Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/24528B3C076811F1A996F976023D8C67.roa
File:                     24528B3C076811F1A996F976023D8C67.roa (raw, json)
Hash identifier:          xScZjBZZvVOj75CzK0I4g7RaS0lDSWrcyuO5cQw8+S4=
Subject key identifier:   14:FA:D2:38:93:AE:F9:23:59:4D:CF:C5:0A:09:5F:F3:B7:E6:BC:50
Certificate issuer:       /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial:       1058
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/24528B3C076811F1A996F976023D8C67.roa
Signing time:             Sun 01 Mar 2026 17:46:05 +0000
ROA not before:           Wed 11 Feb 2026 16:38:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21734
IP address blocks:        111.221.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4184 (0x1058)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
        Validity
            Not Before: Feb 11 16:38:49 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a47b5d-4cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:da:f2:78:4a:96:a8:e9:fc:06:73:1d:d5:
                    be:68:61:ff:49:c1:2d:2d:dc:f3:7d:d0:8b:c6:4a:
                    d1:df:9b:9d:a5:aa:4d:2a:8a:e1:20:60:be:3a:54:
                    85:da:9c:d3:b9:c1:a1:d0:92:4a:2a:70:99:98:a2:
                    e0:db:5a:04:f9:4d:5d:dc:00:8d:1a:61:9f:c3:90:
                    e1:8a:2d:06:94:25:00:fc:20:a1:39:7b:7d:fb:ed:
                    cd:23:18:c6:41:5d:ec:cc:8a:71:bb:16:c3:c3:a1:
                    a5:38:51:97:cd:c5:ae:eb:4b:66:70:d7:98:d8:51:
                    ed:15:ae:59:dc:98:3a:a3:5c:cc:a1:7f:bf:c3:56:
                    00:34:82:0f:2e:07:a0:6f:43:ab:03:b7:a8:0a:66:
                    a0:06:ea:35:ce:1d:f5:85:7a:0d:c1:ec:2f:64:ef:
                    a8:74:64:21:64:26:20:a7:52:88:bd:e0:5a:19:32:
                    c3:4c:12:67:50:5f:61:61:48:3c:54:4a:be:77:29:
                    e1:e9:6c:83:9f:65:b4:e8:05:3b:ec:4b:f3:46:fa:
                    68:8a:11:e0:b9:8f:34:f5:2d:da:2d:a0:9b:da:ec:
                    9e:d3:7f:58:7b:6f:31:2a:6c:7a:4f:01:4f:8c:6a:
                    a3:1a:bf:b0:67:bc:8d:3f:f0:ce:dc:0c:3a:1e:d5:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FA:D2:38:93:AE:F9:23:59:4D:CF:C5:0A:09:5F:F3:B7:E6:BC:50
            X509v3 Authority Key Identifier:
                keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/24528B3C076811F1A996F976023D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.221.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:c9:65:f2:02:99:4f:1f:b8:0a:b4:fa:89:2c:af:3e:d6:
         3f:f2:dc:fa:ee:73:10:f8:06:aa:b8:08:3c:eb:b3:99:31:ef:
         38:16:e3:12:5f:26:99:c8:62:ba:19:fa:61:75:50:f2:8b:c1:
         2c:03:cb:d3:fc:68:a6:48:09:4e:13:a6:fc:a0:05:f2:71:72:
         36:61:e6:1b:86:57:8b:d7:e9:21:e6:10:ba:c5:8b:ab:ed:4d:
         1b:93:95:42:a6:16:39:7c:79:76:6c:3b:78:c7:68:6f:b0:11:
         5b:7a:81:e4:a7:6d:03:b5:0f:af:04:28:1e:96:e6:13:0c:47:
         92:20:b4:39:1f:1d:85:07:39:13:27:ae:f1:a2:d4:aa:43:8e:
         06:dc:40:f5:01:ef:63:d5:3e:97:37:d6:d9:5b:a6:32:3d:bf:
         ca:00:90:96:1d:bd:5e:06:24:1f:9e:bf:7c:0d:4c:a4:b1:21:
         a7:51:52:f7:b7:a7:33:91:67:4f:bc:f9:77:a9:dd:dd:7e:2b:
         7c:b1:e9:a1:3f:cd:9e:6f:e8:1b:aa:d7:57:f4:9f:3c:12:5a:
         3d:36:73:56:05:fa:45:61:12:37:e5:3c:73:3b:0d:f3:80:30:
         93:80:33:7a:ea:60:92:69:99:62:79:87:38:05:a0:60:aa:0a:
         a7:a4:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:27:58 2026 by rpki-client