Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/082AE4CAB16F11F19D18ACC65E11F970.roa
File:                     082AE4CAB16F11F19D18ACC65E11F970.roa (raw, json)
Hash identifier:          1LwBcByNCgFzNEYhwuGLtRUDzO4kGzJ/9b4Gg4FvWKw=
Subject key identifier:   B3:37:B4:48:88:84:1D:BD:DD:AA:21:73:4B:B3:4E:D8:5F:9C:55:CD
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2D0D
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/082AE4CAB16F11F19D18ACC65E11F970.roa
Signing time:             Wed 16 Sep 2026 01:37:59 +0000
ROA not before:           Wed 16 Sep 2026 01:37:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     24344
IP address blocks:        110.164.248.0/23 maxlen: 23
                          110.164.248.0/24 maxlen: 24
                          110.164.249.0/24 maxlen: 24
                          2403:6200:7501::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11533 (0x2d0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Sep 16 01:37:59 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aa9f2f7-9b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:44:09:8d:8b:49:fa:3a:86:8b:1f:86:cf:
                    49:36:ad:ff:f1:6a:b0:bf:b7:97:e3:c6:b0:1b:47:
                    0f:19:ab:04:85:00:d7:b1:41:87:6d:51:d0:51:52:
                    13:5d:ad:07:9f:0a:51:da:60:e1:98:5a:0a:22:b7:
                    8d:94:d4:85:d2:c3:3f:76:dc:f2:88:40:fb:4d:a0:
                    db:c5:73:e1:8d:8d:3a:14:e0:a5:de:1b:a8:7e:47:
                    f0:56:12:eb:ad:d6:8c:20:be:7b:f3:a6:c2:c2:7f:
                    71:e6:be:58:b7:6e:a4:a5:1e:fa:09:e2:ed:21:5a:
                    9b:ce:0c:0e:93:d5:ec:ee:69:04:d5:95:90:32:4a:
                    ed:b7:8d:1c:fa:2e:38:96:94:54:18:d0:44:92:f9:
                    05:f2:48:25:fe:5c:0b:ff:f1:e3:5c:0d:30:b8:3e:
                    08:a3:1e:01:80:8c:42:fa:6f:7f:c4:00:ac:81:d6:
                    8a:f9:55:3b:36:30:6b:bc:b9:2c:f6:43:9e:bc:ed:
                    9e:d3:79:2c:24:72:77:d8:ff:17:04:49:56:31:cc:
                    ec:39:2f:4e:d9:25:d0:15:bd:4a:9b:16:90:a0:39:
                    0a:84:0d:1f:74:a7:d3:8d:e2:eb:62:d4:ab:d5:61:
                    cc:7c:b6:ff:d3:ee:7b:c0:40:3f:31:c2:4c:88:e8:
                    2e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:37:B4:48:88:84:1D:BD:DD:AA:21:73:4B:B3:4E:D8:5F:9C:55:CD
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/082AE4CAB16F11F19D18ACC65E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.248.0/23
                IPv6:
                  2403:6200:7501::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:1b:2f:1d:06:74:75:1a:47:aa:35:b5:37:90:1e:53:78:2a:
         0d:bc:6b:e1:a5:53:a1:fd:5c:b8:0d:50:d0:69:7a:a7:04:48:
         d6:0c:95:48:ca:32:48:60:d6:91:3b:cc:29:d2:83:97:19:53:
         35:bc:eb:8e:be:3c:38:2f:81:96:fb:d8:08:2b:4f:e7:01:e4:
         4b:27:8a:da:94:ca:70:b6:91:ff:3a:4c:d2:8c:7e:31:5d:1d:
         cf:f6:8e:c4:59:1f:81:59:b9:49:06:76:38:25:1c:d0:3f:52:
         67:bf:c1:55:d1:b8:13:ee:21:a6:65:02:b7:26:eb:d3:ee:c6:
         6e:35:84:91:e2:72:1d:d1:15:b8:e9:7c:a1:46:23:e0:d9:ae:
         2d:30:d9:28:f2:d3:a2:ac:74:6b:aa:c7:21:6c:e4:fe:50:4b:
         26:09:71:2a:4f:3a:3f:b9:a3:57:c6:44:b2:52:1b:8a:34:aa:
         6f:59:9a:49:8e:78:73:b4:12:80:b4:ed:7b:f7:75:35:a8:69:
         3c:ca:c9:22:7f:7e:d1:cc:73:a9:cd:d6:ec:7a:3b:a0:a7:9e:
         4f:3e:87:c4:8a:8a:8a:e2:74:dd:f0:c6:c4:48:83:1c:ce:46:
         4d:d3:3e:d4:32:33:6c:00:f2:4e:d3:94:26:ee:ed:89:1f:92:
         e5:d4:98:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:04 2026 by rpki-client