Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/046130D225FC11EC9D57EA7CC4F9AE02.roa
File:                     046130D225FC11EC9D57EA7CC4F9AE02.roa (raw, json)
Hash identifier:          UIybbxoCW5pqiUQysTpCJfdM2qHakezaqpeN9Wl7FOI=
Subject key identifier:   9E:8E:BB:C4:A6:01:B7:4C:84:8F:15:FB:C9:79:2B:F9:28:7B:C8:ED
Certificate issuer:       /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
Certificate serial:       0882
Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/046130D225FC11EC9D57EA7CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:28:51 +0000
ROA not before:           Tue 02 Sep 2025 21:42:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     138424
IP address blocks:        110.93.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl
                          rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2178 (0x882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
        Validity
            Not Before: Sep  2 21:42:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47753-ec41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:77:39:68:cd:a7:7e:f8:9e:d0:b2:90:92:
                    0b:4a:f4:88:1c:16:a0:99:52:88:52:cc:bf:79:dc:
                    3d:e8:92:31:36:cc:2d:34:65:ff:42:6a:d2:60:5e:
                    fe:97:92:70:42:ba:af:d6:98:b4:be:e5:2d:50:81:
                    b4:b9:a3:15:c7:63:a1:af:45:53:ed:9d:1f:13:76:
                    fe:3f:25:e9:f9:4e:9b:55:bd:9d:7b:00:dd:d7:4f:
                    f1:64:16:29:a0:19:c2:e3:f6:b5:8e:86:6a:5d:48:
                    73:de:8a:08:25:5e:64:07:05:8c:67:87:a7:2d:d9:
                    64:e2:4a:65:0b:ab:76:e5:74:6a:eb:37:de:c4:2b:
                    79:a6:c2:4f:01:c7:d7:a8:a3:2b:2d:bf:6b:61:c6:
                    f0:75:36:01:dd:6b:fd:4d:85:60:95:63:31:5f:71:
                    04:d5:c6:c2:5f:85:40:1c:e3:97:0c:6e:5c:e1:45:
                    ff:62:09:cd:69:05:2f:b6:ce:56:f2:c5:69:38:37:
                    74:c1:80:37:5f:91:ca:61:21:8a:44:c8:b3:61:93:
                    9f:a9:4f:ef:a4:2f:91:eb:32:5c:f2:4d:15:51:aa:
                    92:5d:0e:59:f8:59:2b:64:0f:58:40:cb:bd:f7:9a:
                    32:a3:ca:cc:c8:04:f6:85:c9:74:98:92:0c:c2:66:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8E:BB:C4:A6:01:B7:4C:84:8F:15:FB:C9:79:2B:F9:28:7B:C8:ED
            X509v3 Authority Key Identifier:
                keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/046130D225FC11EC9D57EA7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:0f:05:bd:66:be:41:aa:cd:83:22:9b:25:9f:a7:66:e8:81:
         85:27:89:e1:3a:7e:6a:57:db:4c:1d:35:df:1e:9d:fe:b1:11:
         29:a6:49:b9:cc:09:61:74:ff:68:4d:f3:3d:e0:0a:9d:dd:64:
         01:f9:e7:47:42:a2:5f:16:e7:f1:f1:38:55:ce:33:bf:b2:a1:
         85:a8:6c:be:f5:79:18:2f:cb:5b:b6:e9:15:31:7b:68:e2:94:
         ca:84:ea:ed:42:ac:74:8f:41:54:80:cc:c5:aa:97:e3:3a:d8:
         e6:3c:a1:05:2c:38:d1:14:4b:d5:c6:5f:88:f2:d3:79:c0:66:
         ec:39:05:16:82:88:57:a0:17:6b:d5:af:ba:d7:4a:db:26:57:
         1a:ae:2f:d2:04:0a:b7:07:65:9b:df:fd:2d:cf:a1:ff:d9:10:
         75:ff:bb:1b:79:62:33:ee:08:57:b0:f0:c5:97:fc:dd:84:53:
         81:85:e1:06:3b:ce:cd:a2:3e:d8:6b:51:86:50:b8:f9:ac:45:
         9b:ff:af:1d:79:49:e3:6e:18:86:81:2d:93:da:aa:83:d5:b2:
         0c:f7:79:79:75:41:a3:8e:05:98:e9:f0:12:40:bc:98:6e:7b:
         26:2e:39:a3:09:7c:7a:16:fc:94:ec:20:34:1b:e2:af:cb:f4:
         52:ff:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:33:23 2026 by rpki-client