Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/94A4925CD61111E999D7033CC4F9AE02.roa
File:                     94A4925CD61111E999D7033CC4F9AE02.roa (raw, json)
Hash identifier:          G3MjNX1y2uXnoYlRhg/1wYpgYNkokPqqVx/xMZeC8vI=
Subject key identifier:   C3:7C:F7:D0:6A:B3:EA:69:B5:61:9B:6E:8E:D5:D3:BF:87:BB:BB:CF
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BEA
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/94A4925CD61111E999D7033CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:23:41 +0000
ROA not before:           Fri 02 Jan 2026 16:13:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9464
IP address blocks:        110.49.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11242 (0x2bea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:54 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4923d-41b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:dc:89:01:ed:95:ee:86:99:75:26:ef:b2:
                    11:0d:b9:8a:77:b3:4c:ea:6b:ac:85:13:08:fb:90:
                    82:70:08:a0:7c:dd:4d:09:62:bd:c8:77:2b:21:a1:
                    ad:4c:cc:ce:19:20:59:e2:0e:c2:23:00:6b:a2:a0:
                    bd:5f:16:77:3c:86:4c:20:6d:73:5f:b9:7c:06:49:
                    e8:a3:d8:3e:a6:25:a9:88:03:74:fa:c3:36:94:e9:
                    f7:73:da:b5:69:ac:0d:bf:e9:0e:13:dd:06:f2:ae:
                    e9:6e:14:a1:a6:46:3f:96:e3:87:c5:c9:ba:25:5d:
                    5f:68:87:17:a9:09:67:fb:f2:e4:32:a5:a9:0f:9d:
                    e4:2c:76:67:d0:cf:80:66:04:7c:59:05:1f:37:95:
                    5e:10:9e:a5:78:f3:40:ff:da:90:39:a3:19:95:97:
                    cf:22:4a:ca:0f:af:34:19:ca:4c:12:2b:85:02:ed:
                    4f:97:d5:a6:3f:31:db:f0:7c:7d:ef:4a:e8:dc:93:
                    e9:9c:5e:75:8c:8e:a8:70:08:8d:d7:87:f8:31:40:
                    48:17:6f:15:9c:dd:5d:aa:7d:60:da:27:11:82:b8:
                    55:1a:51:03:e7:2b:05:e2:ad:17:79:be:85:30:72:
                    a7:10:04:92:e3:59:7b:80:71:0f:61:f1:2e:c4:eb:
                    ed:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:F7:D0:6A:B3:EA:69:B5:61:9B:6E:8E:D5:D3:BF:87:BB:BB:CF
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/94A4925CD61111E999D7033CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.49.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:bc:a7:cc:72:5f:39:e2:25:a4:87:b5:6f:2c:a1:4f:9f:
         f2:f0:00:1f:d5:b4:61:91:c1:a5:ae:5e:40:e0:47:60:0b:8d:
         a2:b4:cb:38:33:bd:50:7b:03:5a:61:78:6b:ae:67:5e:8e:8b:
         fb:cc:d9:8b:8f:da:29:70:73:95:62:9a:bd:18:84:02:41:63:
         22:ca:c8:8f:74:65:ae:50:db:5f:85:74:74:68:6f:29:2d:df:
         06:03:f7:8f:12:8f:11:a9:b0:30:84:33:84:37:5c:0d:f9:79:
         4b:ea:95:3e:10:f3:a4:c5:e4:56:87:0a:f5:09:39:9f:09:1c:
         d1:27:96:58:4b:c2:3c:ff:59:78:dd:57:b8:50:98:a4:91:ba:
         fa:a3:89:ac:97:3c:d1:74:5f:00:dd:a4:6e:2a:d4:af:f6:6a:
         54:66:16:80:2a:33:0b:38:9e:f8:ec:58:9c:50:4a:b8:b5:48:
         d9:30:8b:86:19:71:01:83:66:43:88:f3:36:3e:d8:7f:b3:cb:
         85:63:a5:75:2d:c9:52:7d:ee:5f:20:92:6c:0f:99:44:d3:47:
         70:b8:22:bb:6b:b5:0c:7f:6a:50:87:bb:2a:84:3a:d0:31:c9:
         53:06:d1:12:c3:05:f8:e7:cd:52:6e:ca:1e:5d:8a:3a:91:69:
         60:7d:ca:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:12 2026 by rpki-client