Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AC0F77DE057311F1ACA1C8B3333D8C67.roa
File:                     AC0F77DE057311F1ACA1C8B3333D8C67.roa (raw, json)
Hash identifier:          3Zzzcz3d74ZZ6UarUu1YsYwGd8bg4rfFWLieFhkyYyo=
Subject key identifier:   11:AA:63:0A:97:5F:F1:DE:85:39:48:7F:D7:F8:46:A3:BF:78:AE:84
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E20
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AC0F77DE057311F1ACA1C8B3333D8C67.roa
Signing time:             Thu 04 Jun 2026 20:26:20 +0000
ROA not before:           Thu 04 Jun 2026 20:26:20 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     397373
IP address blocks:        113.203.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11808 (0x2e20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  4 20:26:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21df6c-23ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:ed:39:16:f3:0d:5c:dc:46:5c:8d:e0:46:
                    86:ef:d7:eb:41:f1:76:3a:94:35:ca:b3:e5:b0:d7:
                    fa:73:dd:43:8b:80:4a:10:6a:89:66:9c:56:55:7a:
                    10:6b:9b:a3:cc:89:da:77:e6:9b:3f:2b:49:5c:aa:
                    f1:2e:2b:92:4d:8f:f2:70:43:55:f9:5c:17:9d:9e:
                    f7:75:7a:47:66:a8:54:a4:d5:4a:d4:af:f0:26:63:
                    74:df:d1:04:7e:63:b7:55:59:dc:f2:bd:70:7b:aa:
                    fc:d9:af:e4:f9:d3:58:52:36:c6:5f:0b:e1:f5:78:
                    a6:86:52:5f:9f:86:f8:f4:60:6a:1d:09:50:26:3a:
                    13:92:d3:4c:53:b4:05:cb:57:19:8a:63:a8:63:a3:
                    65:06:55:3d:5d:a4:31:76:f8:a6:52:2b:a4:dc:c3:
                    12:92:7f:52:3e:79:21:95:dc:94:3d:5e:ee:f4:e4:
                    52:72:4e:93:c9:a9:09:10:31:42:95:ba:7f:77:6d:
                    92:72:c7:cd:56:a5:b4:64:41:06:0f:26:8b:c7:4d:
                    d1:18:ca:0f:f7:03:77:1a:e7:2d:e1:a2:3e:e6:43:
                    33:b9:e8:55:b0:1e:c6:19:f3:dc:c1:88:a4:08:eb:
                    d2:63:8e:92:3a:d1:22:58:24:6b:ac:27:ad:de:ed:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:63:0A:97:5F:F1:DE:85:39:48:7F:D7:F8:46:A3:BF:78:AE:84
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AC0F77DE057311F1ACA1C8B3333D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:fd:da:56:00:29:b0:5b:f6:1d:54:7c:31:c7:b0:7f:0a:86:
         f5:cc:8d:a7:1f:82:ac:e2:6c:fd:dd:96:11:7d:40:fb:af:b8:
         2d:62:f9:bf:5c:59:bd:f7:23:7b:5b:db:91:ba:f9:8b:f0:1a:
         3a:04:f7:4c:c4:40:8d:cc:ef:40:2d:e0:73:95:19:94:fe:76:
         c4:8a:f1:a3:02:c6:7a:31:72:e4:e7:be:fb:e7:fb:ec:92:b7:
         a5:7e:c8:7a:0f:da:cf:86:f3:b2:fe:b6:7e:23:2f:a4:61:03:
         dc:bc:cb:b6:92:12:97:81:1e:5d:a5:1f:b2:22:31:6c:29:76:
         2c:95:fe:64:44:43:dd:a1:ea:9e:3f:81:8f:c4:aa:23:05:6f:
         60:a6:93:ac:c1:c6:08:ab:76:57:46:d4:98:a4:7f:4e:c8:85:
         27:5e:45:63:32:f7:66:02:99:de:56:61:66:71:47:ec:dd:49:
         c6:d9:8c:9e:30:94:d3:c2:24:29:dc:fc:eb:cf:76:a1:d1:a9:
         a2:de:52:21:95:2f:c1:e2:fb:e0:8b:89:b9:37:b8:4c:12:96:
         4b:9d:22:43:22:46:f6:1d:1c:03:cc:65:75:ca:ce:cb:c3:20:
         92:b4:05:3f:88:56:68:41:a1:0b:24:68:d6:aa:0a:5b:32:b6:
         85:89:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:52:27 2026 by rpki-client