Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/453489B8BE6311EE90BF9241C4F9AE02.roa
File:                     453489B8BE6311EE90BF9241C4F9AE02.roa (raw, json)
Hash identifier:          WA8xCRlxR3rKk8ClNGxGNEmsKJNt1HuKBEMk6slXSYM=
Subject key identifier:   60:F6:A2:73:BB:02:B8:49:C2:A1:AC:94:F0:EE:69:9C:98:46:E5:02
Certificate issuer:       /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Certificate serial:       1779
Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/453489B8BE6311EE90BF9241C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:42:22 +0000
ROA not before:           Mon 08 Dec 2025 16:25:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152326
IP address blocks:        110.235.159.0/24 maxlen: 24
                          2400:6a80:8660::/46 maxlen: 46
                          2400:6a80:8664::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6009 (0x1779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
        Validity
            Not Before: Dec  8 16:25:33 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46c6e-4da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:98:69:b6:34:ca:53:44:ab:92:c9:18:dd:
                    ae:ef:f5:dd:92:ca:65:ec:34:f9:54:1c:9c:42:23:
                    72:fd:96:66:76:6d:f3:fb:cc:e9:de:c8:8e:35:0d:
                    f2:6f:98:13:20:5a:74:99:b5:1f:fb:73:23:bb:69:
                    2b:dc:71:b7:84:4f:8f:6a:e2:fa:6c:48:4e:b6:fb:
                    f9:da:81:1a:47:f1:ed:8e:59:8d:56:4f:be:0c:40:
                    81:24:86:3e:ac:aa:54:59:57:98:da:e9:a5:99:40:
                    e0:98:59:d4:cf:e5:44:bb:e8:09:ca:66:ac:24:a6:
                    57:ce:36:31:f2:5d:19:39:39:37:0d:47:51:ef:b6:
                    11:57:84:11:83:2a:c9:89:f0:f6:68:07:06:d1:6e:
                    1d:19:d4:b0:14:1a:67:97:b7:11:86:40:23:14:83:
                    b6:46:2c:e4:cb:d3:96:bc:d3:8e:c5:8a:28:93:11:
                    13:3d:a1:b4:99:73:e1:21:37:23:8d:7c:45:86:21:
                    06:97:e1:a6:14:ec:b5:2b:b3:1a:8a:8a:1e:3d:c0:
                    97:8f:6c:b2:73:7c:19:d9:28:5a:e1:78:58:8f:c0:
                    6f:f3:20:01:19:b3:a6:9c:6f:1c:1b:1c:1f:90:81:
                    4d:c3:d2:91:b3:fb:e3:cb:3b:8e:52:d3:22:46:f6:
                    3d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F6:A2:73:BB:02:B8:49:C2:A1:AC:94:F0:EE:69:9C:98:46:E5:02
            X509v3 Authority Key Identifier:
                keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/453489B8BE6311EE90BF9241C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.235.159.0/24
                IPv6:
                  2400:6a80:8660::/45

    Signature Algorithm: sha256WithRSAEncryption
         42:49:6f:92:70:3f:ce:1a:4d:56:27:77:0e:41:22:22:8f:f1:
         c9:95:81:10:c6:57:d5:a8:6a:e4:7b:4a:48:72:6a:c6:5f:49:
         f7:15:49:50:7d:b9:33:f2:b4:67:11:9c:aa:99:31:2c:12:5c:
         d6:48:3b:6c:9f:37:c7:c9:7f:48:8a:f4:42:1c:ec:5f:db:76:
         d7:ad:cf:a9:7d:ad:3e:c3:65:3d:d0:bc:38:8f:69:66:96:41:
         cd:8d:a7:19:00:89:d1:30:0a:8c:b4:35:5e:58:ad:65:37:6f:
         f7:85:fc:c7:3a:98:08:8d:74:e5:e3:e0:e8:e7:42:bd:b6:be:
         c9:d7:e4:3f:88:9c:c3:8c:78:0c:a2:7b:0f:b2:a3:8a:ae:81:
         6d:e4:3e:f4:bb:05:5d:9f:b2:a5:76:7a:57:ed:ec:89:6f:d4:
         e3:3e:e3:06:25:db:46:6d:7c:aa:dc:06:d5:d4:62:66:06:fd:
         db:1e:d2:0f:1a:4e:aa:27:64:84:3a:04:ff:b9:c0:b2:ae:f3:
         40:dd:e7:d2:80:79:09:2a:cc:49:56:ab:a4:35:63:04:c7:33:
         db:84:13:2c:91:e3:a8:15:ab:7e:97:fb:f4:64:b6:8e:73:a9:
         fd:45:9f:c8:ec:26:21:88:16:1d:3e:47:7b:e5:0c:b9:ad:e1:
         b7:f4:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:32 2026 by rpki-client