Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4B2CBC84DCF11F1A09241CBB4833773.roa
File:                     E4B2CBC84DCF11F1A09241CBB4833773.roa (raw, json)
Hash identifier:          EnjevpgbIjxbge2dSL+s4lMy1ZCB9L2gFMRM6vojm0A=
Subject key identifier:   D3:86:66:5B:5C:77:F5:B9:56:23:E4:B7:9E:5F:1B:55:57:BF:10:3F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2DC3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4B2CBC84DCF11F1A09241CBB4833773.roa
Signing time:             Tue 19 May 2026 05:53:30 +0000
ROA not before:           Tue 19 May 2026 05:53:30 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7029
IP address blocks:        43.254.12.0/22 maxlen: 24
                          115.167.68.0/22 maxlen: 22
                          115.167.108.0/22 maxlen: 24
                          115.167.126.0/24 maxlen: 24
                          115.167.127.0/24 maxlen: 24
                          175.110.68.0/22 maxlen: 24
                          175.110.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 May 2026 20:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11715 (0x2dc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 19 05:53:30 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6a0bfada-cec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:6c:94:c5:30:4b:ed:d6:5f:05:2b:fa:39:
                    be:bc:04:74:9c:fb:03:c6:bd:ad:ad:e6:24:3d:d8:
                    b2:09:2e:a6:62:68:f6:ba:fa:66:67:6e:1e:c7:c2:
                    00:87:3c:eb:22:b4:c2:fd:b9:85:54:ac:01:01:a5:
                    05:75:54:7f:44:79:75:9b:d1:63:67:22:26:29:08:
                    02:2f:3e:75:38:13:61:c4:44:e4:dd:20:9e:c7:30:
                    77:38:53:6b:ab:b1:31:e1:58:e3:aa:21:6e:bb:a6:
                    89:83:96:b5:02:f3:cf:59:98:af:ac:86:99:cd:35:
                    e7:99:f4:cc:24:c4:96:34:ee:59:9c:07:51:52:c5:
                    8a:05:95:16:62:43:22:ba:eb:a3:df:2c:0f:b0:bd:
                    e9:f0:7a:e0:ea:dd:c8:88:f2:df:cc:2a:79:c3:59:
                    d3:da:7a:4e:d0:b8:ca:05:09:67:63:33:56:2f:e1:
                    b8:9d:33:46:8d:d7:d2:a8:06:41:a7:6f:ac:28:6d:
                    ce:6e:12:e0:38:82:a2:9d:e6:47:67:74:1a:5e:92:
                    fb:b4:3b:4e:db:c3:71:a7:0b:e1:43:b3:11:3d:52:
                    c1:b0:9a:4b:d6:0e:32:75:61:00:cf:b7:cc:c7:93:
                    b1:96:5c:31:05:d0:49:a1:f3:3a:9a:36:13:7c:72:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:86:66:5B:5C:77:F5:B9:56:23:E4:B7:9E:5F:1B:55:57:BF:10:3F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4B2CBC84DCF11F1A09241CBB4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.12.0/22
                  115.167.68.0/22
                  115.167.108.0/22
                  115.167.126.0/23
                  175.110.68.0/22
                  175.110.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:22:17:60:01:bf:14:1f:bd:3f:bd:62:99:1b:a7:f0:95:98:
         ec:f3:9c:ad:a4:23:62:c8:5b:57:b9:34:3a:49:fc:f9:d3:ba:
         22:b8:58:4a:82:65:2b:60:d7:2c:bf:58:cb:a0:e2:8d:4c:1d:
         3d:e8:fc:41:3a:d0:4f:26:97:ca:d8:2c:e5:b7:c9:2e:65:9d:
         42:1e:49:31:1d:fa:c0:89:3d:48:34:f8:0b:72:8c:06:0d:6e:
         ae:51:83:1c:98:76:e4:20:32:f1:9b:ed:a6:c7:2a:35:60:26:
         e1:d0:ed:9c:38:2a:1d:1b:94:14:c5:46:b5:51:75:68:0d:d5:
         7e:af:54:e7:f6:b9:b2:9c:74:dd:76:df:9d:b1:59:2b:77:9d:
         83:71:35:4c:c7:47:91:fc:f5:37:eb:a4:b9:d3:1c:25:61:fa:
         15:3c:70:3f:6b:50:3e:75:da:c2:f6:76:79:2f:de:56:9f:ef:
         db:45:71:39:d2:04:ef:ae:69:68:32:b7:7e:c4:1d:0a:41:43:
         17:b9:28:24:3d:4b:10:cc:d3:34:b5:55:9a:00:67:04:53:8a:
         9e:cd:af:71:29:09:c8:6e:a2:7f:2e:41:91:7a:1e:2a:22:43:
         5b:4c:01:99:42:15:ee:50:23:1b:65:e6:78:5a:1e:39:12:38:
         54:07:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 06:42:35 2026 by rpki-client