Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/110A7248841F11EEAF514B09C4F9AE02.roa
File:                     110A7248841F11EEAF514B09C4F9AE02.roa (raw, json)
Hash identifier:          WZwK2r73IsiV+oGVGxRJ30SomvnS8YITANsfQ8tCVa0=
Subject key identifier:   F6:68:E6:00:39:70:E8:C8:0E:00:59:DB:C6:84:FF:60:F0:09:F9:BA
Certificate issuer:       /CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
Certificate serial:       01B9
Authority key identifier: 01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/110A7248841F11EEAF514B09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:26:08 +0000
ROA not before:           Sun 07 Dec 2025 02:12:17 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135283
IP address blocks:        202.47.190.0/23 maxlen: 23
                          202.47.190.0/24 maxlen: 24
                          202.47.191.0/24 maxlen: 24
                          2401:4fe0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl
                          rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3C52, serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
        Validity
            Not Before: Dec  7 02:12:17 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a41440-7513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:ef:89:59:79:51:c0:08:10:3b:14:2a:1b:
                    94:31:00:20:c6:18:e3:b3:b6:fb:f0:8a:cd:26:b0:
                    e8:a1:02:04:fe:3f:3a:21:fb:eb:73:7a:88:9e:1f:
                    01:c1:da:eb:9c:29:34:3c:55:d9:be:7d:af:67:55:
                    24:2e:e1:93:b1:61:1b:fd:f3:41:33:66:76:64:33:
                    3f:85:47:88:07:fd:96:3e:ef:5d:f9:68:a5:ba:28:
                    5f:48:e9:f6:7f:64:bc:88:2e:5c:6a:41:83:3f:d0:
                    71:e3:e9:4a:2e:ed:7b:6f:7a:27:22:1c:a6:3c:b6:
                    86:52:91:0c:61:7f:ea:e3:bc:ff:64:44:a7:9d:ac:
                    3a:4b:a5:ae:cb:a7:85:a7:93:0b:d3:2f:f3:fd:72:
                    d9:cd:3a:a4:08:5f:29:76:cd:17:b7:b6:16:3d:e8:
                    16:e7:32:6a:2c:21:3c:24:9f:23:9e:c2:42:9d:11:
                    c4:de:60:2f:3b:c1:96:59:e0:ae:7d:36:db:d2:f6:
                    dc:c7:44:e7:c3:43:a4:00:0b:08:08:43:af:53:29:
                    4c:aa:37:7b:f6:33:e2:9a:bf:ef:43:73:08:e2:b4:
                    ff:35:3d:95:f3:78:f6:a9:e7:23:b3:0e:35:d5:bf:
                    aa:c3:d5:3c:e1:60:66:a8:9a:5f:a7:02:8b:06:96:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:68:E6:00:39:70:E8:C8:0E:00:59:DB:C6:84:FF:60:F0:09:F9:BA
            X509v3 Authority Key Identifier:
                keyid:01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/110A7248841F11EEAF514B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.190.0/23
                IPv6:
                  2401:4fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:c2:08:5b:11:52:a0:77:21:2c:1f:94:41:2e:66:51:36:
         3e:94:bf:ef:d4:e3:95:51:97:c7:af:af:45:e2:4d:b0:67:b5:
         e1:95:cb:f0:ac:b8:63:bc:aa:45:0d:72:fa:73:cb:cd:6c:0c:
         13:5e:cc:aa:f2:9a:b7:95:be:21:c2:f4:fa:3a:a1:cd:a2:29:
         16:a1:f1:b0:04:ad:9d:46:f4:43:a7:6f:c1:b5:0d:52:c4:db:
         88:b9:92:28:e6:be:79:75:d9:e7:46:eb:8a:14:89:7c:c0:87:
         a4:83:bc:6b:cd:4f:58:23:bf:c5:70:ee:dd:d5:f9:3a:07:ae:
         f6:d0:22:3c:04:c1:77:7a:44:f1:75:9b:26:d8:88:48:b9:aa:
         80:6b:10:15:63:33:9d:f3:a2:c2:a3:bc:b9:af:80:8d:13:fe:
         ff:48:20:31:e3:27:c1:62:60:ca:df:c1:ea:e4:66:a5:83:ac:
         ff:85:35:ad:39:be:4d:3a:0a:88:7e:55:00:24:10:7c:98:2b:
         4f:67:a0:09:4a:4a:9e:0b:3d:a0:01:c8:06:f0:49:a1:bd:1f:
         01:3e:f9:d4:33:78:1a:74:a4:1b:c0:7a:41:d1:20:5a:2f:97:
         7f:c0:6b:7f:26:12:39:7b:6e:04:08:3b:ed:37:6d:9e:70:da:
         cf:b4:ad:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:40 2026 by rpki-client