Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/E049BA50335911F193981E57CA833773.roa
File:                     E049BA50335911F193981E57CA833773.roa (raw, json)
Hash identifier:          ccrqPCbKxkHUXLuFhP49NrNOV6bbgxDvMbrEYPU0/70=
Subject key identifier:   23:97:82:ED:63:24:BE:5A:35:F4:85:2E:5A:0F:C4:03:3E:AC:E4:98
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       22FF
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/E049BA50335911F193981E57CA833773.roa
Signing time:             Wed 08 Apr 2026 14:47:33 +0000
ROA not before:           Wed 08 Apr 2026 14:47:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134128
IP address blocks:        180.210.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8959 (0x22ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Apr  8 14:47:33 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69d66a85-4762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:f7:f2:37:c1:63:84:b0:4f:7f:7c:f2:38:
                    f5:f8:28:68:57:93:7b:54:b4:60:6c:93:bf:06:01:
                    d0:4a:70:82:b1:bd:03:a5:96:40:31:0d:5c:d3:38:
                    04:7d:83:51:fb:4d:d4:1c:51:e3:b7:5f:9a:66:38:
                    74:32:28:ed:75:18:80:3d:74:7c:96:b0:81:60:0a:
                    0f:0b:1a:9d:da:f4:7e:b1:f7:96:e0:3b:91:c6:d1:
                    79:e5:3a:f7:0c:1b:ec:81:6c:c7:ee:e7:d6:18:8d:
                    fc:48:c1:83:1f:cc:0a:fe:61:12:03:4c:99:9d:fd:
                    5f:c8:6e:63:e1:96:ac:79:b7:c5:74:40:66:68:3d:
                    d7:5b:a4:77:cc:d9:1d:26:6e:77:68:bf:93:60:87:
                    ee:5e:92:84:98:9f:9f:63:9f:b0:75:01:94:3c:75:
                    a5:9f:d3:0c:33:a9:72:85:57:8b:32:5e:6b:c8:27:
                    5e:b8:27:75:17:10:37:ed:63:7f:e3:e9:03:ff:8c:
                    46:cb:6a:a1:77:a3:5c:fc:0c:e7:20:81:e1:9c:db:
                    e8:b9:43:5f:e8:7a:9c:3b:c9:d5:df:52:33:06:8c:
                    d2:f1:cb:45:26:47:76:28:7f:5b:26:f2:08:7f:05:
                    c5:5b:78:b4:ed:54:a3:89:71:d5:98:11:5b:7e:df:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:97:82:ED:63:24:BE:5A:35:F4:85:2E:5A:0F:C4:03:3E:AC:E4:98
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/E049BA50335911F193981E57CA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:6e:39:e8:b8:48:6c:8a:e4:7a:1f:f9:4f:b2:a5:22:a9:69:
         1c:fa:f4:85:1e:8c:48:17:dd:8c:85:b8:b2:0c:a6:f1:e0:66:
         4f:ee:13:73:20:e4:b5:8c:2f:21:76:75:80:d1:73:4d:82:d9:
         d1:e3:bd:48:9b:7c:b4:d4:43:b9:60:75:b2:5a:c3:d0:4e:43:
         9d:3b:69:4a:8f:bf:8c:2b:3b:e7:2a:54:66:92:0b:14:8a:14:
         67:94:a2:5a:93:2e:94:00:2e:24:22:21:b9:8a:f2:2c:61:26:
         c5:b8:ec:cc:55:01:38:b4:10:05:dc:f8:1e:2a:95:e1:17:68:
         26:ba:81:c2:9f:2f:ad:5c:b5:63:f6:2c:9d:fc:77:96:ef:2b:
         cc:ad:c7:25:37:95:53:8d:ae:81:2e:ed:92:aa:a5:e9:a8:35:
         da:1e:a2:cb:52:99:dd:cd:22:cc:9b:ec:b9:e9:c5:6e:11:92:
         53:88:df:13:65:ce:5f:ef:1f:b0:c7:0f:4e:c5:85:ba:83:bc:
         40:db:75:a9:e5:c3:a9:40:88:4f:c7:76:36:0a:7d:b6:12:62:
         9d:35:7a:41:5b:dc:e3:2f:b8:b1:fd:9b:09:c8:79:02:32:ab:
         2c:fc:d9:f7:e1:fa:5e:ee:6a:90:22:8f:f7:df:be:35:66:8a:
         25:01:0c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:25 2026 by rpki-client