Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E3EBDAAEA34311F0BE20FD48C4F9AE02.roa
File:                     E3EBDAAEA34311F0BE20FD48C4F9AE02.roa (raw, json)
Hash identifier:          9ji/2RKcGsQVgZOtp3boL0ZU92IE2GBJR6IQN0fpYUE=
Subject key identifier:   D5:14:80:5B:BC:74:7D:FC:56:4D:34:E1:FF:69:45:65:D3:83:5F:1E
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D22
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E3EBDAAEA34311F0BE20FD48C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:27:11 +0000
ROA not before:           Tue 07 Oct 2025 06:10:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10753
IP address blocks:        115.167.100.0/24 maxlen: 24
                          175.110.72.0/22 maxlen: 24
                          175.110.84.0/22 maxlen: 24
                          223.29.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11554 (0x2d22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct  7 06:10:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4af2f-5014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:15:ba:b0:6b:b1:7b:10:e2:a0:fe:da:33:
                    ca:98:e6:d0:41:e2:2d:d4:d5:0c:ac:ca:31:38:8c:
                    62:91:94:8d:6c:cb:ec:b0:e3:86:fc:e2:c9:b2:3b:
                    2c:0e:0d:0c:56:44:d5:51:a3:10:d7:c5:04:cd:d6:
                    b7:e0:f5:7a:cb:54:b6:a4:a2:e5:14:bf:34:90:41:
                    48:7d:f9:7e:d9:43:a9:cf:ab:8a:d8:8d:80:f5:33:
                    e9:eb:b2:b0:36:e3:6f:3d:46:51:92:68:86:34:1c:
                    85:01:62:a8:80:9e:b2:38:46:b4:ca:2b:57:39:8a:
                    dd:79:0a:65:e6:26:d1:73:22:68:ce:81:9e:9f:b2:
                    a3:cd:06:00:bb:30:f4:68:12:9b:07:84:60:da:14:
                    42:47:1c:82:83:0f:a3:4a:cc:8d:c3:80:06:21:4d:
                    59:66:25:5d:ef:da:5a:ef:12:4f:db:db:e8:f5:03:
                    fc:00:ba:03:2e:35:f3:1b:57:3d:a2:37:d1:90:8b:
                    58:ed:82:5c:b8:c0:1b:81:da:9d:29:3a:91:7b:a4:
                    79:4d:d1:54:b9:71:88:a5:fe:f2:74:d4:f5:fd:c7:
                    d0:05:e7:ad:56:50:8f:13:24:aa:17:cb:8c:c8:78:
                    6c:b5:54:2d:e9:58:ee:c8:bc:74:ad:61:57:27:91:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:14:80:5B:BC:74:7D:FC:56:4D:34:E1:FF:69:45:65:D3:83:5F:1E
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E3EBDAAEA34311F0BE20FD48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.100.0/24
                  175.110.72.0/22
                  175.110.84.0/22
                  223.29.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:1b:66:79:39:90:66:3d:f4:c8:04:e0:ac:9e:6b:5d:6a:c6:
         18:1c:76:82:af:c5:e9:a4:72:8c:89:d8:b2:f1:81:f9:cf:87:
         e1:27:78:7c:23:bf:b4:fd:ec:04:db:cd:a2:62:fc:25:c9:b8:
         10:29:64:b0:f5:31:74:b2:28:fa:6f:a2:f2:d0:bc:c5:57:91:
         5c:a4:28:2f:8f:37:a1:03:0c:c0:36:6f:56:35:20:38:ba:06:
         4c:98:8c:86:67:39:10:9e:6c:8f:e8:c4:b1:9f:c0:0e:0c:54:
         3a:77:b8:37:24:e0:b8:c2:0f:d1:45:79:c2:78:be:0b:68:8d:
         33:bc:12:73:ad:06:c2:9c:c9:ab:62:64:73:45:c6:80:22:9a:
         72:36:98:8b:66:d6:87:5e:03:32:76:9b:dd:89:54:87:27:61:
         6b:d7:42:14:1a:e3:8d:3a:5b:01:77:61:08:39:c8:f1:6d:a9:
         87:95:83:3e:b2:47:76:6d:bc:aa:ca:be:5d:be:5c:35:0d:2c:
         0c:9f:c0:0f:eb:b6:c9:31:11:c1:c4:2f:c0:db:40:83:bd:40:
         9d:88:ba:dd:43:92:ed:2b:18:92:b8:95:6a:18:51:04:f5:c3:
         18:fe:24:c7:4b:96:cd:ac:3f:bd:e5:62:35:1a:16:8b:25:91:
         56:e8:3d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:50 2026 by rpki-client