Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/FA554EAC2A4811F0ABF04B60C4F9AE02.roa
File:                     FA554EAC2A4811F0ABF04B60C4F9AE02.roa (raw, json)
Hash identifier:          zO8xxi5+wEo+YCIWIiBIwKwOm9GHs/oCWYbFOjKBJqE=
Subject key identifier:   23:38:16:EE:D3:03:58:B0:04:2B:62:92:C7:90:4E:1B:D0:E9:F0:76
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       6179
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/FA554EAC2A4811F0ABF04B60C4F9AE02.roa
Signing time:             Thu 16 Apr 2026 20:25:34 +0000
ROA not before:           Thu 16 Apr 2026 20:25:34 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     18116
IP address blocks:        118.143.54.0/24 maxlen: 24
                          118.143.169.0/24 maxlen: 24
                          118.143.176.0/24 maxlen: 24
                          118.143.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24953 (0x6179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Apr 16 20:25:34 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e145be-5758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:1d:3c:60:e9:ad:22:ee:83:b0:6b:60:67:
                    07:24:72:fe:05:bf:0e:44:86:7a:72:dc:9c:e3:5f:
                    f3:f5:74:6c:bd:86:1c:02:a5:3c:c6:b0:53:c1:0a:
                    08:c9:95:b7:09:5b:8e:9f:da:56:2e:06:0b:5a:a3:
                    5b:8b:6b:a1:40:dc:ea:6a:9b:c1:59:3c:71:fa:80:
                    c4:a6:33:9f:57:e3:82:14:c9:1f:c8:4a:0e:25:1c:
                    b4:87:74:d8:30:dd:f2:c3:d4:e6:eb:40:c2:0e:7e:
                    9d:5c:70:c9:4a:d9:d3:63:58:84:6f:c0:c5:64:6b:
                    e5:1d:6d:5c:8b:c8:fc:70:c7:4a:94:cc:a3:43:96:
                    46:c1:31:fc:fe:90:f4:95:cb:0d:aa:3a:c4:5b:b1:
                    bd:51:f9:b3:04:d7:42:95:32:65:70:2b:9a:91:bf:
                    d4:1f:87:72:1f:9d:41:44:c6:0d:99:ed:90:c3:12:
                    a3:3f:2a:21:77:d4:7b:2b:73:48:2d:66:20:c4:50:
                    51:dd:66:ef:ef:f4:0f:0c:1f:82:1f:c4:f6:3d:9e:
                    3d:5e:f9:e1:c3:11:82:ca:e9:06:d1:68:60:37:a6:
                    e9:3e:fe:23:4d:4c:8e:49:20:d9:d2:08:ee:18:ef:
                    6f:a3:f6:cb:06:1b:f8:ff:80:c0:02:75:7a:d5:56:
                    b7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:38:16:EE:D3:03:58:B0:04:2B:62:92:C7:90:4E:1B:D0:E9:F0:76
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/FA554EAC2A4811F0ABF04B60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.143.54.0/24
                  118.143.169.0/24
                  118.143.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:51:8e:b8:92:36:c7:02:b1:68:93:0c:23:88:b3:ac:7f:b3:
         0d:c5:ff:11:13:41:33:02:d4:b4:b9:03:0b:8a:69:d6:7c:0c:
         56:f8:0c:ba:b8:55:98:4a:4e:01:1d:f5:59:a5:6f:7e:a8:5c:
         45:e6:63:dd:51:38:2b:c9:60:b9:35:41:61:24:40:8c:26:44:
         b1:84:75:fc:f2:7d:65:87:c5:67:64:7a:74:96:f9:15:bc:6d:
         2d:3a:4f:dc:46:b3:db:91:85:d9:ff:89:b5:5c:85:16:6c:6b:
         1b:1d:e2:3d:6b:88:fb:e8:c3:7a:a7:6f:20:31:e6:0b:41:7d:
         a1:02:af:04:c8:d1:2e:5d:4a:e5:bb:14:54:ac:a2:96:9e:61:
         38:d6:a0:51:06:f2:8b:bb:9b:be:1f:49:aa:75:1d:68:4f:74:
         3f:ad:ba:05:5c:99:cd:96:31:90:98:0b:f7:5d:a6:aa:e3:3e:
         ad:62:d3:1e:74:87:1b:a7:3c:ae:b9:77:29:4c:e2:39:97:2e:
         74:c6:e6:33:5d:3b:e5:ee:2b:be:5e:eb:37:5c:56:02:87:1e:
         06:33:ff:f9:0e:68:be:91:7e:02:ba:a5:b5:3f:72:3b:0b:74:
         29:b0:91:bb:5d:31:74:4a:ca:01:5f:d9:b2:8a:1c:31:21:b5:
         a2:e6:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:16:43 2026 by rpki-client