Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B1A34CDCD53A11EDB199211BC4F9AE02.roa
File:                     B1A34CDCD53A11EDB199211BC4F9AE02.roa (raw, json)
Hash identifier:          ppmCLJYUXYbzXft3cQjblzOysGR446UtvDuzMu4rJ9k=
Subject key identifier:   13:88:11:EA:30:2C:9D:09:55:4D:CB:FF:CA:4F:2D:18:91:C4:89:E6
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2A34
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B1A34CDCD53A11EDB199211BC4F9AE02.roa
Signing time:             Sun 06 Sep 2026 16:24:24 +0000
ROA not before:           Sun 06 Sep 2026 16:24:24 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149440
IP address blocks:        45.249.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10804 (0x2a34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Sep  6 16:24:24 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9d93b8-df83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:de:e6:0d:4c:ac:18:1a:a5:ac:5d:f0:25:
                    81:95:8b:bf:f3:30:ea:68:04:ac:88:fc:75:d8:88:
                    bd:dc:03:f1:89:27:6f:ce:d9:72:92:8f:74:98:4d:
                    f2:8e:c9:3b:6c:8b:f8:51:a9:59:4b:da:57:68:6a:
                    74:70:2b:5e:73:21:2d:1e:57:29:9e:ef:d7:3d:d3:
                    dc:bf:5d:ac:12:8b:d5:45:a1:56:20:da:c6:57:f4:
                    4d:c3:76:e4:8a:80:b8:95:bb:6b:39:47:36:6c:be:
                    11:26:a3:56:a3:51:d9:5c:cd:19:47:19:a2:96:44:
                    2b:6f:0b:98:00:4e:2e:6b:b6:bd:b6:26:42:e5:36:
                    c8:97:25:71:c2:8c:6d:10:80:29:20:8f:7c:0a:86:
                    40:a1:cb:48:8c:c0:e2:1c:4b:4d:53:bd:e6:fb:9d:
                    18:bb:68:4b:de:cb:c8:d5:db:01:79:f9:08:8f:84:
                    a3:38:2b:c5:4e:81:e6:bb:a4:29:04:5a:be:92:be:
                    15:d5:a4:69:ae:c1:5c:5c:61:20:5a:10:1f:a0:db:
                    34:23:1e:e2:bd:a4:21:79:1b:27:1e:64:45:9f:1f:
                    02:89:64:8d:f7:de:0a:df:db:1a:e7:c2:86:d8:84:
                    64:a2:6a:fe:d6:d7:1e:0c:bb:38:9e:76:e1:03:dd:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:88:11:EA:30:2C:9D:09:55:4D:CB:FF:CA:4F:2D:18:91:C4:89:E6
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B1A34CDCD53A11EDB199211BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:aa:fb:43:3c:62:30:8f:1b:6e:8b:97:8a:13:ac:dc:13:99:
         a4:56:9f:91:e4:45:0b:54:17:2e:2b:f1:10:8b:84:a0:25:51:
         ee:54:91:84:fb:3c:8b:36:fc:e2:2c:e9:d3:57:02:20:f8:c6:
         17:f3:f3:ad:01:e5:7b:ef:20:f3:e6:0f:19:ee:f5:ef:0e:10:
         f7:e2:79:4b:4d:d5:c9:01:c1:aa:29:2b:8c:04:2c:fe:b9:92:
         50:b9:6a:6c:42:dc:32:36:6a:49:27:62:98:a9:74:56:4b:63:
         87:0a:2b:f0:34:7f:19:51:ff:86:26:ab:46:25:f2:16:ab:26:
         3c:c2:1b:97:e7:ef:01:c0:90:5e:49:46:9a:6f:24:b5:59:84:
         9f:90:72:0b:e8:d5:9d:45:b7:6b:fa:5b:7c:29:14:87:32:bb:
         51:86:8d:56:9a:6c:7d:90:06:a1:94:94:de:0f:ff:ba:9f:c9:
         fd:0d:46:21:2e:b3:de:d6:c8:08:12:66:78:1d:33:66:6a:2e:
         4c:2a:d8:89:a7:f8:b2:1f:90:cc:27:b8:f9:e2:63:8a:1f:b1:
         8a:f8:81:3e:26:a1:37:ab:bd:9a:83:36:23:0b:6d:e2:f7:63:
         1f:22:12:3b:d3:63:be:9e:6b:42:8a:15:f9:e6:e0:2e:1e:99:
         70:2b:2d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:16:29 2026 by rpki-client