Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/4C2BA294AD8D11F19E54609E6611F970.roa
File:                     4C2BA294AD8D11F19E54609E6611F970.roa (raw, json)
Hash identifier:          a0QAdxp0tkx/D2zn2nKgA7+TVInhNFqP1hOyNXAMsME=
Subject key identifier:   28:FC:35:4F:87:8E:8F:1D:02:D6:A9:05:C6:32:98:EC:AA:C6:79:44
Certificate issuer:       /CN=A91CCCF4/serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
Certificate serial:       9B
Authority key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/4C2BA294AD8D11F19E54609E6611F970.roa
Signing time:             Fri 11 Sep 2026 03:03:01 +0000
ROA not before:           Fri 11 Sep 2026 03:03:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        210.55.2.0/24 maxlen: 24
                          210.55.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl
                          rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
        Validity
            Not Before: Sep 11 03:03:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa36f64-6dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:03:18:51:11:85:2c:d3:34:7e:84:d8:eb:
                    e9:c9:ce:04:33:05:35:9c:e0:c5:90:cc:ec:ea:e4:
                    87:4a:c9:cb:d1:a3:76:8f:ac:22:ff:52:e2:94:59:
                    65:84:e3:ca:91:b1:66:fa:ad:b8:c9:f1:28:b4:5d:
                    cc:9a:82:f7:c6:d8:7c:74:ad:9e:ae:dd:5f:f3:0c:
                    f2:51:ac:38:72:bc:79:e3:ef:97:76:ea:03:5c:b5:
                    4f:ad:52:7e:58:61:ed:8c:e0:8c:7b:ef:6c:db:64:
                    c2:d8:88:55:23:8e:2f:20:56:ac:79:e3:05:fb:e1:
                    13:0e:06:7d:c1:fa:a0:de:2c:cd:9a:20:da:fd:e3:
                    58:60:69:68:57:bf:92:a7:8f:a2:ff:d2:b2:ce:fc:
                    f3:a5:fd:c8:08:f6:27:10:48:72:77:2f:29:28:0b:
                    3f:51:93:61:dc:73:13:02:e3:0c:6f:74:c4:cf:4d:
                    4e:70:39:31:d4:31:36:a1:9f:bf:f1:16:05:10:7f:
                    ae:43:c1:1b:81:56:d3:7a:c9:e0:5f:d7:f0:83:13:
                    06:11:21:a3:21:ec:fd:97:54:a9:e7:a8:68:aa:dd:
                    85:7c:5f:e7:ac:7a:d7:3d:73:87:a0:f5:96:04:fb:
                    25:f1:9e:69:b2:68:ce:7a:7e:1b:bd:ca:72:b3:1c:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FC:35:4F:87:8E:8F:1D:02:D6:A9:05:C6:32:98:EC:AA:C6:79:44
            X509v3 Authority Key Identifier:
                keyid:AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/4C2BA294AD8D11F19E54609E6611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.55.2.0/24
                  210.55.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:a4:10:b9:2c:fa:b2:ef:fa:d6:09:c8:8b:78:f8:30:ab:
         26:d3:db:c3:fd:9b:48:bc:a9:4b:ed:b8:d3:16:2b:81:af:4d:
         12:0d:16:15:91:98:c3:08:dc:93:b6:42:72:61:dd:23:3b:0d:
         a2:f2:6c:0c:e3:fd:c9:a3:65:24:f1:47:2e:21:29:a6:92:0e:
         14:1b:71:be:ba:86:86:ed:c1:4a:86:d7:f3:1c:68:c7:9b:be:
         d1:52:9c:f3:25:bf:a6:62:4e:90:9e:12:c0:f0:e5:ce:f3:9b:
         e6:72:8c:d4:b1:00:7a:0d:d1:92:90:7d:db:02:64:b0:ac:54:
         e8:b3:5e:60:80:ed:2f:1d:ab:bf:22:f3:c7:61:6d:d0:a1:49:
         ef:32:89:dd:e9:20:ff:e9:e4:21:f9:64:06:e8:5f:5e:ef:b6:
         28:77:c3:18:8b:05:46:eb:6f:77:2d:a9:84:22:38:21:9b:f0:
         38:a8:0e:98:ad:c8:e3:f2:39:98:c6:57:04:4e:f4:9f:31:6a:
         88:cf:0e:d5:21:1c:5b:e8:f2:27:dc:29:ff:5d:ab:b3:f8:b1:
         5b:7a:9e:4e:45:63:93:d0:32:30:3e:79:6a:c5:eb:18:f3:c0:
         8e:70:96:bd:72:48:be:21:a4:cf:a3:49:fd:a5:70:ed:5d:db:
         b7:7b:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:21:12 2026 by rpki-client