Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/1054539CC80411ECBA7BB174C4F9AE02.roa
File:                     1054539CC80411ECBA7BB174C4F9AE02.roa (raw, json)
Hash identifier:          x8bKQKIGGYpVJdPt4d/VDGjCgjjQWty2TiceRTQ2uc8=
Subject key identifier:   6F:8B:38:E6:BB:4C:1C:BC:80:31:9D:6B:EC:81:B5:45:32:0B:03:52
Certificate issuer:       /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial:       03DC
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/1054539CC80411ECBA7BB174C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:25:40 +0000
ROA not before:           Mon 05 May 2025 01:06:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38001
IP address blocks:        45.114.117.0/24 maxlen: 24
                          103.53.197.0/24 maxlen: 24
                          103.53.198.0/24 maxlen: 24
                          103.53.199.0/24 maxlen: 24
                          2402:2f80:1::/48 maxlen: 48
                          2402:2f80:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
        Validity
            Not Before: May  5 01:06:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a44c64-2269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:f1:2f:3a:7e:76:7b:f3:d5:a1:71:81:03:
                    66:66:13:c0:64:71:f6:79:20:fa:53:5c:d4:b7:37:
                    a9:80:07:a5:71:d0:d5:2a:9f:be:4a:68:44:ab:95:
                    1f:ab:48:94:4f:e0:d8:dc:0a:e6:c4:05:33:61:d1:
                    7f:8a:93:d6:4a:c5:ab:27:99:d2:5f:a6:1b:1a:3a:
                    f1:31:6c:1e:59:02:4b:df:8d:17:4a:a0:fc:80:22:
                    60:a8:d6:7c:ea:bb:91:88:72:ea:ec:08:8c:3c:8c:
                    7a:b8:dd:49:2d:ef:77:20:d1:3f:0e:04:0c:d3:bd:
                    3b:1d:21:94:84:ae:79:bc:18:11:18:ff:14:01:28:
                    fc:be:4c:c4:61:ff:28:ab:a6:54:cc:82:8c:7d:91:
                    68:d4:2a:ef:10:63:4e:fd:cc:86:d2:43:b4:f3:36:
                    87:92:59:2e:33:d5:7b:11:f9:1c:cf:65:30:23:3a:
                    d7:4a:32:e4:52:9a:36:5d:30:3e:2e:bc:32:d2:60:
                    01:c6:7f:d3:8c:35:a8:80:c0:cf:67:9e:df:6d:7c:
                    5f:d3:80:e9:a5:28:31:f7:ad:5d:22:bd:b0:8c:24:
                    8a:3a:77:32:55:ff:c6:94:c0:94:0e:02:a8:94:9c:
                    5e:80:0f:6c:1f:18:b5:ca:2c:cb:99:19:ad:ca:a5:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8B:38:E6:BB:4C:1C:BC:80:31:9D:6B:EC:81:B5:45:32:0B:03:52
            X509v3 Authority Key Identifier:
                keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/1054539CC80411ECBA7BB174C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.117.0/24
                  103.53.197.0-103.53.199.255
                IPv6:
                  2402:2f80:1::/48
                  2402:2f80:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:04:9f:a5:5f:19:b6:db:7e:be:1e:49:ab:dc:96:a2:07:
         5f:26:cb:1a:18:2d:d0:af:6c:f1:35:47:77:9a:bc:0d:77:9b:
         c1:fd:42:80:88:eb:3a:c9:a1:d7:cb:e1:bb:0e:b9:c5:fe:41:
         97:22:35:f0:f6:6c:23:3c:0c:24:ad:a4:03:91:a1:e8:bd:7f:
         d5:09:0b:c6:b1:1f:12:2a:b7:35:4a:fa:15:31:aa:26:79:53:
         13:b5:0d:0a:2b:40:42:2f:63:41:a5:b2:80:99:ec:58:c5:0d:
         92:0a:5b:f0:22:49:26:a7:58:e3:3c:4c:33:3a:3e:d1:d2:69:
         61:bd:5f:56:d7:04:2d:05:eb:1a:18:45:42:1b:20:4b:37:6a:
         06:d4:f8:7d:b4:50:92:3a:3e:22:08:89:4a:f7:0c:82:58:7c:
         82:76:89:6b:7a:b7:cd:39:45:77:10:65:36:80:34:63:ce:2c:
         6e:7e:17:d6:13:82:4d:83:08:6f:f8:73:6a:2e:b7:e3:c7:4d:
         c3:53:25:28:d3:e3:49:2e:e9:2c:fd:f3:85:29:58:b4:04:ad:
         c5:a8:89:be:6b:82:9a:a9:81:42:95:31:13:40:33:21:b4:88:
         bb:a2:2b:00:40:b5:fb:43:67:13:5b:da:c4:7e:0b:ed:d8:09:
         30:a6:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:18 2026 by rpki-client