Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/B55EC19EAC2B11E996F6E511C4F9AE02.roa
File:                     B55EC19EAC2B11E996F6E511C4F9AE02.roa (raw, json)
Hash identifier:          RzqIGI8r+oQW3NlWivzrVB3dYHmPEddV5f3NgyB8w0M=
Subject key identifier:   A2:27:8C:A0:DD:57:1D:EB:C5:E5:C5:43:50:51:75:C7:42:41:6B:11
Certificate issuer:       /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
Certificate serial:       0EAA
Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/B55EC19EAC2B11E996F6E511C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:07:19 +0000
ROA not before:           Wed 18 Jun 2025 18:21:06 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45668
IP address blocks:        103.232.48.0/22 maxlen: 24
                          110.74.128.0/19 maxlen: 24
                          110.74.160.0/19 maxlen: 24
                          2403:bc00::/32 maxlen: 32
                          2403:bc00:1::/48 maxlen: 48
                          2403:bc00:adc::/48 maxlen: 48
                          2403:bc00:7fff::/48 maxlen: 48
                          2403:bc00:8000::/48 maxlen: 48
                          2403:bc00:8001::/48 maxlen: 48
                          2403:bc00:8002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl
                          rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3754 (0xeaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
        Validity
            Not Before: Jun 18 18:21:06 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a43a07-0bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:85:34:df:8d:cc:2e:76:fc:e0:40:65:0c:
                    5b:21:ac:c9:ed:ad:84:2d:03:1a:e3:8e:b3:77:87:
                    8d:4f:ec:95:b2:49:79:a1:dc:47:b9:b6:c3:93:8a:
                    fe:03:40:27:a0:44:d0:f8:6e:b1:8b:08:39:f8:51:
                    78:8d:ae:db:d0:44:a9:d6:32:8e:ed:8b:02:a2:27:
                    20:df:7a:c3:a2:c6:70:1d:61:b3:38:19:79:a4:f8:
                    50:30:db:d0:80:cc:dd:13:db:66:34:7a:ef:0f:36:
                    c1:7b:f8:24:29:9b:15:76:e3:2d:65:34:9b:dc:30:
                    b2:15:ae:a7:79:ce:12:8b:1a:db:03:a3:fb:f3:6e:
                    65:63:21:a1:c8:83:33:8a:f2:89:7c:0a:9f:a7:97:
                    4b:bc:d0:ec:8f:3f:39:3d:9d:30:79:fe:37:17:6c:
                    90:b5:e0:2b:7b:72:db:f9:dd:e2:18:0f:20:da:2b:
                    4b:62:2e:91:0f:4f:8f:8a:c8:2a:da:4b:2c:89:66:
                    3d:21:fe:25:4f:4d:64:c4:cf:8c:0a:89:b8:4b:04:
                    82:90:21:40:5b:a1:a7:fc:5e:42:fa:f2:f9:8e:f2:
                    c9:15:5d:18:00:ac:1d:74:d8:7d:dd:64:8f:21:38:
                    2f:83:e4:50:f3:75:3f:05:56:f9:5c:0b:4b:a3:de:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:27:8C:A0:DD:57:1D:EB:C5:E5:C5:43:50:51:75:C7:42:41:6B:11
            X509v3 Authority Key Identifier:
                keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/B55EC19EAC2B11E996F6E511C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.48.0/22
                  110.74.128.0/18
                IPv6:
                  2403:bc00::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:55:71:d7:3b:00:66:84:45:49:90:fd:c5:b7:aa:fe:f5:2d:
         ac:4c:41:84:a3:40:3a:15:09:51:a2:77:d0:1d:57:a4:42:51:
         df:98:61:73:4e:6a:6a:1c:ca:83:f7:dc:74:c6:97:2f:ac:62:
         e4:ea:2f:58:a8:43:56:9c:7b:89:25:05:17:2f:21:aa:4f:2c:
         2c:e9:7a:99:4c:c9:93:e1:cd:41:05:9a:71:49:08:a0:d6:6e:
         a2:0b:75:9f:e0:42:24:65:b1:3e:42:a6:55:f3:75:9d:0d:54:
         75:95:a8:0f:45:29:8e:d2:19:37:04:44:07:85:a5:9b:2e:76:
         0d:a9:61:a2:00:38:44:4a:05:c2:df:cc:09:3a:40:46:05:83:
         5a:c8:56:c2:ed:d2:c3:d0:ca:0a:95:18:5a:ec:dc:fb:0d:39:
         c0:ea:7a:12:d1:61:05:75:db:f9:f5:0b:b3:7a:e7:20:a7:d2:
         9b:86:ba:e2:b2:e5:89:cf:b4:9e:c2:1c:f0:06:ac:bb:57:27:
         10:57:85:24:81:37:6e:dd:49:58:d5:65:53:7f:b0:3a:1d:e7:
         5c:e6:1a:f7:b8:82:4f:6f:42:f7:eb:06:e1:b8:e5:b2:6d:58:
         ae:6c:19:7b:e7:30:6b:f5:1b:47:cc:bd:47:a2:c2:82:86:3b:
         da:f8:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:48 2026 by rpki-client