Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
File:                     C264EF40348611F1AD86C498AC833773.roa (raw, json)
Hash identifier:          wTMXhIJHuGRKi/fQE0t7xt0V+AnCVKBleH1O5usD6Xw=
Subject key identifier:   6E:F6:21:32:23:21:11:2E:55:B9:F1:A2:4B:00:22:54:DF:B6:BA:82
Certificate issuer:       /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial:       3531
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
Signing time:             Fri 10 Apr 2026 02:41:22 +0000
ROA not before:           Fri 10 Apr 2026 02:41:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     23884
IP address blocks:        111.223.42.0/24 maxlen: 24
                          112.121.140.0/24 maxlen: 24
                          112.121.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13617 (0x3531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
        Validity
            Not Before: Apr 10 02:41:22 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69d86352-f1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:40:d8:65:7e:04:8b:fd:46:9c:af:4f:da:
                    b7:e6:67:d0:e0:de:ef:71:c4:74:1d:9c:da:33:04:
                    75:c2:89:04:8c:5c:f1:07:b6:c1:16:44:43:63:77:
                    7c:8d:d4:28:f2:ee:d0:d2:69:a4:44:0e:3b:0a:27:
                    e1:76:f8:8d:1c:30:7a:d2:c4:df:89:3b:80:39:25:
                    72:07:0c:e6:59:96:78:a3:fe:cc:5e:fe:51:2c:89:
                    ee:17:51:e2:5f:17:bb:fd:12:1d:e5:f4:f7:2a:18:
                    17:30:b0:85:f8:e0:c8:fe:f3:1c:49:18:b2:8d:ab:
                    9a:0b:02:81:ca:88:b5:15:a4:7d:d8:5f:a9:95:17:
                    de:0c:bf:10:6f:f7:08:29:ac:42:29:26:47:ec:f4:
                    41:25:98:05:45:9e:be:4e:52:1d:a0:78:84:8a:7f:
                    61:e0:d0:ce:8d:f1:77:e7:10:23:9c:cb:32:e9:55:
                    c7:39:7c:fa:16:d0:84:59:46:20:00:82:4e:4c:d0:
                    3f:ed:c7:5f:1a:b6:d8:7a:75:40:db:5c:15:80:8d:
                    7b:15:95:de:b5:b4:e7:50:8b:48:05:02:a0:1a:8b:
                    11:95:bb:5c:89:70:b8:74:4b:32:1d:5d:80:a6:38:
                    9d:ed:e1:66:8c:6d:28:d6:77:2b:2f:cb:a2:e1:4d:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F6:21:32:23:21:11:2E:55:B9:F1:A2:4B:00:22:54:DF:B6:BA:82
            X509v3 Authority Key Identifier:
                keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.223.42.0/24
                  112.121.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:4b:27:96:8f:8d:07:4d:8d:5a:12:cd:4e:90:b1:b5:b9:a0:
         92:8d:83:c2:34:9b:34:41:0c:24:97:73:6a:94:7e:7d:03:34:
         76:5b:c3:89:1b:b3:5b:4e:6a:ac:74:01:e0:c5:27:41:fb:aa:
         04:8f:ee:70:74:c8:67:59:c4:1e:d7:43:74:71:3e:7d:5d:98:
         c9:71:1b:a9:ea:12:ce:06:e6:79:49:32:09:1e:bc:d1:29:21:
         0d:36:1b:d4:37:7b:72:7a:4b:36:40:76:6f:d5:02:09:85:9d:
         94:d7:62:be:47:47:46:08:b4:75:ea:b8:70:9d:47:95:64:c9:
         a7:3f:c1:6a:0f:58:be:2b:dc:0c:cf:e0:02:ea:90:41:5f:d3:
         ca:62:8a:c7:f9:d8:24:13:90:69:15:0f:14:39:05:de:9b:1d:
         7b:0b:d7:53:38:13:4e:d4:27:36:7f:16:14:f9:69:ed:b8:71:
         30:86:85:30:44:71:73:aa:78:07:a8:ec:cf:ba:07:fe:29:e2:
         ee:71:ee:64:d5:21:ce:11:ac:1c:13:51:8e:b1:79:a9:d8:d6:
         6d:34:4b:7c:71:eb:ca:2c:d3:6a:de:93:39:1b:f4:27:e4:2b:
         71:26:03:d0:80:5b:f0:d0:9b:14:59:df:41:4b:c3:3a:94:cd:
         09:c2:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:22 2026 by rpki-client