOsJLWrXGGfa
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:15:18 2026 by rpki-client