Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/54CF668E1E0111E9A590C837C4F9AE02.roa
File:                     54CF668E1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          PHISeCyNGX8kJh7mkcSXjBejaFZND9F7ElDvnQ+q6Lo=
Subject key identifier:   45:40:C7:D9:08:DA:99:67:7F:82:81:28:81:5C:78:A3:9A:B5:A5:21
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B73
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/54CF668E1E0111E9A590C837C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:59 +0000
ROA not before:           Mon 14 Jul 2025 14:51:30 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55868
IP address blocks:        119.46.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15219 (0x3b73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:30 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4937b-86cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:80:26:3d:a1:d1:9c:db:5c:0f:3e:51:88:
                    87:06:25:b7:ab:bb:77:08:9c:27:c1:a5:90:67:2a:
                    86:e4:d5:e1:83:ba:f4:ba:27:7e:db:1f:fb:e3:75:
                    29:b0:b5:0c:64:3d:c5:df:7e:63:11:29:32:f4:50:
                    31:b8:3b:38:c7:6b:d7:3d:fe:14:73:2d:c4:44:04:
                    d8:06:b1:f7:10:87:24:3a:49:c1:ee:dd:79:b3:7e:
                    d0:12:96:a9:7a:fb:e9:86:61:88:2f:dd:35:58:4b:
                    f9:ee:71:64:4e:77:e9:81:9f:31:4b:97:60:15:b1:
                    82:a2:8a:fc:2a:dd:6a:55:03:2a:68:f6:d9:38:cf:
                    14:37:3d:19:c1:9a:ee:e9:19:af:64:35:67:30:14:
                    93:57:12:bc:d7:92:80:50:4c:eb:f7:d2:e3:58:a3:
                    01:85:0c:f2:22:b8:76:0e:73:1b:04:3f:97:43:15:
                    16:c3:12:eb:87:6f:6a:60:6f:78:a6:13:5a:21:f5:
                    e5:0b:26:b0:a7:9d:c4:45:89:f7:bc:a8:9a:38:1e:
                    00:b0:f8:81:e4:7a:90:e6:db:63:f0:66:87:f1:41:
                    f3:1e:ca:43:e4:44:46:f5:a6:bd:60:9c:34:35:e6:
                    25:2f:2e:31:02:4a:05:8f:9b:b0:bf:a6:0a:b1:86:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:40:C7:D9:08:DA:99:67:7F:82:81:28:81:5C:78:A3:9A:B5:A5:21
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/54CF668E1E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:0c:1a:ea:a9:8f:27:62:cc:3b:ee:74:68:1b:67:8c:af:28:
         fd:44:5d:cf:4b:a8:6a:c2:d4:90:96:90:b2:83:49:ad:fc:f8:
         77:16:4d:9e:f4:b1:7c:e8:82:cf:f1:34:98:1d:50:50:a2:99:
         98:35:47:68:9c:d7:aa:95:0d:ec:2f:1c:cc:3d:54:df:9b:1f:
         87:5c:67:1a:ac:37:9f:18:36:c4:fb:14:59:10:1a:68:84:58:
         57:15:ec:9f:7f:d2:cd:82:41:40:ed:3d:bb:65:90:e1:c0:29:
         61:35:b0:f0:b6:9c:bd:4d:f8:8d:91:27:93:59:77:78:c8:6c:
         e0:7c:00:d7:1c:a1:ad:c2:16:07:1d:09:20:ee:b2:1d:c9:63:
         97:37:3f:06:15:47:22:c2:22:0a:b5:84:db:4c:0a:67:eb:8d:
         e4:41:36:4c:dd:25:93:86:cd:7d:cb:ce:48:a4:fd:6f:31:21:
         aa:d2:54:e5:f4:92:33:d0:99:2c:da:82:5b:4a:f3:63:9b:53:
         58:97:f0:c2:41:9e:19:e5:1f:a2:de:09:14:f4:f8:aa:96:0e:
         0a:ac:5f:51:48:af:78:08:e9:63:f2:15:de:d4:cb:ed:5d:3f:
         9f:84:a6:5c:c6:b1:3b:d5:06:53:db:ba:07:bd:4c:4f:9e:a9:
         40:19:3b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:54 2026 by rpki-client