Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/379554D48E1211EFA0811E85C4F9AE02.roa
File:                     379554D48E1211EFA0811E85C4F9AE02.roa (raw, json)
Hash identifier:          m9V1ZIbegiW7rjQeET3q+vOe4RclSmC0ZhvmKOJ2Z0c=
Subject key identifier:   15:C3:77:2E:BF:81:D9:67:3C:2A:84:50:93:5F:9B:99:E2:A5:DC:75
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2947
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/379554D48E1211EFA0811E85C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:36 +0000
ROA not before:           Sat 26 Jul 2025 15:53:42 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137552
IP address blocks:        45.249.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10567 (0x2947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:53:42 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48ef0-9b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:50:df:cd:08:f2:52:73:16:55:95:c5:bc:
                    bc:00:b0:d1:2d:14:b7:c6:5a:b3:5f:ea:ad:3a:ff:
                    f5:0d:64:a2:d7:d0:ed:3b:fa:ef:42:d0:42:b8:a2:
                    b6:fd:99:79:5e:c7:6e:f0:4e:56:2d:f0:70:24:25:
                    51:7d:ab:be:c8:c7:7a:4a:5f:29:53:de:eb:a5:72:
                    95:c6:bd:a5:e3:84:68:dc:61:b4:f4:8e:bd:03:38:
                    e6:50:ef:71:a0:ff:b4:59:be:90:06:64:46:4e:0d:
                    d0:42:32:68:f9:31:e2:a2:13:a0:b5:c7:0b:d5:7b:
                    33:00:5c:0d:ec:7d:2f:91:38:7d:a1:38:35:16:eb:
                    b0:a3:0a:20:2c:f9:ed:6a:81:4e:e3:b3:f7:86:ce:
                    ae:bc:c1:dd:52:7c:94:fb:a2:00:bb:d0:cf:cb:f2:
                    4e:dd:68:af:a5:9a:ba:64:f2:b2:1d:e7:d5:e0:5f:
                    6b:7e:c2:c3:04:7e:d0:b3:b8:d0:a9:ab:40:a8:ba:
                    c8:aa:95:6a:f3:4b:e7:82:8e:d0:fd:6c:b7:b6:14:
                    a1:a3:f9:85:00:22:fa:fb:03:34:c0:14:2a:6f:07:
                    bc:1a:0c:06:8f:af:9b:f3:ca:c6:ea:9d:14:fc:b6:
                    98:c4:97:d5:68:07:ff:10:70:ce:48:e5:8d:b7:4b:
                    96:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C3:77:2E:BF:81:D9:67:3C:2A:84:50:93:5F:9B:99:E2:A5:DC:75
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/379554D48E1211EFA0811E85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d8:1b:6a:f0:d7:79:49:d8:8a:0e:40:fb:93:fd:38:d3:b2:
         17:60:22:06:27:12:f9:06:2c:ce:c4:17:15:42:86:bf:58:23:
         72:da:1f:39:ff:24:eb:a1:d3:6f:b7:83:8e:9c:04:15:9c:70:
         d2:24:c7:f6:ac:c5:04:0e:36:b8:fd:75:b3:44:a5:bb:2c:85:
         68:25:db:d3:90:00:44:4a:63:b4:fd:2a:42:65:94:73:f0:68:
         91:fc:c3:05:42:3b:d6:ea:2b:7c:d0:60:12:66:8c:9c:71:2d:
         b3:98:ea:36:a6:08:22:38:98:13:8d:9f:24:14:7a:44:7c:ef:
         1b:46:d4:83:6e:0b:38:74:f1:7b:07:90:4b:05:e6:fc:6f:92:
         e8:bb:9a:1d:81:68:c7:fc:db:d8:24:93:7e:c8:0d:d2:d6:0d:
         da:de:62:69:d7:8c:48:74:86:d7:52:d6:a4:a3:31:95:b3:f4:
         1e:6e:f8:45:92:77:a7:32:3d:54:87:b1:0b:f6:8b:6d:bf:aa:
         6a:c9:67:25:fd:57:9d:02:9c:97:c2:73:d6:e7:c3:d0:18:c7:
         63:82:24:59:b1:35:fa:11:fb:5f:6d:58:da:83:69:94:6a:52:
         86:fc:bd:57:af:1f:ad:dc:57:37:c6:d5:04:1f:3e:33:5b:d4:
         b5:0a:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:35 2026 by rpki-client