Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/1348519E9C1211EBA38A7C4CC4F9AE02.roa
File:                     1348519E9C1211EBA38A7C4CC4F9AE02.roa (raw, json)
Hash identifier:          llFW+WRST7APyQa0YdaQfyP/e3DEFxsT1jj1YpwFLnQ=
Subject key identifier:   CE:81:CC:72:6B:52:4B:92:79:DA:90:A1:03:99:5C:5A:FA:4D:92:CC
Certificate issuer:       /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Certificate serial:       06C1
Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/1348519E9C1211EBA38A7C4CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:34:17 +0000
ROA not before:           Tue 12 Aug 2025 23:04:50 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137406
IP address blocks:        115.42.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl
                          rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729 (0x6c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
        Validity
            Not Before: Aug 12 23:04:50 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a43249-14a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:aa:b3:fb:95:af:2e:f0:83:28:07:3c:ab:86:
                    d9:1e:4b:47:da:60:d4:3b:29:27:40:ed:35:14:bb:
                    96:88:41:83:9a:84:ff:0a:33:c1:96:95:de:52:96:
                    77:49:a9:0b:e4:2d:16:bd:c3:22:d1:b4:79:23:63:
                    3d:1d:9d:05:3d:0b:a5:41:58:88:5d:20:1d:f4:9a:
                    91:62:b8:a1:f1:8f:e3:fc:e6:c8:36:a6:60:93:1a:
                    69:dc:cb:6b:75:c1:a4:9d:e8:8a:85:ea:5f:b7:c6:
                    b2:73:09:de:42:ad:86:e2:4b:79:46:17:e6:64:0b:
                    23:fb:6f:b8:5e:f6:45:4b:d8:88:1a:98:cb:a1:21:
                    72:d8:d9:12:a5:bc:b9:58:a9:bf:88:c7:3d:b2:8a:
                    6d:21:58:ef:b5:ee:7e:e0:75:58:5f:3b:94:e3:5d:
                    96:f2:d1:4d:7e:36:0b:af:2a:e1:6f:7d:bc:0d:36:
                    58:33:7f:02:a4:d8:94:4b:ad:1d:5e:ad:33:3b:75:
                    57:c9:41:88:98:9a:e7:26:ac:9a:51:f7:48:25:e8:
                    1e:61:d7:bd:88:84:00:7e:f7:47:42:fd:bf:4b:22:
                    93:f6:1a:d9:55:7b:11:e1:5b:21:7f:f0:7e:be:9b:
                    2d:5c:d8:fd:be:f6:fd:1b:af:1a:e3:ac:53:e1:6f:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:81:CC:72:6B:52:4B:92:79:DA:90:A1:03:99:5C:5A:FA:4D:92:CC
            X509v3 Authority Key Identifier:
                keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/1348519E9C1211EBA38A7C4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:09:87:cb:3d:9c:d5:fd:cf:75:93:cc:c5:87:e2:07:57:bb:
         3b:f9:3b:b6:56:9f:6d:a4:ce:a4:89:bf:3d:ca:ea:18:90:9e:
         33:84:78:b6:5f:c3:88:a9:ae:ad:22:53:bc:9f:7b:c0:21:6f:
         68:1f:74:32:97:7a:19:e1:2c:28:98:45:83:d5:6b:8d:44:5a:
         86:5b:7e:11:91:ed:b0:91:63:ab:64:6a:16:a7:31:4f:03:61:
         c3:14:ce:fb:1c:1c:3b:c4:0b:93:92:a9:ab:93:08:c0:b7:5d:
         07:d9:f6:a7:bc:bc:c0:ab:ac:47:a0:c7:d8:6b:b7:c0:1d:0f:
         74:4c:d2:eb:b9:92:6f:bb:82:75:d5:16:18:57:0b:ba:e1:d3:
         70:72:fb:0e:11:f7:8b:7a:16:48:5e:c9:02:7c:22:fa:ca:b3:
         c1:77:75:02:07:8a:a6:bc:a3:b5:94:1d:53:57:ef:b6:0e:2d:
         4c:4a:5e:3b:e0:36:a6:d4:4d:d3:1c:88:7a:c7:f3:a7:d2:fb:
         e4:18:b5:5d:18:36:1a:97:7c:c0:96:19:aa:9a:cb:85:f5:8a:
         09:63:d6:f5:fc:e3:4b:f0:98:a2:bf:f2:3a:3e:e8:8c:94:b5:
         6e:42:2b:b2:58:51:fd:8f:89:aa:89:79:77:4d:30:af:d8:65:
         17:c1:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:11 2026 by rpki-client