Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F17169E244A311E9AEF6F25AC4F9AE02.roa
File:                     F17169E244A311E9AEF6F25AC4F9AE02.roa (raw, json)
Hash identifier:          0y46BeXruaNKVYGK3sSOFaknvPcRcCBPrAnJT2GiGNE=
Subject key identifier:   89:6D:7F:24:F8:05:82:0E:B5:6F:7B:A1:82:8B:C6:F6:6C:0B:7B:7A
Certificate issuer:       /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial:       2809
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F17169E244A311E9AEF6F25AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:40:35 +0000
ROA not before:           Thu 22 May 2025 15:52:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     45622
IP address blocks:        111.68.56.0/24 maxlen: 24
                          114.108.205.0/24 maxlen: 24
                          114.108.216.0/24 maxlen: 24
                          114.108.236.0/24 maxlen: 24
                          182.18.200.0/24 maxlen: 24
                          182.18.201.0/24 maxlen: 24
                          182.18.238.0/24 maxlen: 24
                          182.18.246.0/24 maxlen: 24
                          182.18.247.0/24 maxlen: 24
                          182.18.248.0/24 maxlen: 24
                          182.18.249.0/24 maxlen: 24
                          182.18.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10249 (0x2809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
        Validity
            Not Before: May 22 15:52:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a514c3-8b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:0e:e4:4c:8a:10:7d:19:61:ac:78:d3:6b:
                    19:07:bf:f6:f4:c4:15:d7:a8:21:5b:3f:45:b1:6e:
                    25:03:6c:80:60:82:46:9e:a8:19:38:09:04:c7:c2:
                    85:25:9d:ce:f9:71:76:e6:63:a7:52:43:00:4a:a2:
                    1e:ef:e8:9e:01:b1:7a:1a:2f:6c:28:8a:2e:93:cb:
                    21:b2:56:8d:a0:c8:1c:b0:f3:b8:fc:e2:09:46:5a:
                    f6:24:cd:2c:51:2c:cf:29:8a:cc:37:44:a3:68:ea:
                    03:cd:10:a5:b9:0b:4d:f5:9f:10:7c:c3:a4:78:6d:
                    c0:91:f7:f0:70:88:4d:98:87:69:80:1b:e2:37:e0:
                    94:19:fd:e8:d3:cc:e2:a9:71:66:5c:e6:f8:90:03:
                    3f:b9:de:7c:1e:69:e5:ba:8a:61:6b:a2:e2:82:6a:
                    7d:e5:fd:6f:9c:94:a5:f1:04:ed:e6:78:36:8d:73:
                    25:1f:77:e0:58:6a:91:cf:ae:fa:41:f8:00:3a:59:
                    dd:32:a5:dc:28:e7:2e:ef:77:c5:3f:4b:2c:99:57:
                    f9:02:e2:4a:a5:86:cb:67:03:68:40:8d:cd:38:21:
                    28:61:78:aa:13:ad:97:ac:6c:84:a8:9e:53:05:25:
                    5b:4c:d2:70:27:38:aa:d3:1b:eb:7a:a9:6d:ac:d4:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6D:7F:24:F8:05:82:0E:B5:6F:7B:A1:82:8B:C6:F6:6C:0B:7B:7A
            X509v3 Authority Key Identifier:
                keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F17169E244A311E9AEF6F25AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.56.0/24
                  114.108.205.0/24
                  114.108.216.0/24
                  114.108.236.0/24
                  182.18.200.0/23
                  182.18.238.0/24
                  182.18.246.0-182.18.250.255

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:81:86:5d:bd:79:c3:94:a2:9c:c9:bb:18:30:c4:41:79:
         b4:5b:e5:e5:24:83:5b:d4:17:4a:ff:61:55:4d:be:78:e9:1a:
         47:6f:07:17:6e:74:ac:01:44:6e:ea:80:fb:bb:55:f4:fe:b3:
         9c:31:25:da:b6:fe:15:c6:62:3e:85:5e:c8:ae:b4:6f:56:6d:
         ab:f2:d2:d2:fb:3a:b1:37:74:ee:74:f2:0b:a1:24:4f:d9:b3:
         be:7e:e3:e3:0d:c9:88:1d:fc:c8:93:b1:9e:7e:88:5a:25:65:
         4f:d0:d6:2f:48:cf:70:86:94:ba:e8:cd:83:15:d7:64:56:eb:
         ad:f4:eb:4b:c6:65:3d:d4:dc:aa:51:67:bc:96:0f:0d:de:8c:
         7d:0e:9e:70:89:7e:a3:e0:58:00:7f:7b:69:0b:3a:4c:d5:28:
         29:6d:75:36:27:ad:32:92:a7:f9:38:8a:cd:9a:f4:35:ec:a0:
         b5:ca:b9:ac:72:64:c6:37:15:21:b0:ed:83:72:d3:ab:45:d2:
         65:9b:d2:de:34:7b:80:b4:81:34:8a:af:ae:ae:02:25:43:14:
         9c:3f:6b:9a:a4:7f:f8:bb:fd:f7:a9:f6:4b:84:56:0d:21:32:
         e6:52:b5:9c:37:b3:99:6f:10:88:7f:ed:5b:2c:bb:17:98:e2:
         10:b1:e6:64
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgICKAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4
NTFBQThBRjUwHhcNMjUwNTIyMTU1MjI2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MTRjMy04YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxXsO5EyKEH0ZYax402sZB7/29MQV16ghWz9FsW4lA2yAYIJGnqgZOAkEx8KF
JZ3O+XF25mOnUkMASqIe7+ieAbF6Gi9sKIouk8shslaNoMgcsPO4/OIJRlr2JM0s
USzPKYrMN0SjaOoDzRCluQtN9Z8QfMOkeG3AkffwcIhNmIdpgBviN+CUGf3o08zi
qXFmXOb4kAM/ud58Hmnluopha6Ligmp95f1vnJSl8QTt5ng2jXMlH3fgWGqRz676
QfgAOlndMqXcKOcu73fFP0ssmVf5AuJKpYbLZwNoQI3NOCEoYXiqE62XrGyEqJ5T
BSVbTNJwJziq0xvreqltrNQw0QIDAQABo4ICjDCCAogwHQYDVR0OBBYEFIltfyT4
BYIOtW97oYKLxvZsC3t6MB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF
Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1RkQvRTFFRkQ5QjZERUNFMTFFNEExNEYwMDY4QzRGOUFFMDIvRjE3MTY5RTI0
NEEzMTFFOUFFRjZGMjVBQzRGOUFFMDIucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4
BAIAATAyAwQAb0Q4AwQAcmzNAwQAcmzYAwQAcmzsAwQBthLIAwQAthLuMAwDBAG2
EvYDBAC2EvowDQYJKoZIhvcNAQELBQADggEBAEoOgYZdvXnDlKKcybsYMMRBebRb
5eUkg1vUF0r/YVVNvnjpGkdvBxdudKwBRG7qgPu7VfT+s5wxJdq2/hXGYj6FXsiu
tG9Wbavy0tL7OrE3dO508guhJE/Zs75+4+MNyYgd/MiTsZ5+iFolZU/Q1i9Iz3CG
lLrozYMV12RW663060vGZT3U3KpRZ7yWDw3ejH0OnnCJfqPgWAB/e2kLOkzVKClt
dTYnrTKSp/k4is2a9DXsoLXKuaxyZMY3FSGw7YNy06tF0mWb0t40e4C0gTSKr66u
AiVDFJw/a5qkf/i7/fep9kuEVg0hMuZStZw3s5lvEIh/7VssuxeY4hCx5mQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:09 2026 by rpki-client