Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4870FC4A34311F0BE20FD48C4F9AE02.roa
File:                     E4870FC4A34311F0BE20FD48C4F9AE02.roa (raw, json)
Hash identifier:          04bmGoQLeSuGxZfJRULINLV5OwxlVxB17xcwS5ykQAs=
Subject key identifier:   73:E5:D8:1C:BD:8F:C9:3B:59:02:D3:7A:8B:F8:69:15:BF:02:41:A0
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D1E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4870FC4A34311F0BE20FD48C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:27:08 +0000
ROA not before:           Tue 07 Oct 2025 06:07:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     206150
IP address blocks:        113.203.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11550 (0x2d1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct  7 06:07:24 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4af2c-43c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:72:0d:6e:36:b5:b2:c2:36:cc:b7:1f:df:e3:
                    c4:01:29:6f:23:85:14:0f:93:af:5d:ce:9c:1f:c2:
                    26:4f:9d:3a:e0:32:18:0f:90:5c:80:ce:60:ac:ad:
                    c3:6b:f6:f6:20:97:df:9e:f8:d0:0b:7c:01:6f:d6:
                    01:38:6b:7f:77:c8:12:68:b9:a8:f0:26:68:80:14:
                    94:07:9d:4c:e4:16:dd:d2:ee:09:39:58:dd:02:77:
                    77:fb:6c:24:dc:01:c0:fb:06:56:80:56:d8:45:47:
                    29:a4:aa:65:cc:2b:e1:b6:a0:ba:06:ac:37:0b:35:
                    73:27:7c:a6:ec:49:e9:aa:7c:3c:c1:80:fa:5d:c0:
                    18:2f:27:2e:52:9f:45:2e:7f:1c:0c:a0:f5:00:d3:
                    5f:aa:5e:59:e9:0d:40:a2:4b:06:cf:1a:d7:5f:79:
                    20:9a:1c:52:9b:69:ae:0e:2d:33:d5:ee:f6:21:9e:
                    7f:11:cc:81:e9:30:37:00:d7:d6:4a:32:c5:20:09:
                    42:11:7d:b1:d8:11:22:74:ba:9f:94:5b:99:2c:73:
                    67:93:7f:63:0c:7c:02:50:4d:6b:ed:76:43:68:48:
                    5e:81:eb:df:28:4f:41:a2:ba:99:95:fb:51:2a:02:
                    ed:42:3c:c0:29:e5:86:a0:23:a8:ad:21:30:35:d1:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E5:D8:1C:BD:8F:C9:3B:59:02:D3:7A:8B:F8:69:15:BF:02:41:A0
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4870FC4A34311F0BE20FD48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:0c:88:ae:b2:af:a2:71:7e:e0:9e:3f:3d:6b:23:83:2e:6d:
         c9:72:06:48:9f:4f:d0:9c:2e:42:e8:15:08:12:f9:db:79:70:
         0e:4b:6c:9c:9e:fb:72:2a:29:59:e7:41:ab:72:e2:cf:83:b7:
         ee:89:b9:59:46:04:01:e8:5c:c1:38:0d:9d:22:3d:8b:0a:c6:
         84:3d:4c:af:e3:dd:8c:19:4c:19:5f:9f:2c:89:eb:87:61:48:
         bb:b1:51:70:5a:d9:54:fd:42:a1:a9:ee:1a:d3:7a:64:c2:89:
         00:b8:83:12:07:14:a0:2c:03:63:12:a6:02:25:97:be:7a:5c:
         e8:0e:45:10:86:db:40:49:b7:4f:a6:7e:7c:78:d8:1e:bd:5c:
         c1:93:99:44:7f:24:a1:3e:9a:50:57:ad:7c:c2:eb:56:89:f5:
         a1:7f:a5:41:c4:fd:4a:d7:0c:34:94:14:2b:08:9e:a6:49:82:
         08:39:a1:24:50:c4:5f:7f:35:db:f5:f0:2a:e1:10:6e:b6:0c:
         88:48:1a:aa:27:f4:87:fd:a5:41:11:c9:89:ca:90:3f:76:56:
         00:3e:d3:69:86:70:fd:d3:3a:e7:3c:04:e2:0e:95:38:22:95:
         a5:83:78:14:7d:9e:98:61:a7:f9:d0:33:41:e3:6e:fc:53:06:
         c7:ab:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:20 2026 by rpki-client