Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7BE0CE60064911ECA853EB0FC4F9AE02.roa
File:                     7BE0CE60064911ECA853EB0FC4F9AE02.roa (raw, json)
Hash identifier:          Mzth36HjLQSfsr+LrbxQLl2oQ4tyH4eM+UZwkF2EloA=
Subject key identifier:   ED:81:5F:99:AF:55:20:93:C6:98:38:02:3D:03:75:2D:7E:26:0C:9F
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       07F5
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7BE0CE60064911ECA853EB0FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:25:24 +0000
ROA not before:           Wed 27 Aug 2025 00:04:58 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     56277
IP address blocks:        110.164.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 22:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2037 (0x7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Aug 27 00:04:58 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4aec4-75a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:c4:4f:8c:a5:d0:5d:82:e5:ff:97:52:35:
                    10:5f:19:78:b3:40:ea:66:87:d1:8d:5e:f3:d1:ab:
                    30:70:50:55:39:c0:33:08:ae:7d:09:f0:52:7a:23:
                    fa:4c:d2:70:96:96:ba:2a:8a:96:6c:46:7c:8d:b0:
                    65:18:59:ba:b2:04:7f:ae:dc:48:af:60:58:a4:61:
                    ec:17:45:dd:a3:9e:ff:6b:30:7b:08:8f:89:5f:d5:
                    93:4d:81:4a:e7:34:ca:c3:d5:e8:94:d3:75:bf:c0:
                    8c:e0:2c:d1:0b:fb:5c:bf:e4:9f:3f:d0:ab:3e:26:
                    fe:b1:32:72:a8:1b:6f:53:dd:f1:77:1e:42:67:ad:
                    af:f2:82:56:7e:5d:1d:b2:89:39:90:84:a0:34:af:
                    0a:d3:ae:c7:e0:98:07:29:f6:cd:f6:8e:36:6c:4f:
                    84:5c:2f:b6:7f:c3:67:1e:df:4b:46:75:fb:d2:22:
                    0c:77:9b:b2:07:88:6b:1f:8d:8c:2e:74:91:37:97:
                    56:6f:ab:1c:5a:ce:98:c3:a5:14:59:3c:22:b4:a8:
                    af:2f:89:e1:78:4b:75:84:b3:e2:4f:f6:ab:1e:0b:
                    28:f4:d3:fa:5f:c4:08:f9:ce:99:bf:2f:8b:79:0b:
                    42:56:a0:3c:5f:ba:fa:0e:65:86:54:7c:02:a7:c2:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:81:5F:99:AF:55:20:93:C6:98:38:02:3D:03:75:2D:7E:26:0C:9F
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7BE0CE60064911ECA853EB0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:d3:d9:1e:0a:52:be:4b:13:b2:4e:53:27:cc:90:aa:12:
         5b:06:6d:ba:8b:2d:bd:63:54:d0:53:d7:56:31:59:de:a9:20:
         0e:a1:f5:03:82:78:f2:87:63:2b:dd:e1:36:f9:ad:ce:58:ba:
         1e:e4:dc:41:83:bb:b4:89:9b:38:ce:11:66:31:26:79:23:ba:
         8e:85:cd:9e:f1:cf:94:46:a5:aa:9a:63:b7:40:80:e5:b4:41:
         a1:af:b2:7b:c6:ee:d9:d7:68:62:73:ce:af:1e:62:1c:25:2f:
         f6:16:5f:75:7f:02:15:60:88:9d:8f:03:81:c7:66:25:92:5d:
         5f:35:0f:77:8d:1e:02:be:f8:df:0c:a2:5d:51:38:a8:1c:34:
         15:95:5a:13:34:00:e8:c7:c2:e8:55:6c:1a:aa:7d:bb:c9:46:
         06:33:56:83:ca:85:06:90:ba:d8:f3:0d:96:cb:15:bf:92:e3:
         24:29:f4:15:a9:4d:25:9c:d6:30:65:4b:02:25:27:74:ff:c4:
         8d:8e:36:7b:1d:1c:4c:0c:95:12:db:b5:97:90:7a:f9:3b:c5:
         83:46:b0:ad:47:2a:e8:7c:b0:02:07:b2:f9:96:1d:72:31:3d:
         0c:44:e3:42:81:6a:3c:60:a0:f2:5b:a8:11:f9:81:11:71:05:
         5e:77:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:05:59 2026 by rpki-client