Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0F0DB8A2C80411ECBA7BB174C4F9AE02.roa
File:                     0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (raw, json)
Hash identifier:          N0TjFJkvf+ed3++3uS+fobOsE9yA9suGjNRtYv3RVww=
Subject key identifier:   D9:5F:76:86:D0:D2:2D:09:CC:6A:41:ED:38:00:79:78:2D:3F:99:FF
Certificate issuer:       /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial:       03DA
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0F0DB8A2C80411ECBA7BB174C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:25:39 +0000
ROA not before:           Mon 05 May 2025 01:06:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134451
IP address blocks:        45.114.118.0/24 maxlen: 24
                          2402:2f80:5::/48 maxlen: 48
                          2402:2f80:6::/48 maxlen: 48
                          2402:2f80:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
        Validity
            Not Before: May  5 01:06:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a44c63-f11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:d2:f4:bb:77:f3:94:3a:ee:70:98:48:4e:
                    5b:62:9c:22:a8:00:81:3a:b6:82:80:27:cd:64:70:
                    b2:ef:e7:69:6e:76:fc:ec:5e:79:bf:de:89:36:3f:
                    30:81:e0:8f:12:25:11:0b:47:bf:31:ac:d2:95:f9:
                    ab:90:93:d5:8e:a5:49:04:4d:b8:fe:75:bc:28:40:
                    d0:01:16:a7:18:04:2f:8c:02:0a:ca:7d:34:7b:3b:
                    85:98:cd:45:04:94:a3:7e:ac:06:4b:5e:18:ef:56:
                    e8:7a:b3:08:ac:c1:2d:8b:82:d2:9b:97:67:02:34:
                    c8:c5:33:c3:86:24:f5:f6:6f:93:d8:c2:f2:9e:85:
                    8f:88:11:c2:0c:b1:06:e5:ea:7a:50:5c:50:ec:9b:
                    9d:00:08:d6:b5:f4:83:ad:22:04:70:45:29:26:96:
                    f6:53:5e:ba:90:9b:d5:d4:48:48:d4:f5:bf:d3:27:
                    03:71:41:26:83:95:43:bc:45:f6:5b:0b:3a:1a:b0:
                    f3:8e:3a:9b:e0:27:45:3f:46:4f:04:8f:8c:d9:97:
                    d8:ff:ff:24:0e:1d:a6:60:0c:47:19:0a:e4:35:d7:
                    37:75:82:d1:46:26:3b:37:37:36:fa:5e:ae:dc:05:
                    7a:ba:09:21:52:d1:6c:5f:1c:54:3a:6d:a8:35:a2:
                    82:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5F:76:86:D0:D2:2D:09:CC:6A:41:ED:38:00:79:78:2D:3F:99:FF
            X509v3 Authority Key Identifier:
                keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0F0DB8A2C80411ECBA7BB174C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.118.0/24
                IPv6:
                  2402:2f80:5::-2402:2f80:7:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         88:51:d4:e3:e6:ab:92:04:43:f8:da:f6:c1:54:b0:a9:c4:f6:
         57:af:d4:ed:4e:a3:6a:d3:41:55:ca:76:c8:15:70:02:61:0c:
         7e:63:3f:e4:10:b1:9b:10:5a:5b:a3:28:dc:89:2b:de:2c:3e:
         bf:be:e3:66:19:d9:ee:59:4c:12:1a:7d:ff:73:52:50:9f:d4:
         42:a0:ad:11:94:b6:dd:ba:fe:3f:e1:d3:03:e2:94:2d:72:8e:
         4e:a6:0d:7b:dc:47:de:ba:5c:a6:74:ee:dc:7e:cb:5e:a6:34:
         e3:b2:23:5c:92:62:40:94:3f:67:7a:e6:19:28:62:6c:ea:ad:
         70:d3:1f:31:50:01:d5:58:aa:b9:5a:0c:5b:b0:38:95:16:4f:
         e1:df:68:b5:cb:dc:ea:45:d4:b9:34:04:4d:10:59:77:e0:7d:
         77:23:7f:ab:ce:21:0e:15:1d:46:4c:19:71:77:60:e6:57:d7:
         57:c3:02:5b:7c:4f:16:7a:ee:2c:f2:7d:dd:ab:48:66:85:fb:
         88:7f:e6:4d:b6:67:76:bb:bc:60:cf:d6:28:5a:c7:a6:ed:86:
         d1:0d:f7:06:1a:ef:73:32:83:e0:a4:51:05:c7:79:4e:34:50:
         c5:c5:1f:6f:9d:62:33:d0:87:6e:4d:cf:d5:4c:86:95:f4:b6:
         9e:c6:71:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:59 2026 by rpki-client