Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E5AA11C2974A11EFAE16EC38C4F9AE02.roa
File:                     E5AA11C2974A11EFAE16EC38C4F9AE02.roa (raw, json)
Hash identifier:          iwi5rASnbSd0xknkXnEdhxuEaKl5RgdixutwraiVBM4=
Subject key identifier:   68:A9:58:94:3B:49:2D:76:FE:F9:EB:32:02:D6:63:1B:1F:37:E8:78
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2972
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E5AA11C2974A11EFAE16EC38C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:25:15 +0000
ROA not before:           Tue 02 Sep 2025 16:03:49 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     38539
IP address blocks:        116.93.52.0/24 maxlen: 24
                          116.93.61.0/24 maxlen: 24
                          116.93.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10610 (0x2972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Sep  2 16:03:49 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4929b-4a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:ac:d2:b8:47:65:9c:4a:13:85:9f:2f:7e:
                    bc:5c:e0:39:94:1d:ab:99:7c:f2:b2:14:65:25:9c:
                    8f:7d:38:8c:89:6b:06:db:ff:80:55:60:39:60:ab:
                    7c:67:ca:c3:82:b4:c3:14:b0:99:2a:4d:01:60:55:
                    e1:13:ae:42:1f:a0:b3:67:24:7e:8f:6e:64:86:81:
                    7c:2c:2c:76:fb:f4:1c:f5:24:28:3a:01:42:32:a2:
                    47:26:0f:da:ad:ee:8e:36:4b:c0:e4:1a:a3:f3:7f:
                    96:59:cf:f7:37:8d:ae:76:ca:5b:7b:1b:83:4e:e9:
                    7a:35:6e:7c:a0:57:11:78:f3:bc:e2:b6:c7:98:7c:
                    91:8c:77:0d:23:71:45:9f:15:c2:a5:00:7b:75:33:
                    1b:0b:d8:0c:b7:e4:36:04:74:c0:c0:e2:bd:ba:7e:
                    90:58:01:49:7f:c7:77:49:e9:8c:8f:ce:5b:d0:ec:
                    a8:fb:ee:f2:aa:9d:f3:8e:b5:38:31:d7:2c:b9:96:
                    75:5a:d5:11:6d:c6:ea:e4:8a:8a:6a:e0:29:00:4e:
                    f7:f9:8c:dc:d1:6f:e0:e0:7f:c9:2d:36:a2:c5:65:
                    65:cf:6e:e4:18:76:79:23:28:ce:7c:63:dc:72:b4:
                    f1:fa:fd:b9:59:ac:9b:e0:89:2c:e6:71:bb:0a:ae:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A9:58:94:3B:49:2D:76:FE:F9:EB:32:02:D6:63:1B:1F:37:E8:78
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E5AA11C2974A11EFAE16EC38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.93.52.0/24
                  116.93.61.0-116.93.62.255

    Signature Algorithm: sha256WithRSAEncryption
         72:3f:cc:79:a7:09:bf:56:78:2f:cf:c6:4e:d2:f9:cd:07:36:
         4d:77:b5:3e:08:4e:8d:b0:82:1a:05:e6:71:8f:e7:79:02:6c:
         75:57:c3:00:50:b9:5e:d1:8a:84:46:7e:f7:07:87:e4:b2:51:
         1b:3d:9f:f6:d1:7b:82:d4:c3:86:2b:1c:34:a8:35:e5:f6:d5:
         17:ec:3e:b4:65:09:d8:dc:a5:0f:06:31:81:03:a4:74:e9:77:
         75:39:52:e5:6f:f2:18:ec:80:78:b2:ce:c7:89:7d:fe:ca:19:
         4d:6e:d8:f8:e9:d4:10:6e:80:fe:d4:58:04:cc:28:3f:2b:63:
         1f:fe:05:80:e9:67:23:19:d9:88:45:47:44:53:ae:38:61:c4:
         1e:26:97:99:7c:e7:68:d4:e9:90:8a:70:2c:d4:02:d4:f3:da:
         35:5a:82:ff:fe:1b:d4:4e:bb:ad:53:fa:ab:86:0a:4c:f3:37:
         96:ee:23:8e:fb:e6:58:4a:b0:5c:9a:dd:ca:c4:95:3d:7a:85:
         93:ae:05:d4:f5:bd:75:f7:4a:15:7a:90:35:c7:e4:2a:31:6c:
         9a:64:05:43:ba:48:54:95:61:5d:33:cf:50:99:8d:e8:4f:08:
         67:be:33:c3:86:e4:ed:0b:bc:a0:ba:ac:6f:f7:95:e3:f2:1c:
         a2:99:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:34 2026 by rpki-client