Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/ABA9F4B8AF8411EABF9F844DC4F9AE02.roa
File:                     ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (raw, json)
Hash identifier:          /w4t5dhbmQEa84JEDJ39VitjjFskPm/mEpnYuZ0T6wQ=
Subject key identifier:   5A:4B:8F:07:E9:97:4B:47:72:E1:E1:19:BD:D5:EF:2C:CB:1D:6B:AF
Certificate issuer:       /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Certificate serial:       2546
Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/ABA9F4B8AF8411EABF9F844DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:48:41 +0000
ROA not before:           Fri 24 Oct 2025 16:03:11 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9930
IP address blocks:        119.110.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl
                          rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9542 (0x2546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
        Validity
            Not Before: Oct 24 16:03:11 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a47bf9-30ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:11:dd:6f:da:b8:b0:fd:19:45:c4:49:96:
                    a9:ad:cf:e1:3e:cf:eb:90:b5:66:a6:50:c7:63:98:
                    2c:fd:8d:95:a5:40:28:c4:4d:ed:94:cf:1c:a8:0e:
                    b4:0c:2d:ad:20:02:2a:4a:75:23:3f:2a:b3:3e:f7:
                    41:04:d9:87:ed:de:35:da:ec:5c:d6:6b:2b:c5:bf:
                    74:35:8c:05:ab:6c:9b:5c:3f:cb:1b:22:c8:db:5c:
                    e5:04:6e:22:04:f9:5b:53:8d:03:7b:ad:34:f4:2b:
                    0e:38:07:d5:38:71:d8:be:18:42:bd:4b:50:35:f2:
                    31:36:a3:81:78:a9:90:dd:fe:2f:08:4b:29:1f:3c:
                    c6:d4:6b:bd:0e:e9:95:3d:60:96:7f:15:1d:ac:08:
                    c5:fb:39:10:69:89:38:50:9c:06:d5:2d:de:2d:83:
                    0d:6b:c1:07:1f:e6:b2:56:27:e6:91:66:15:fd:22:
                    a2:55:30:f7:63:07:2a:c3:45:a6:b0:59:f5:5c:04:
                    4c:5a:1c:24:f7:bb:c1:cf:12:6f:d2:f9:19:72:59:
                    7d:cd:71:72:c3:9a:1d:1f:cc:a5:76:c6:0b:6f:db:
                    03:27:4f:1d:6d:20:2d:77:f7:89:f2:1b:f7:27:bc:
                    c5:13:9a:d1:6a:5e:93:ff:cd:e2:0e:d1:58:50:d7:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4B:8F:07:E9:97:4B:47:72:E1:E1:19:BD:D5:EF:2C:CB:1D:6B:AF
            X509v3 Authority Key Identifier:
                keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/ABA9F4B8AF8411EABF9F844DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         25:b6:fb:a4:79:8d:e1:f1:77:9b:3a:83:77:2a:ea:aa:07:4f:
         b3:b2:c8:c8:da:76:b1:b6:e4:43:d2:3d:b3:7d:f2:27:1a:14:
         99:ec:be:a1:30:eb:4f:ea:a6:e6:f6:a6:6a:58:51:2e:b0:48:
         74:b9:b0:f1:30:29:b3:3f:4f:ec:13:95:05:ef:fb:04:b5:fd:
         f6:9e:d8:8d:7f:b8:d9:82:22:f2:fc:b4:22:02:fc:e2:3e:46:
         01:6c:9d:bd:22:67:f4:01:a1:03:ff:ef:c6:6f:04:bf:6e:3a:
         70:17:4c:6f:c6:ab:c2:d8:8a:6a:dc:6d:f3:47:b9:ed:70:b7:
         de:bc:f3:da:21:2d:ed:68:dd:32:f5:d8:09:73:67:8f:70:60:
         93:cb:75:f2:52:be:bd:23:72:ba:f1:d3:41:01:b5:76:e2:7c:
         ae:89:f5:ec:ad:17:53:3d:e8:ad:e8:1f:ab:ac:a4:46:a0:3c:
         f1:0d:4a:c5:de:1b:b6:7c:16:70:f7:56:91:4e:41:d9:f4:8f:
         c8:98:26:46:c5:ad:19:3b:94:87:a2:d8:8b:fe:07:9f:37:06:
         14:fb:56:0e:54:b9:50:a6:5f:ea:06:76:26:36:0f:55:30:02:
         02:d2:2c:ab:4e:de:ca:ca:25:16:0a:99:fc:ac:d3:af:a5:58:
         74:59:42:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:53 2026 by rpki-client