Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/24F4E436A10211EABCED8740C4F9AE02.roa
File:                     24F4E436A10211EABCED8740C4F9AE02.roa (raw, json)
Hash identifier:          BPQhaOlyNfcJprzBzio4bC/cy0IBjGjtPyCaOGZtMLI=
Subject key identifier:   53:71:2D:15:BA:66:13:3C:CA:D7:C3:9F:B9:54:32:C1:06:EA:B1:5F
Certificate issuer:       /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial:       0ADF
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/24F4E436A10211EABCED8740C4F9AE02.roa
Signing time:             Sun 02 Aug 2026 16:29:02 +0000
ROA not before:           Sun 02 Aug 2026 16:29:02 +0000
ROA not after:            Wed 02 Dec 2026 00:00:00 +0000
asID:                     9988
IP address blocks:        45.41.100.0/22 maxlen: 24
                          45.41.104.0/21 maxlen: 24
                          45.41.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
                          rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2783 (0xadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
        Validity
            Not Before: Aug  2 16:29:02 2026 GMT
            Not After : Dec  2 00:00:00 2026 GMT
        Subject: CN=6a6f704e-666c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:07:81:b0:cf:de:17:c9:91:ba:2f:93:2a:
                    1a:19:20:b8:43:7f:a0:1f:87:64:6d:54:a8:c7:9e:
                    90:b5:35:4c:6e:35:97:b3:8b:e0:70:7d:0b:19:7e:
                    f0:59:e9:37:e8:23:6e:fc:e5:d4:4b:62:c0:6d:10:
                    80:82:71:8d:ab:30:92:17:c7:bf:bf:87:e8:2a:8f:
                    b0:3e:42:1e:f3:85:2c:d6:9b:8e:eb:6e:0b:59:49:
                    1b:c6:09:68:2f:4e:56:34:d1:48:de:48:b7:b3:fd:
                    a3:77:d7:07:ae:a6:ca:bd:7d:91:14:2c:96:89:0c:
                    72:80:80:89:57:61:04:06:aa:2d:a0:07:e5:80:a9:
                    fa:62:93:e5:9a:5b:62:c3:21:11:74:28:c8:8c:c2:
                    93:e2:dd:63:cb:61:fa:64:62:62:9d:e4:22:d6:89:
                    ab:80:6a:44:b9:03:39:8b:ec:b2:7f:7b:2c:32:b9:
                    ae:29:74:cf:8f:cc:4c:7d:45:56:94:03:0e:20:ac:
                    fd:59:fa:0d:8c:ad:93:e5:c5:7f:cc:d7:59:2d:2e:
                    06:be:de:85:4f:3c:4a:c8:c9:6f:50:be:5d:0f:f0:
                    50:4c:2f:31:21:46:8a:02:fa:6d:82:78:76:91:17:
                    6f:03:24:93:c6:10:fe:51:76:69:03:89:98:f5:63:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:71:2D:15:BA:66:13:3C:CA:D7:C3:9F:B9:54:32:C1:06:EA:B1:5F
            X509v3 Authority Key Identifier:
                keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/24F4E436A10211EABCED8740C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.100.0-45.41.127.255

    Signature Algorithm: sha256WithRSAEncryption
         69:1f:a7:03:f7:5c:11:05:7e:a9:e7:2e:8f:67:05:bb:54:41:
         0c:e7:46:2c:ac:ac:4a:ad:42:7f:82:f3:8b:58:b3:bd:d1:79:
         88:05:bc:12:2a:e2:62:5d:0e:a6:61:47:ce:e6:75:f5:aa:19:
         9c:06:91:af:85:68:53:8a:3e:94:ad:63:12:40:fa:16:d7:c2:
         79:17:c7:53:74:08:f2:e8:71:e3:9d:c3:68:05:2d:50:46:7c:
         bb:7f:fb:28:bd:80:5a:db:32:34:7d:eb:2b:b8:0e:1e:8b:8a:
         f0:cb:72:a4:cd:62:94:bd:5e:9b:ad:da:95:df:73:2c:e6:64:
         cf:18:95:fe:8f:93:ac:5c:b6:01:0a:23:45:8c:bc:c7:74:e7:
         f8:ae:d8:10:25:9e:71:84:7f:4a:bc:f5:48:77:55:e7:16:2e:
         02:ea:b7:ef:71:bb:60:69:c5:74:ec:78:29:37:c9:5e:27:f1:
         09:47:94:d5:84:29:e4:bc:ca:b4:4a:eb:0b:88:29:ca:e2:1c:
         2a:2b:a6:31:8d:cf:07:d3:11:1c:b5:36:d8:b5:e6:e3:97:a9:
         9a:94:7e:53:6c:36:fb:19:da:f2:6d:06:f3:31:92:32:f6:a7:
         41:83:70:5c:54:29:43:3a:61:5f:45:62:d8:02:ea:27:92:dc:
         7f:a1:6a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:41:37 2026 by rpki-client