Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4C9925F2A4C911E782854F50C4F9AE02.roa
File:                     4C9925F2A4C911E782854F50C4F9AE02.roa (raw, json)
Hash identifier:          NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=
Subject key identifier:   62:D5:38:96:AB:1D:E5:31:4E:3B:3B:F6:76:8A:C5:0B:17:F2:AA:68
Certificate issuer:       /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial:       36A8
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4C9925F2A4C911E782854F50C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:10:52 +0000
ROA not before:           Tue 02 Dec 2025 14:41:48 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     18190
IP address blocks:        111.125.84.0/24 maxlen: 24
                          121.58.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13992 (0x36a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
        Validity
            Not Before: Dec  2 14:41:48 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4812b-22c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:68:dd:f8:22:b1:9b:29:54:2b:3b:7e:5e:
                    3a:1a:a0:3f:59:24:21:07:ed:74:25:39:86:be:67:
                    08:61:2f:f8:c3:c4:43:e8:6d:b4:f5:8e:5a:1f:7b:
                    29:e5:ef:32:af:5f:7a:42:23:f1:ac:9c:97:eb:c2:
                    ac:b5:e3:23:82:b3:13:06:36:ea:34:8f:6f:e7:07:
                    ac:7e:fb:e6:2d:18:db:1a:24:1c:48:c0:b5:74:cd:
                    2e:06:1c:ae:50:08:13:3e:f3:dd:b4:7b:fd:4b:54:
                    e9:79:c5:1a:e6:04:50:ec:db:2a:e6:4a:ed:15:89:
                    9e:2e:13:fa:b8:e2:78:9a:c0:71:0a:8b:fb:9c:8b:
                    72:0b:8e:42:9f:d3:bc:2c:8a:a4:8e:9f:86:c3:a7:
                    19:b3:b8:1d:e6:cd:5e:86:79:80:a4:45:ba:ab:57:
                    1e:be:09:d9:bc:7d:5b:8b:70:1f:fe:dc:1b:7e:d6:
                    bb:e2:d3:87:6f:8e:67:43:e0:d2:13:68:1d:69:15:
                    70:ed:d1:fc:3e:fe:33:6d:62:83:d4:cf:d9:48:cc:
                    24:21:de:9a:cc:70:24:25:41:98:c4:6c:35:55:d4:
                    a2:d1:ad:f2:63:44:ec:04:f4:b5:57:63:89:5e:8e:
                    c6:2e:fd:cc:38:7a:9b:2d:81:c6:09:76:ac:ea:fc:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D5:38:96:AB:1D:E5:31:4E:3B:3B:F6:76:8A:C5:0B:17:F2:AA:68
            X509v3 Authority Key Identifier:
                keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4C9925F2A4C911E782854F50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.125.84.0/24
                  121.58.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:68:a8:af:7b:bc:3a:90:17:8f:4e:da:71:28:4f:f8:1b:2a:
         f8:16:d6:f5:59:9b:f4:93:26:2a:02:6e:2c:1a:f4:69:98:cd:
         5b:88:a4:96:9f:93:f4:75:b7:c3:b0:21:8d:0a:71:fc:f7:4d:
         df:40:e6:ca:81:05:b9:a7:03:a8:b7:e8:23:d3:d5:ea:ab:04:
         b9:ea:81:de:52:33:c6:f9:a2:56:39:96:2d:f5:e2:b0:00:8c:
         ef:7e:e7:6f:37:55:1c:04:7d:fc:c5:42:a3:6e:ed:a1:41:64:
         04:fc:d7:09:1d:e1:c2:84:f3:b3:0f:f2:f4:06:70:1f:87:5e:
         45:06:a2:92:bb:5b:af:93:15:89:1d:59:54:77:61:ed:66:8c:
         59:b2:90:b1:b0:35:94:18:71:3e:11:f4:51:f2:5d:91:27:3f:
         04:8a:88:36:2c:1f:ae:f2:a4:04:15:bb:e9:23:35:49:fd:91:
         35:98:41:f0:18:c7:60:76:b6:80:f9:ed:29:ec:e2:8c:40:ae:
         6c:f2:d1:57:76:42:de:62:3c:9e:e5:7e:7c:14:a2:df:61:df:
         dc:af:6b:62:b3:3e:2e:35:84:9c:c6:8c:d2:0e:46:77:cb:7e:
         9e:44:a5:32:1c:ea:7d:54:92:38:b1:25:67:80:52:b4:de:17:
         42:15:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:12 2026 by rpki-client