Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/1B25BF167FE111EBB6C0941AC4F9AE02.roa
File:                     1B25BF167FE111EBB6C0941AC4F9AE02.roa (raw, json)
Hash identifier:          Mftn2APRDOCG1qlWRIWno9cuRvXYIHlsjnoVgx1x7oM=
Subject key identifier:   A8:AD:DD:AF:92:D4:36:62:B6:EC:BD:54:AF:6B:2D:AC:85:8F:71:52
Certificate issuer:       /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
Certificate serial:       077C
Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/1B25BF167FE111EBB6C0941AC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 22:42:26 +0000
ROA not before:           Fri 02 Oct 2026 22:42:26 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     45230
IP address blocks:        45.112.60.0/24 maxlen: 24
                          45.112.61.0/24 maxlen: 24
                          45.112.62.0/24 maxlen: 24
                          45.112.63.0/24 maxlen: 24
                          103.74.208.0/24 maxlen: 24
                          103.74.209.0/24 maxlen: 24
                          103.74.210.0/24 maxlen: 24
                          103.74.211.0/24 maxlen: 24
                          202.49.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
        Validity
            Not Before: Oct  2 22:42:26 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac03352-2e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:a4:6f:c3:55:f5:ad:84:0a:6e:75:7f:94:
                    36:fa:1a:80:26:57:24:26:10:09:0b:3e:fb:f5:00:
                    6e:7e:99:f4:39:b2:50:90:3a:de:bd:77:39:ac:f3:
                    d5:42:ac:c3:22:b8:53:a0:89:a1:bc:a1:cd:df:10:
                    4d:82:09:58:66:0d:ec:23:c6:09:dc:af:3c:d5:0f:
                    2f:15:92:c8:15:f4:67:ef:0d:3a:80:c4:6f:00:16:
                    2e:50:d5:41:22:d9:4c:6e:e5:27:10:32:d7:37:35:
                    e1:38:13:75:5f:37:03:54:ef:38:96:29:6b:56:2b:
                    b6:e9:60:18:a0:05:99:1b:77:a8:3b:13:56:f4:fa:
                    72:e0:85:f1:55:43:10:2b:ee:0f:42:0f:56:c9:90:
                    a7:5e:51:ee:98:60:84:32:e7:84:80:c3:7d:aa:6c:
                    10:30:c3:a4:3b:2a:1f:57:24:fb:cf:50:c6:6e:4b:
                    31:df:7a:1e:fd:83:28:0a:75:1d:9b:b2:23:26:30:
                    00:6b:f2:3a:d2:98:24:10:57:d6:0a:3b:94:6c:48:
                    46:cc:da:cd:40:c3:4a:bc:c0:6b:6f:0a:59:bd:5a:
                    ad:00:1a:c3:85:9a:f9:d8:23:1d:1a:13:e8:32:14:
                    49:f8:dd:44:14:6a:bd:7d:46:37:a0:71:1c:da:4e:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AD:DD:AF:92:D4:36:62:B6:EC:BD:54:AF:6B:2D:AC:85:8F:71:52
            X509v3 Authority Key Identifier:
                keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/1B25BF167FE111EBB6C0941AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.60.0/22
                  103.74.208.0/22
                  202.49.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:8e:28:67:38:7f:76:44:d2:1b:c7:9b:4c:33:a8:dc:ba:dd:
         84:fb:fb:5c:78:92:49:31:02:42:cc:2b:7f:7a:b5:3c:3a:56:
         c0:4a:e0:ad:22:f2:a6:f5:58:51:0c:b7:38:6a:fa:52:b4:79:
         44:8f:39:98:b1:86:70:3c:05:22:9f:e4:61:9b:38:2c:8f:bc:
         4a:8a:df:47:21:4f:77:00:82:48:87:57:a9:7c:54:92:76:30:
         ac:4b:4f:cf:84:f1:46:17:3c:50:22:59:74:b9:67:98:18:06:
         ad:d4:27:b8:36:4e:54:c0:fc:c3:a9:4d:cf:05:0e:0d:12:5d:
         9b:df:08:27:84:97:72:8d:44:04:45:44:4e:39:96:ac:42:03:
         38:57:c9:e7:7c:e9:02:26:e6:77:1a:80:e4:45:29:0e:3f:b2:
         68:67:99:e1:2f:57:41:bf:50:47:de:a0:ec:4f:70:2a:35:e9:
         5c:99:27:fe:6c:fe:dc:00:ac:5a:e2:08:6b:aa:5d:33:d7:5c:
         8c:df:49:ef:2c:40:a2:e1:ad:e0:bd:0b:2a:6f:8a:ba:27:ec:
         a7:1c:e1:fc:8f:80:d3:b4:82:4d:ec:3e:89:1c:64:00:64:3e:
         6b:ee:f3:e0:b8:82:58:67:5b:b6:23:ef:08:00:75:45:a9:72:
         c0:42:72:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:56:05 2026 by rpki-client