Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/3962A56E5E0611EF8CB1F080C4F9AE02.roa
File:                     3962A56E5E0611EF8CB1F080C4F9AE02.roa (raw, json)
Hash identifier:          YXnfiIe66c2o1Lsy0W6LJvegaVgKR9Jr1m4tuPkFmnY=
Subject key identifier:   70:34:B4:BE:E3:79:9A:3F:F8:02:6A:80:B0:EC:97:2C:CC:2B:A2:90
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       07E8
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/3962A56E5E0611EF8CB1F080C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:25:13 +0000
ROA not before:           Wed 27 Aug 2025 00:04:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135676
IP address blocks:        110.164.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 22:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024 (0x7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Aug 27 00:04:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4aeb9-dcfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:e8:61:d1:fb:de:aa:84:ef:59:e3:3f:4c:
                    13:88:95:de:b8:b3:6f:d5:28:a2:12:87:91:59:06:
                    12:85:b1:15:4c:ff:e6:67:d4:ca:2b:19:2e:14:ec:
                    5f:2f:23:21:a7:14:bb:29:0b:f0:6c:67:7e:4d:12:
                    0e:04:6c:a4:58:7b:d9:e6:57:66:01:fb:8d:ed:98:
                    18:1b:56:b7:d0:52:08:ae:b0:5f:e3:a8:c6:39:ad:
                    72:ca:96:87:d7:bf:65:18:da:79:df:5e:a8:1a:3d:
                    f2:9d:95:94:88:88:3c:3c:22:14:78:b8:9d:ae:2d:
                    b8:24:a0:fc:66:f0:f3:a1:4c:6d:b8:0d:19:bc:61:
                    61:7d:d3:7b:6c:a5:7f:13:66:90:a8:f1:2d:77:13:
                    5a:55:89:b6:c2:21:22:a0:09:ae:99:c1:ba:a7:00:
                    5f:81:1c:5a:25:6a:69:fa:8a:2b:37:3d:8e:74:d5:
                    12:f0:5d:c7:21:46:46:af:f7:1a:ab:a0:43:f3:39:
                    3e:5d:7c:46:a8:37:ea:bc:e3:31:85:aa:4d:94:88:
                    c0:00:cf:3e:af:23:6c:ca:2c:ca:c1:fa:5b:6a:94:
                    ea:f8:a9:1c:b2:15:7a:dd:6e:6e:73:a4:67:3d:22:
                    f3:31:e6:77:84:61:c1:3c:9f:f8:37:9f:83:24:38:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:34:B4:BE:E3:79:9A:3F:F8:02:6A:80:B0:EC:97:2C:CC:2B:A2:90
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/3962A56E5E0611EF8CB1F080C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:d3:0c:6d:cf:28:1c:2c:63:ae:10:28:d5:f3:d5:0a:e3:
         56:8c:2c:1f:ca:0b:be:fa:08:dc:fb:74:9c:92:09:0e:32:a4:
         14:62:84:f3:a8:93:91:a4:2f:90:8f:aa:ba:39:c5:60:54:a7:
         25:f6:0d:82:fe:03:72:21:86:b4:da:bd:2d:09:6c:03:4c:b9:
         e4:f6:18:74:04:50:b7:57:ff:b6:70:f0:ba:b5:3b:05:e4:65:
         01:a1:7d:a4:3b:61:c9:03:01:83:a5:63:33:55:4b:bc:66:f3:
         8a:68:14:e5:26:14:ac:95:5f:13:83:46:09:48:75:76:ee:1d:
         a5:92:b2:9e:6f:7a:f1:67:48:12:23:7b:eb:08:a4:b7:22:91:
         a7:2b:1b:72:65:27:04:80:55:d1:19:25:0c:88:bb:2f:75:b5:
         27:88:d0:90:8a:89:74:2d:36:02:e8:8a:90:d9:cd:91:dc:56:
         fe:fc:e8:a9:8b:d6:05:d4:02:bd:84:c1:37:44:a0:a3:e3:fd:
         33:45:23:ee:b4:a3:cf:45:3a:68:cb:36:28:c6:c4:bf:1c:7c:
         97:db:e6:4d:a8:a9:7c:37:27:5c:5e:40:44:87:0c:d5:f2:bb:
         b2:35:36:34:a7:6a:73:8e:6f:47:fd:dd:78:b4:c3:fa:32:10:
         18:f4:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:03:20 2026 by rpki-client