Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/30C49B96A89E11EFADA8D758C4F9AE02.roa
File:                     30C49B96A89E11EFADA8D758C4F9AE02.roa (raw, json)
Hash identifier:          dmk5NZr+1JgJd/otfTEYeelLfIp0W9xNN/Dd4Vyd12Q=
Subject key identifier:   79:30:47:87:53:47:C5:6E:88:4E:6A:32:23:B5:53:B7:A1:CE:08:BF
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D18
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/30C49B96A89E11EFADA8D758C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:27:03 +0000
ROA not before:           Mon 02 Jun 2025 21:07:12 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     174
IP address blocks:        175.110.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11544 (0x2d18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:12 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4af27-9a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:65:e6:f7:97:5a:80:a7:d4:89:70:5b:a2:
                    99:0b:72:c4:34:20:bf:1f:02:df:35:66:af:97:29:
                    07:f5:55:45:a8:f6:6a:c6:e9:46:76:19:89:ad:2e:
                    cd:14:51:2c:d9:2c:a5:45:61:bc:10:24:1a:67:23:
                    47:b0:e3:21:cb:e6:1b:e8:08:35:15:fb:8b:27:e0:
                    d2:12:9c:ee:89:5b:be:8d:72:e6:8b:cb:91:b1:5f:
                    70:90:c7:24:57:23:a6:98:9b:35:d1:d7:55:9e:6a:
                    fb:1c:1f:b5:04:cc:41:17:5b:fc:11:ae:6d:81:b5:
                    e9:f3:8d:bb:25:56:99:30:f3:98:6c:4e:9f:ac:ad:
                    45:21:04:3e:77:6d:e4:98:56:17:1e:b5:de:eb:4f:
                    5d:cd:9f:c7:b5:71:b9:18:5d:a2:cd:d0:2f:1f:33:
                    80:3a:91:c4:95:e3:b1:10:4f:93:6a:b8:bc:89:42:
                    72:7a:6c:e2:44:f5:30:0f:2f:25:61:ed:90:57:c3:
                    c6:6c:a3:80:6c:95:e5:41:97:b7:d5:23:35:6c:52:
                    9a:e1:c0:b4:04:24:26:61:c1:42:d1:ea:8a:48:61:
                    d0:3f:87:3a:a0:a1:08:a8:d4:33:93:f8:4c:b9:63:
                    73:f6:49:3e:e0:fc:cc:e5:c1:8b:ef:84:c8:00:81:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:30:47:87:53:47:C5:6E:88:4E:6A:32:23:B5:53:B7:A1:CE:08:BF
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/30C49B96A89E11EFADA8D758C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:ef:6f:63:9b:f8:2b:b0:a5:53:19:a0:d5:e4:86:49:a6:
         8c:b3:ec:0d:57:d5:89:54:ca:01:31:06:fe:4a:90:c5:61:32:
         f8:70:40:4a:ab:c1:19:60:1d:41:86:71:5e:f0:f4:cb:f8:8a:
         73:d8:ab:7e:ba:2e:94:7c:74:64:79:f4:2c:af:24:3e:cf:bc:
         2a:fb:4e:6a:c5:97:fa:ce:24:c2:ac:16:48:80:ea:2f:cb:4d:
         c1:bd:4d:fc:f7:af:d5:23:df:c3:d0:f8:b0:51:32:f7:c9:60:
         64:6f:26:6b:9c:11:3c:73:bb:ad:33:69:4c:49:08:19:9f:cd:
         3f:91:03:c8:5c:5d:2c:88:c8:f2:df:e6:60:25:1c:1f:2e:de:
         5e:f9:d7:ec:df:18:c6:14:16:6f:93:d6:ba:3d:74:49:c0:f6:
         19:e6:a1:b1:8e:3c:0c:53:3f:75:f4:76:09:46:9c:ce:23:5d:
         c5:d8:1e:99:c7:b0:cd:45:38:5e:00:d3:85:23:2c:be:55:df:
         cc:f3:e4:42:e7:f0:35:8c:7c:b8:83:a6:5a:2f:4d:e2:13:9d:
         71:b6:62:51:24:b0:ce:a9:34:f1:ff:de:f1:3b:8f:09:75:8a:
         a7:76:11:33:13:24:d5:fc:bd:a3:34:08:3e:68:d4:a9:71:ab:
         4a:95:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:59 2026 by rpki-client