Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/326D4FC0B2B411F1997D0CF84711F970.roa
File:                     326D4FC0B2B411F1997D0CF84711F970.roa (raw, json)
Hash identifier:          aQ+4c9ELvGD8xCedtPYvCZlIaJjj2LOCrzh+PDufpZ4=
Subject key identifier:   01:F2:A1:61:66:2D:75:03:C3:1E:E4:32:CF:44:6D:38:9C:CD:51:67
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2F4B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/326D4FC0B2B411F1997D0CF84711F970.roa
Signing time:             Thu 17 Sep 2026 16:33:37 +0000
ROA not before:           Thu 17 Sep 2026 16:33:37 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     3319
IP address blocks:        103.11.70.0/24 maxlen: 24
                          113.203.214.0/24 maxlen: 24
                          113.203.216.0/24 maxlen: 24
                          115.167.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12107 (0x2f4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Sep 17 16:33:37 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6aac1661-c2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:39:de:6d:21:14:d3:67:08:4f:94:f3:10:
                    d6:93:b2:eb:16:ac:df:e9:ce:7d:c5:61:fe:3e:bd:
                    be:e3:82:18:5c:b3:7b:bc:94:23:da:a2:f7:fa:7b:
                    dc:2b:3c:8f:82:e2:3c:a4:05:2a:81:9a:78:2b:b7:
                    07:7e:bf:ab:5b:7d:e9:56:27:08:79:37:aa:47:f4:
                    1a:fc:0e:86:7a:60:1e:74:6d:52:30:89:8f:9f:25:
                    5e:35:73:a1:a1:8d:5b:23:88:b0:28:89:09:f5:de:
                    ab:71:56:8e:3b:f2:42:5c:91:4d:ca:0a:3c:3f:a5:
                    99:40:ad:4a:b5:7e:f7:00:af:15:e6:6c:06:59:6f:
                    fa:ed:dd:68:75:17:de:7d:58:ea:42:d9:a4:13:41:
                    fb:4f:f7:1e:9c:5e:6c:34:23:6b:9f:87:c6:c2:8a:
                    a5:a3:9d:cb:be:99:3d:f4:3e:25:ba:c3:91:3a:7f:
                    af:d4:b3:58:87:ee:5a:3b:20:ad:d8:df:4b:4f:0e:
                    98:88:a8:c8:f6:2c:94:51:63:2f:32:f2:80:59:ed:
                    45:73:99:6d:f8:48:3f:4f:82:dc:87:19:78:54:f5:
                    26:66:82:70:16:c3:e7:30:14:8a:50:e0:40:81:b1:
                    c2:2e:db:1e:2f:ba:03:1c:05:65:dd:53:e7:a1:8c:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F2:A1:61:66:2D:75:03:C3:1E:E4:32:CF:44:6D:38:9C:CD:51:67
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/326D4FC0B2B411F1997D0CF84711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.70.0/24
                  113.203.214.0/24
                  113.203.216.0/24
                  115.167.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c4:9c:25:33:c3:f4:8b:2f:91:f5:ea:ee:99:83:a8:c9:14:
         73:95:87:e6:01:a5:71:05:72:e8:d7:5c:cf:0c:1c:a9:31:0b:
         b4:84:85:98:39:d3:8a:2d:2c:b5:9d:48:cf:8b:aa:e6:1a:72:
         56:76:05:e3:37:93:96:85:4c:51:b4:99:d6:3a:75:c5:d2:0d:
         54:e7:51:c9:e5:a8:9e:be:0a:ec:34:22:35:b6:4b:a6:ae:eb:
         40:fa:33:bd:9a:31:89:b8:cb:34:7c:c3:59:fa:75:db:da:70:
         81:2e:3f:84:62:1d:d7:6b:f6:50:b3:cf:db:8f:80:44:49:d5:
         d2:cd:4a:16:b3:89:f8:86:d7:72:20:e8:99:74:8a:5b:75:15:
         b8:4f:be:8a:6b:fd:46:34:fd:86:ad:c0:67:c3:ed:a3:07:23:
         f7:6e:de:7d:3b:fd:9c:b5:a3:83:03:60:be:1f:12:d9:dd:cd:
         7e:da:bc:42:01:0d:1f:32:fe:2d:16:6b:ac:70:8b:b5:5f:df:
         7d:68:30:0a:fd:a2:b5:82:12:13:54:d2:ad:8c:c2:4b:85:91:
         96:f1:6a:41:ac:cc:08:cf:4a:57:53:74:9b:55:dc:ef:76:5b:
         c5:8b:50:65:a3:0a:83:43:51:fe:1e:78:ac:d2:e2:7f:e5:8e:
         ea:2d:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:09 2026 by rpki-client