Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/4A32E74C26D411EEA00C7C38C4F9AE02.roa
File:                     4A32E74C26D411EEA00C7C38C4F9AE02.roa (raw, json)
Hash identifier:          xTtfRVgoi7LqW9stxwebUurGyU3AGxhCfS6LcYebsDg=
Subject key identifier:   BA:9B:5C:56:B0:5E:34:63:0C:05:5B:15:56:B2:A7:7D:FD:0E:3C:9B
Certificate issuer:       /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial:       07F2
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/4A32E74C26D411EEA00C7C38C4F9AE02.roa
Signing time:             Wed 08 Oct 2025 22:24:25 +0000
ROA not before:           Wed 08 Oct 2025 22:24:25 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     131174
IP address blocks:        110.44.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 23:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2034 (0x7f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
        Validity
            Not Before: Oct  8 22:24:25 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e6e499-e82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:fa:47:3e:54:a8:6a:46:c3:93:2a:dc:4a:
                    e3:3b:04:d2:ea:07:f6:98:1d:d3:54:47:85:de:9f:
                    c8:87:fd:b2:3f:6a:5c:7b:97:7f:24:16:4b:16:96:
                    d0:8b:42:f3:72:c4:a1:96:16:c3:8e:72:b5:88:7c:
                    66:0c:ec:2a:c1:f7:2a:64:81:8c:28:1f:14:91:52:
                    f6:32:17:2e:0e:2b:34:78:c4:c2:17:e7:c6:b6:15:
                    65:03:f1:34:fc:9d:4a:2e:37:58:01:d8:80:54:a0:
                    4e:3d:99:4d:07:8f:b8:cd:a0:53:98:be:f0:f8:b1:
                    69:f2:de:78:b8:1c:7b:f0:27:e4:03:11:05:af:25:
                    fe:25:e9:2a:a3:be:46:3b:16:62:97:21:ad:70:d9:
                    37:12:c0:27:0a:b7:4a:99:02:cc:7f:00:a1:0d:5c:
                    a0:7b:e8:67:91:f4:21:2f:94:5e:c4:94:1c:e0:1e:
                    a5:28:cd:ee:0e:16:1a:2a:bd:76:e2:c4:b7:42:d8:
                    f2:46:5c:63:90:d5:36:79:90:d5:de:77:4e:c7:60:
                    ea:4d:99:65:66:df:bd:de:d0:01:31:9c:0f:5e:bf:
                    49:46:89:11:64:02:be:11:d2:1c:a5:d5:b1:d7:82:
                    ee:da:c9:d9:37:67:a5:aa:0e:f4:77:e7:95:d4:12:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9B:5C:56:B0:5E:34:63:0C:05:5B:15:56:B2:A7:7D:FD:0E:3C:9B
            X509v3 Authority Key Identifier:
                keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/4A32E74C26D411EEA00C7C38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:57:86:99:4c:30:3e:95:53:68:05:22:d9:4a:98:42:e9:77:
         7d:71:23:3d:6b:62:8b:14:08:3f:ce:31:8b:97:c7:86:e6:8e:
         a0:50:8c:41:38:24:62:06:dc:ae:68:16:46:62:6e:09:69:26:
         23:7b:21:8d:0e:da:a1:76:92:4b:cd:4a:82:13:6e:a3:0e:07:
         a9:68:b5:16:83:b9:51:5b:a8:cd:9b:e8:2c:2e:6c:db:3f:8e:
         9c:a5:2d:32:b1:41:8c:36:1b:c5:3a:97:93:9b:e4:1c:b8:f3:
         c8:2b:0f:51:39:a9:a1:66:21:f0:ee:3a:e0:8a:a1:1d:cb:15:
         c3:6e:f1:b3:1d:bd:ba:2a:37:7a:5e:0d:4b:63:95:d0:43:98:
         7d:1d:8f:27:c0:79:70:94:c8:72:df:db:53:63:15:83:c7:0a:
         81:35:85:f3:59:68:a4:e2:fd:e0:61:45:69:9f:ca:db:f4:e4:
         0b:17:ef:a8:d6:ca:14:a0:5b:76:63:26:8a:58:fa:64:49:6a:
         d3:2a:a7:cf:f6:0f:08:72:ce:88:54:76:ae:f9:26:90:c3:ec:
         66:21:df:d7:31:79:7c:da:b7:13:6a:c7:97:16:2b:8e:55:20:
         a9:62:2e:57:4a:1d:10:76:c4:34:02:8e:fa:4b:13:77:18:4d:
         0b:8a:79:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 01:29:42 2025 by rpki-client