Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C3B463CEAB6E11EE84C1C409C4F9AE02.roa
File:                     C3B463CEAB6E11EE84C1C409C4F9AE02.roa (raw, json)
Hash identifier:          6/NIMzyuSSCqswYgkV+sHGAISjSKSRyI/UqlboaocnY=
Subject key identifier:   5C:1A:80:1B:BA:01:E1:6C:C9:11:38:31:DE:C8:60:79:8E:2E:74:8A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5EDE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C3B463CEAB6E11EE84C1C409C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:20:02 +0000
ROA not before:           Thu 28 Aug 2025 14:56:56 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     24175
IP address blocks:        110.35.64.0/21 maxlen: 24
                          119.18.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24286 (0x5ede)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:56 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60d12-87f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:69:6b:fa:48:31:11:aa:5b:d1:92:39:29:89:
                    e7:c0:c4:21:12:c9:e0:ba:4d:36:93:6e:f0:a9:ea:
                    84:5a:fe:12:de:9d:37:85:76:3d:3a:ed:54:db:05:
                    8f:6e:ed:ae:f6:d9:92:82:13:87:eb:57:5e:8b:ca:
                    b4:0d:34:59:6a:fb:6d:5d:9d:23:7c:58:ed:3a:9a:
                    ec:56:0a:15:15:ba:00:eb:09:1a:b6:ca:3a:4b:a3:
                    ae:45:f5:cd:1d:e2:f6:f1:e1:fc:2c:2d:bc:b1:22:
                    0a:f7:d7:30:3e:93:19:9a:42:ea:3b:82:26:3d:ca:
                    6f:ef:20:63:94:9d:a9:33:8f:be:20:79:1c:45:68:
                    ee:d8:d9:57:1c:25:9a:05:a3:04:23:cf:93:45:af:
                    b4:c8:74:18:7d:e0:2e:e8:3b:d7:6a:a0:7c:6f:cc:
                    f5:5b:a6:11:e3:d9:d3:3a:92:40:04:ec:e4:9b:6f:
                    b0:5a:70:39:a2:ac:06:d2:7d:4e:fc:ae:96:11:3d:
                    48:bb:f2:4c:1c:93:bf:5b:d3:3c:c9:91:92:64:34:
                    18:9d:3e:e2:6c:aa:a5:fd:a9:09:21:a7:be:99:33:
                    3d:b4:af:5d:22:57:05:4d:e9:8f:60:97:e6:fc:a8:
                    31:63:1d:a8:74:b6:6f:ec:2e:a6:2e:44:a0:72:1b:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1A:80:1B:BA:01:E1:6C:C9:11:38:31:DE:C8:60:79:8E:2E:74:8A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C3B463CEAB6E11EE84C1C409C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.64.0/21
                  119.18.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:18:c1:bc:76:01:ad:e2:39:0f:7c:59:c9:8f:ba:63:3d:1d:
         2d:62:d3:1f:c5:06:fd:0a:97:ae:0a:8d:9d:e0:20:52:02:91:
         fd:37:44:47:fa:cb:45:9c:3a:99:c9:dd:d4:65:cc:6b:43:a3:
         d6:c6:00:0a:f7:b6:12:25:cf:80:08:54:2d:f6:75:a1:04:af:
         02:44:bd:6c:72:ac:0a:18:2e:a2:f2:cb:71:b2:f2:52:0f:23:
         3f:f1:4b:c3:a0:71:ae:fc:8f:b3:9b:99:8e:9a:75:fc:e4:65:
         70:c7:0a:b0:01:0e:ca:1f:72:fa:ac:e9:b3:e9:76:24:38:3e:
         c9:c2:bc:dc:1f:37:ff:d8:89:05:ce:0c:93:5f:5d:c7:a8:f2:
         7e:63:62:5b:dc:a1:90:68:63:39:7b:51:bc:58:35:27:49:29:
         bf:d3:ec:0e:e6:2b:70:2d:f0:00:96:5c:47:ef:33:0b:c3:e8:
         df:4a:76:87:35:ba:34:e2:da:a6:73:b7:dc:22:a9:9c:46:ed:
         5b:ab:9c:ad:c8:e3:24:31:65:9e:1d:43:f7:af:bb:9d:44:45:
         b9:10:3a:b7:c8:9d:9d:1d:c9:94:12:da:57:cc:b8:73:0b:28:
         b8:95:9c:ea:27:05:65:19:5c:9a:d0:0d:62:00:1f:61:88:86:
         bb:23:a2:59
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICXt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGQxMi04N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA52lr+kgxEapb0ZI5KYnnwMQhEsnguk02k27wqeqEWv4S3p03hXY9Ou1U2wWP
bu2u9tmSghOH61dei8q0DTRZavttXZ0jfFjtOprsVgoVFboA6wkatso6S6OuRfXN
HeL28eH8LC28sSIK99cwPpMZmkLqO4ImPcpv7yBjlJ2pM4++IHkcRWju2NlXHCWa
BaMEI8+TRa+0yHQYfeAu6DvXaqB8b8z1W6YR49nTOpJABOzkm2+wWnA5oqwG0n1O
/K6WET1Iu/JMHJO/W9M8yZGSZDQYnT7ibKql/akJIae+mTM9tK9dIlcFTemPYJfm
/KgxYx2odLZv7C6mLkSgchsUrwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFwagBu6
AeFsyRE4Md7IYHmOLnSKMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzNCNDYzQ0VB
QjZFMTFFRTg0QzFDNDA5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQDbiNAAwQEdxKAMA0GCSqGSIb3DQEBCwUAA4IBAQCQGMG8dgGt4jkP
fFnJj7pjPR0tYtMfxQb9CpeuCo2d4CBSApH9N0RH+stFnDqZyd3UZcxrQ6PWxgAK
97YSJc+ACFQt9nWhBK8CRL1scqwKGC6i8stxsvJSDyM/8UvDoHGu/I+zm5mOmnX8
5GVwxwqwAQ7KH3L6rOmz6XYkOD7JwrzcHzf/2IkFzgyTX13HqPJ+Y2Jb3KGQaGM5
e1G8WDUnSSm/0+wO5itwLfAAllxH7zMLw+jfSnaHNbo04tqmc7fcIqmcRu1bq5yt
yOMkMWWeHUP3r7udREW5EDq3yJ2dHcmUEtpXzLhzCyi4lZzqJwVlGVya0A1iAB9h
iIa7I6JZ
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:07 2026 by rpki-client