Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/1757030662A111F1B27205B29847A888.roa
File:                     1757030662A111F1B27205B29847A888.roa (raw, json)
Hash identifier:          NT2ZMU9ZuEHibs/ErYdTJCOY0wEFs/YdiFk5GPW5Wy8=
Subject key identifier:   F3:AD:94:11:BE:C5:25:CE:56:E4:DE:4C:4B:8F:53:2D:53:50:6A:9A
Certificate issuer:       /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Certificate serial:       B5
Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/1757030662A111F1B27205B29847A888.roa
Signing time:             Sun 07 Jun 2026 18:45:45 +0000
ROA not before:           Sun 07 Jun 2026 18:45:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153737
IP address blocks:        210.56.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
                          rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
        Validity
            Not Before: Jun  7 18:45:45 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a25bc58-8870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:74:dd:fe:60:3f:4c:a3:b2:10:f1:1d:1c:
                    ae:0b:83:10:35:1c:fa:5e:07:17:dd:2d:5b:7a:90:
                    d0:e7:89:71:2a:4a:27:24:77:2a:a8:30:97:58:16:
                    4d:12:52:19:e0:da:e8:fb:cf:b6:87:57:a4:13:71:
                    c5:23:6e:e8:89:a9:c3:2f:36:de:23:28:bd:02:43:
                    5b:42:6e:a0:19:7b:40:7a:7c:18:73:40:0e:76:1f:
                    93:d2:71:fa:88:d9:47:23:6c:73:0f:f0:62:29:3c:
                    46:00:a7:29:b8:2d:3f:38:2e:0c:75:e0:04:6d:d2:
                    d3:79:c6:0a:22:88:2e:c0:bb:f1:42:d6:0d:ea:d7:
                    58:e4:fb:6a:87:2c:36:a1:80:31:54:df:8f:f1:a3:
                    74:4b:a3:5f:b1:14:1b:78:45:e1:b1:72:b2:d2:ec:
                    92:cc:b6:8a:8b:80:33:8e:3b:62:2d:da:77:5f:2e:
                    85:7f:46:8c:f6:89:f5:74:30:0a:56:08:14:fd:f2:
                    81:cd:5c:a8:50:57:88:65:37:0e:9b:08:43:d5:15:
                    33:43:9b:69:12:39:bc:2f:ab:87:02:1a:bc:2f:f3:
                    5d:42:f9:a4:c9:31:cd:20:a2:d5:93:a9:0b:07:ef:
                    06:2f:da:94:3f:49:d0:88:11:9a:0c:34:67:7c:eb:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AD:94:11:BE:C5:25:CE:56:E4:DE:4C:4B:8F:53:2D:53:50:6A:9A
            X509v3 Authority Key Identifier:
                keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/1757030662A111F1B27205B29847A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.56.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:22:bc:1b:44:ca:d6:5b:6b:a2:70:4c:53:3e:69:de:24:b0:
         ed:c6:63:25:a1:4c:67:29:1e:f9:e1:26:13:38:52:ae:6d:8d:
         df:09:8b:3c:9a:b8:73:c0:e4:51:3a:93:fe:fc:3f:82:1d:76:
         bb:4a:f4:76:7d:63:76:24:d4:2f:ff:18:99:8f:71:80:da:72:
         61:f5:f1:16:80:d0:8d:30:dc:c4:bc:e9:55:c7:6d:c2:16:20:
         13:68:29:cb:fc:e4:66:0f:0f:50:71:a8:a5:d9:ab:ee:30:56:
         fc:b1:0b:93:8f:81:64:a3:98:24:81:56:6f:64:7f:df:2b:36:
         75:89:e7:33:d0:d9:8d:44:9a:33:3b:1d:42:87:bb:86:a5:69:
         31:35:33:e2:5f:c5:f8:a6:1d:63:c3:72:d7:af:5c:87:ea:89:
         e5:18:a0:4f:4f:cf:6a:66:c2:35:0c:2c:72:c7:5a:b6:ad:26:
         7f:83:bc:f2:35:cc:f1:53:53:f2:82:c6:82:80:92:d3:b6:37:
         2e:ff:0a:33:c9:fb:a3:74:23:8f:cb:e3:59:37:83:15:d3:69:
         92:53:c9:07:63:18:8e:e7:63:0a:01:6a:cc:92:0a:1c:8c:c6:
         e4:17:44:4c:2d:4b:56:28:02:5d:e4:f2:2b:1e:2b:05:b6:ca:
         78:f3:f2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:38:46 2026 by rpki-client