Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/FB45F610638211E9A58B4C45C4F9AE02.roa
File:                     FB45F610638211E9A58B4C45C4F9AE02.roa (raw, json)
Hash identifier:          +JRMwOPmA4DNia3vipY51hbJq4h27w6JaN6SbtzlqaM=
Subject key identifier:   34:F4:9F:28:26:84:27:DE:FF:2C:93:A8:08:7F:32:AA:E5:6A:AD:02
Certificate issuer:       /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
Certificate serial:       1018
Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/FB45F610638211E9A58B4C45C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:35:49 +0000
ROA not before:           Wed 26 Feb 2025 18:16:08 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     132590
IP address blocks:        45.121.236.0/22 maxlen: 24
                          103.245.76.0/22 maxlen: 24
                          2401:7540::/32 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl
                          rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4120 (0x1018)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
        Validity
            Not Before: Feb 26 18:16:08 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a42494-ca6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:b6:6d:47:a5:59:25:2f:9c:9b:62:5e:be:
                    82:0c:09:c9:b1:4e:b1:a3:cf:83:08:2e:67:0c:9e:
                    cb:0a:6b:30:44:60:1e:1d:07:10:df:66:a5:f9:25:
                    aa:0a:d3:ba:36:2a:ec:8d:9e:80:56:36:e4:69:c2:
                    5b:72:bb:2e:8d:fb:b2:55:5a:71:1e:28:73:ae:8e:
                    8f:f7:09:e5:b8:53:63:50:0f:ba:06:c4:1f:7e:17:
                    c3:1c:ac:b8:db:d6:98:f7:01:93:8d:62:31:3a:3f:
                    db:bd:be:6b:dc:46:f3:af:09:9c:e1:d1:9b:fd:c5:
                    0f:ed:51:54:63:c0:ad:73:ad:08:86:f1:6e:b6:8d:
                    94:1a:3f:a4:2a:15:8f:f6:79:2f:e8:38:8f:c0:c0:
                    52:db:85:d2:11:d3:da:6d:95:ad:e1:e8:2e:e7:ed:
                    7f:c3:87:40:8e:11:18:b5:2f:15:35:44:bd:64:b4:
                    6c:71:5b:54:8f:c8:52:fc:e0:ae:68:aa:e6:36:fb:
                    dc:15:fb:a2:dd:c2:fd:d7:91:e8:ee:91:69:4a:43:
                    67:95:35:e0:c4:1c:a8:4d:04:f2:1c:cf:e9:17:da:
                    b1:92:b4:07:be:37:f8:0d:9c:21:cc:b3:14:45:c5:
                    bd:a0:cd:5f:03:23:ff:8f:aa:60:5f:46:bd:a5:a5:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F4:9F:28:26:84:27:DE:FF:2C:93:A8:08:7F:32:AA:E5:6A:AD:02
            X509v3 Authority Key Identifier:
                keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/FB45F610638211E9A58B4C45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.236.0/22
                  103.245.76.0/22
                IPv6:
                  2401:7540::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:3a:53:15:76:5b:24:2c:92:73:f8:46:15:8b:50:36:e4:ae:
         70:3e:68:de:96:21:c7:00:de:7c:83:f6:96:af:25:31:d6:3b:
         3b:28:a0:98:f5:61:32:90:be:30:aa:4a:79:9c:4e:29:8f:25:
         6f:01:8f:09:e2:c5:be:a6:5a:0d:38:6a:0c:e6:82:5b:e1:69:
         7f:ae:21:9a:48:44:62:3e:4c:8c:8f:5b:24:10:1d:c0:fa:1c:
         4a:4b:61:79:c9:1d:3a:a9:33:13:b6:bf:30:92:e9:45:09:a4:
         20:62:11:6a:20:2c:45:bc:67:b6:7f:d5:46:45:b9:57:bf:e0:
         89:a9:02:10:ec:1e:de:79:fe:f3:49:98:2b:cb:6d:d5:71:b8:
         30:80:f3:fc:5d:66:03:9a:60:f4:f9:97:67:88:54:12:96:16:
         bf:f2:3d:43:18:e7:05:03:77:4e:c4:aa:84:ae:3c:14:99:a5:
         a3:13:f7:a0:08:82:52:ef:40:ac:50:71:35:15:42:8a:e9:5a:
         af:27:8b:6b:bf:7c:53:db:ec:d6:bc:3d:77:9e:9d:a1:ec:96:
         24:27:d9:9a:39:41:fd:2d:eb:a3:c2:c1:fd:c2:5d:13:2d:6f:
         90:50:5b:87:f7:2b:46:90:fc:0a:74:f7:b8:11:46:19:27:ec:
         5e:c8:71:7d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICEBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD
QzE0MURGOEYwHhcNMjUwMjI2MTgxNjA4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjQ5NC1jYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwby2bUelWSUvnJtiXr6CDAnJsU6xo8+DCC5nDJ7LCmswRGAeHQcQ32al+SWq
CtO6NirsjZ6AVjbkacJbcrsujfuyVVpxHihzro6P9wnluFNjUA+6BsQffhfDHKy4
29aY9wGTjWIxOj/bvb5r3Ebzrwmc4dGb/cUP7VFUY8Ctc60IhvFuto2UGj+kKhWP
9nkv6DiPwMBS24XSEdPabZWt4egu5+1/w4dAjhEYtS8VNUS9ZLRscVtUj8hS/OCu
aKrmNvvcFfui3cL915Ho7pFpSkNnlTXgxByoTQTyHM/pF9qxkrQHvjf4DZwhzLMU
RcW9oM1fAyP/j6pgX0a9paW0jwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFDT0nygm
hCfe/yyTqAh/Mqrlaq0CMB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz
ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz
NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODU5QTMvNzY0MzVGRUU2MzgxMTFFOTlBNTFBNjQyQzRGOUFFMDIvRkI0NUY2MTA2
MzgyMTFFOUE1OEI0QzQ1QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCLXnsAwQCZ/VMMA0EAgACMAcDBQAkAXVAMA0GCSqGSIb3DQEBCwUA
A4IBAQBuOlMVdlskLJJz+EYVi1A25K5wPmjeliHHAN58g/aWryUx1js7KKCY9WEy
kL4wqkp5nE4pjyVvAY8J4sW+ploNOGoM5oJb4Wl/riGaSERiPkyMj1skEB3A+hxK
S2F5yR06qTMTtr8wkulFCaQgYhFqICxFvGe2f9VGRblXv+CJqQIQ7B7eef7zSZgr
y23VcbgwgPP8XWYDmmD0+ZdniFQSlha/8j1DGOcFA3dOxKqErjwUmaWjE/egCIJS
70CsUHE1FUKK6VqvJ4trv3xT2+zWvD13np2h7JYkJ9maOUH9LeujwsH9wl0TLW+Q
UFuH9ytGkPwKdPe4EUYZJ+xeyHF9
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:56 2026 by rpki-client