Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/90AE648CDA6011ED9BC6175FC4F9AE02.roa
File:                     90AE648CDA6011ED9BC6175FC4F9AE02.roa (raw, json)
Hash identifier:          lQyg0CLBudaLRB9B/RyMUEhoZRh1JikgjtZ3clTwdME=
Subject key identifier:   A1:D6:62:0C:76:33:09:AB:79:83:72:EE:F2:6C:99:E1:1A:29:80:7C
Certificate issuer:       /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Certificate serial:       0234
Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/90AE648CDA6011ED9BC6175FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:13:16 +0000
ROA not before:           Wed 19 Mar 2025 03:19:18 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135047
IP address blocks:        210.48.174.0/24 maxlen: 24
                          210.48.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
                          rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
        Validity
            Not Before: Mar 19 03:19:18 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4113c-b43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:3a:94:5f:94:0c:00:6b:47:85:99:99:cb:
                    a2:f1:78:e1:54:b9:0c:5b:e0:2b:fe:f7:7a:0a:41:
                    d9:5c:3d:f1:0d:58:74:0b:75:22:10:57:b9:4e:42:
                    39:a6:7b:2d:bf:88:8d:46:e3:c0:eb:e6:c4:1b:55:
                    7e:9e:27:25:43:65:38:cc:50:f3:83:ee:81:64:c2:
                    4c:f9:46:6d:38:3d:2d:0f:af:5e:e2:5b:b9:62:56:
                    c6:b9:96:05:65:b4:7c:a5:0a:9d:b6:cd:58:ba:0b:
                    d3:c1:90:ff:8b:6e:98:38:f1:0e:43:12:b0:7c:6f:
                    50:87:af:75:a1:b3:ad:7d:27:df:2b:dd:00:04:6f:
                    2e:eb:99:e7:53:d3:a6:59:b2:4f:71:cb:ca:1f:2d:
                    8c:c5:84:01:12:fa:5e:db:86:75:45:6d:2b:11:8e:
                    99:63:27:9f:72:75:eb:66:e3:63:4b:fd:a9:ce:fb:
                    cb:7d:4f:46:32:b3:9c:52:40:5d:48:94:1b:f7:15:
                    1f:3f:c7:42:87:63:d5:d0:88:15:2e:7b:d7:ed:b6:
                    43:bb:ed:8d:b3:b9:48:12:a6:2c:18:3b:be:ae:4d:
                    4c:98:ed:f4:9c:1f:64:74:39:8e:92:fb:2b:ce:91:
                    26:1e:5f:0f:68:f8:48:9e:5d:ce:d1:9d:9e:fd:96:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D6:62:0C:76:33:09:AB:79:83:72:EE:F2:6C:99:E1:1A:29:80:7C
            X509v3 Authority Key Identifier:
                keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/90AE648CDA6011ED9BC6175FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.48.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:91:b7:23:d6:96:a7:1b:ef:dd:80:bc:02:b7:3f:a5:ec:d0:
         c0:9c:e8:b5:b0:ff:d6:4d:ac:32:1f:36:95:d2:49:d1:be:90:
         23:95:73:44:91:c2:90:bd:be:1c:fc:11:4d:a4:dc:99:34:cf:
         4a:3d:79:21:7a:4b:1e:6b:0f:31:ab:89:f8:0b:48:8d:9d:eb:
         38:cd:9a:c2:e0:35:5e:9e:58:7e:b8:f1:cc:5b:76:84:1c:9b:
         64:2b:20:ad:3f:98:7b:aa:5f:8a:7d:05:e9:bf:9f:c6:6f:53:
         59:8b:6d:d6:6c:cd:ca:13:c9:77:1c:32:e5:82:bd:bf:a2:1d:
         80:9d:ad:e0:5b:51:65:ba:a1:b6:51:27:3f:78:e0:ec:3a:24:
         1c:7e:3c:15:80:cd:21:a0:a8:9c:7d:a4:b0:0a:c2:f3:4b:b1:
         e3:60:e3:92:2b:01:c3:0c:1f:cc:0a:93:3d:ed:d8:53:37:54:
         fd:08:ed:3c:21:9a:e4:f1:bd:c5:41:8b:54:ff:dd:d7:6f:42:
         8d:a9:af:b6:f0:e2:a7:41:97:60:49:9c:a3:37:4b:c1:3b:1b:
         15:14:c5:74:bf:af:b4:85:54:fe:b7:9a:4a:b5:da:ad:18:36:
         e9:5a:54:25:74:d2:98:03:83:4f:f4:56:6f:cf:6e:c4:8e:1e:
         8e:65:88:79
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBDNTMxMTAvBgNVBAUTKEUxRDE0M0Q5RDhFQTAyMjI0QzFDQjBDOTE1RUNCODRF
RTI4QjVBQUEwHhcNMjUwMzE5MDMxOTE4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTEzYy1iNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoRc6lF+UDABrR4WZmcui8XjhVLkMW+Ar/vd6CkHZXD3xDVh0C3UiEFe5TkI5
pnstv4iNRuPA6+bEG1V+niclQ2U4zFDzg+6BZMJM+UZtOD0tD69e4lu5YlbGuZYF
ZbR8pQqdts1YugvTwZD/i26YOPEOQxKwfG9Qh691obOtfSffK90ABG8u65nnU9Om
WbJPccvKHy2MxYQBEvpe24Z1RW0rEY6ZYyefcnXrZuNjS/2pzvvLfU9GMrOcUkBd
SJQb9xUfP8dCh2PV0IgVLnvX7bZDu+2Ns7lIEqYsGDu+rk1MmO30nB9kdDmOkvsr
zpEmHl8PaPhInl3O0Z2e/Za/jQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKHWYgx2
MwmreYNy7vJsmeEaKYB8MB8GA1UdIwQYMBaAFOHRQ9nY6gIiTBywyRXsuE7ii1qq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEM1My9DRTQ0NUJEMERB
NUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFpSk1ITERKRmV5NFR1S0xX
cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRkRkQyZGpxQWlKTUhMREpGZXk0VHVLTFdxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzBDNTMvQ0U0NDVCRDBEQTVCMTFFRDk2NzQ3QzVBQzRGOUFFMDIvOTBBRTY0OENE
QTYwMTFFRDlCQzYxNzVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB0jCuMA0GCSqGSIb3DQEBCwUAA4IBAQBJkbcj1panG+/dgLwCtz+l
7NDAnOi1sP/WTawyHzaV0knRvpAjlXNEkcKQvb4c/BFNpNyZNM9KPXkhekseaw8x
q4n4C0iNnes4zZrC4DVenlh+uPHMW3aEHJtkKyCtP5h7ql+KfQXpv5/Gb1NZi23W
bM3KE8l3HDLlgr2/oh2Ana3gW1FluqG2USc/eODsOiQcfjwVgM0hoKicfaSwCsLz
S7HjYOOSKwHDDB/MCpM97dhTN1T9CO08IZrk8b3FQYtU/93Xb0KNqa+28OKnQZdg
SZyjN0vBOxsVFMV0v6+0hVT+t5pKtdqtGDbpWlQldNKYA4NP9FZvz27Ejh6OZYh5
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:00 2026 by rpki-client