Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/99C5A4CC201211EC8520994EC4F9AE02.roa
File:                     99C5A4CC201211EC8520994EC4F9AE02.roa (raw, json)
Hash identifier:          g6+3/Nd+09wWzT/IggHOuUm4l/0nuIaNBPY5ivuS1rE=
Subject key identifier:   E1:F1:C8:2B:92:F7:35:F9:25:15:4E:17:EA:54:3E:56:59:CE:9D:49
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       07ED
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/99C5A4CC201211EC8520994EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:25:17 +0000
ROA not before:           Wed 27 Aug 2025 00:04:50 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     37992
IP address blocks:        110.164.61.0/24 maxlen: 24
                          110.164.62.0/24 maxlen: 24
                          110.164.83.0/24 maxlen: 24
                          110.164.84.0/24 maxlen: 24
                          110.164.178.0/24 maxlen: 24
                          110.164.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 22:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2029 (0x7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Aug 27 00:04:50 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4aebd-239b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:10:dc:af:dc:91:2b:b2:7b:42:8f:b8:66:
                    90:68:ab:32:cc:e9:ae:cd:bc:ef:1f:f1:82:9c:ab:
                    52:90:b8:d3:20:ab:bf:4a:72:32:60:b2:d5:d5:94:
                    c8:24:4b:4e:f0:43:fe:48:e7:36:97:ce:3b:c0:89:
                    a2:94:9b:41:5c:bd:c6:67:b2:49:55:c8:07:08:2a:
                    33:4a:b5:16:1a:9b:74:a7:3b:f4:cb:55:36:82:09:
                    ea:96:00:5e:8c:91:c4:3a:bb:2e:95:38:b1:b2:b8:
                    40:02:d2:00:49:65:ad:6e:75:88:d9:2f:d0:29:d9:
                    fe:5a:d9:5e:86:5f:a1:cd:e0:a2:16:a7:5b:14:ff:
                    b8:be:0c:9e:7f:93:b4:6f:0e:56:33:63:06:fe:a8:
                    54:19:06:92:02:db:e3:0e:99:41:a5:a7:c2:d7:d7:
                    a6:24:bd:f8:d7:27:e6:25:c2:27:91:c8:82:94:4a:
                    f8:0e:07:1f:6c:48:d8:79:18:31:b3:cd:ad:13:bc:
                    8c:89:fd:2c:11:a7:43:17:45:c5:65:80:09:e8:21:
                    45:0d:d9:ab:5e:a7:2a:30:84:74:d3:ff:df:4a:4f:
                    8c:7d:cf:16:67:6f:0d:81:71:e7:5e:fc:14:e7:a7:
                    99:1e:ba:77:54:d3:a7:7d:d7:96:2c:19:64:37:b7:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F1:C8:2B:92:F7:35:F9:25:15:4E:17:EA:54:3E:56:59:CE:9D:49
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/99C5A4CC201211EC8520994EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.61.0-110.164.62.255
                  110.164.83.0-110.164.84.255
                  110.164.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:08:e3:a7:05:9a:e2:cc:e1:3e:eb:5a:40:58:11:b5:f2:8e:
         ab:a4:00:e5:d5:24:7b:c5:cf:9e:df:3a:0f:4a:59:ae:a4:57:
         18:31:5a:ef:e8:39:98:f0:86:eb:d6:0b:2f:96:cf:a7:0c:16:
         00:92:d2:54:ad:e7:27:d0:bf:1d:ed:3e:a2:54:fa:fa:7e:1f:
         e3:dc:66:cc:a4:b5:2d:c7:81:7c:50:51:dc:9f:a1:d5:4a:32:
         a6:ec:e8:2c:83:a5:31:3c:75:ee:18:9a:b9:ac:b1:5e:50:ea:
         0e:81:cb:0e:e8:65:d5:7a:20:fb:bd:27:79:c8:1d:e1:e7:78:
         d3:21:34:4d:04:60:07:04:bc:6e:cc:ee:59:d7:2e:ee:9c:8a:
         45:9b:a3:89:cf:31:71:4a:ad:27:99:94:b0:4a:af:5a:b5:33:
         5b:4d:5e:e3:c4:29:4f:cb:1b:8b:af:65:bd:e0:f9:8c:75:a4:
         8d:e8:56:c1:f7:c1:90:ab:bf:86:2d:79:86:28:6b:f6:da:64:
         47:c5:1b:dd:38:da:fd:7a:57:7a:5e:12:2d:2e:2b:1d:5e:17:
         29:99:ba:82:dd:86:fe:17:ee:ba:2c:2a:63:db:41:19:d7:30:
         bd:69:ab:4e:9a:0a:3a:03:87:b2:1d:82:86:56:74:9d:69:e5:
         e6:89:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:04:07 2026 by rpki-client