Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa
File:                     6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (raw, json)
Hash identifier:          RwcLbhPNncbctra9BJj47907e1FtaKD2ImyIJgGExWo=
Subject key identifier:   B5:A8:FB:ED:30:F7:7D:76:20:4C:34:4A:A9:C9:2E:24:3D:7B:28:3C
Certificate issuer:       /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Certificate serial:       0214
Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:14:40 +0000
ROA not before:           Sat 07 Jun 2025 03:43:28 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134134
IP address blocks:        45.65.58.0/24 maxlen: 24
                          45.65.59.0/24 maxlen: 24
                          45.126.253.0/24 maxlen: 24
                          103.53.24.0/24 maxlen: 24
                          103.53.25.0/24 maxlen: 24
                          103.53.26.0/24 maxlen: 24
                          103.53.27.0/24 maxlen: 24
                          103.212.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
                          rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
        Validity
            Not Before: Jun  7 03:43:28 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4118f-e45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:6c:60:cc:3e:e3:8e:73:03:ae:58:92:9a:
                    b4:e6:32:3a:5d:a5:bd:ae:e7:ed:15:77:eb:1d:ce:
                    3b:2c:e1:9f:93:48:15:49:ac:86:45:2e:a3:a9:dc:
                    61:60:54:62:28:2b:a3:7d:c9:92:a5:a5:54:4b:11:
                    12:a7:73:31:df:6f:45:57:79:9e:1b:d3:b3:78:e2:
                    1d:e9:5e:c6:98:c1:36:97:09:82:68:10:81:4b:54:
                    0e:d2:4e:38:1e:96:c1:05:e1:39:3f:bd:cb:b1:94:
                    96:9d:49:7b:32:fe:53:ea:f4:3f:23:2d:13:93:2b:
                    8a:b2:b1:e5:7c:5f:68:62:fd:b3:d8:03:10:bd:1a:
                    6b:8b:2b:fa:0b:9c:d0:e6:47:57:9d:7b:1a:10:5c:
                    84:2e:61:c5:82:e4:d1:34:b2:2b:ff:0b:53:7a:3e:
                    e1:ef:54:b2:98:db:66:f5:b1:b9:b0:28:70:8a:1d:
                    00:28:fc:3b:3d:06:e8:9f:5f:fe:4b:e6:9e:3b:9f:
                    e9:3f:3f:12:00:04:b2:71:51:b4:aa:3f:74:45:f8:
                    6f:b6:2a:8b:49:91:45:ed:fe:c9:18:d0:61:17:e5:
                    ce:9c:60:16:d2:89:df:a1:ca:e7:10:1b:cc:ea:70:
                    14:b4:17:e0:71:11:8d:bb:d9:50:db:9e:96:19:4d:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A8:FB:ED:30:F7:7D:76:20:4C:34:4A:A9:C9:2E:24:3D:7B:28:3C
            X509v3 Authority Key Identifier:
                keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.58.0/23
                  45.126.253.0/24
                  103.53.24.0/22
                  103.212.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e7:f9:12:32:d9:71:3a:83:a1:bd:2a:d7:c3:b5:d1:e3:fd:
         21:b0:f7:bc:74:f1:e5:7a:b7:0c:ee:61:4a:14:a9:41:b1:df:
         4d:e8:73:77:61:20:2b:47:3e:ad:d4:72:c4:77:8a:29:5b:be:
         fd:f9:4c:59:3e:da:76:de:70:09:64:ee:98:1e:f4:d3:0b:92:
         c2:ca:1b:03:13:22:e5:ba:9a:6e:5e:13:db:e0:82:a9:ef:c9:
         44:84:b2:a5:6d:6f:7c:d4:69:cc:3a:4d:4f:15:56:bd:13:b0:
         9f:83:af:c9:14:a7:16:5e:8b:ce:f6:04:28:33:1e:2a:b4:f6:
         9b:3f:2e:ec:1f:2d:fb:9c:9f:19:2a:67:3e:e4:f8:d9:c9:26:
         a9:bf:ca:77:8e:0d:2f:1f:7b:77:85:ed:a0:8a:05:34:72:ff:
         f9:40:ed:58:6b:86:45:5b:71:96:3e:ac:8a:5b:7c:d3:89:b0:
         54:7a:cf:d1:b2:b4:6a:73:aa:09:0a:dc:dc:b1:07:e0:a1:7d:
         a1:f1:e0:11:04:ba:d6:46:0a:85:d7:bb:cf:5a:39:91:fb:8f:
         c5:81:a1:4a:f0:e0:13:35:3c:b1:4b:ab:5a:0c:d3:c9:68:8d:
         32:9d:1d:73:b3:3b:4e:d3:2a:1b:90:a1:ce:40:29:ec:c1:de:
         71:ff:9c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:39 2026 by rpki-client