Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
File:                     55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (raw, json)
Hash identifier:          HYF/fg1voE6IFgfpnqUye0EtCWfbuCFF1mA1Z69GiMA=
Subject key identifier:   B0:61:B2:B9:8C:01:21:8A:CF:C3:CE:45:4A:2A:6C:0A:37:3C:8C:94
Certificate issuer:       /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Certificate serial:       CD
Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
Signing time:             Mon 25 Aug 2025 06:13:39 +0000
ROA not before:           Mon 25 Aug 2025 06:13:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45744
IP address blocks:        110.232.184.0/24 maxlen: 24
                          110.232.185.0/24 maxlen: 24
                          110.232.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0
        Validity
            Not Before: Aug 25 06:13:39 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68abff13-d0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:0d:cd:d0:a9:ea:63:c7:c1:8e:b2:c7:2d:
                    5c:ac:ff:3d:1c:4f:58:de:aa:78:38:31:72:2d:39:
                    d0:23:c5:72:77:b8:a6:b6:2a:d7:bd:e3:52:bf:b2:
                    17:44:8a:b0:71:c9:0e:ff:39:38:06:68:ba:7f:3c:
                    f1:ac:59:ad:c8:d5:94:b1:33:2b:d0:9b:95:cb:d4:
                    3d:6c:8c:cf:da:a6:8f:0f:a3:26:e3:36:89:bb:78:
                    5d:94:a4:17:3b:24:87:05:2b:21:dc:84:4a:b1:68:
                    89:f6:7b:a2:d7:2a:ab:07:44:8c:e0:c2:88:46:86:
                    bb:a3:0a:ae:c6:ee:ad:c5:80:12:00:c3:d4:25:14:
                    9e:d2:d6:4b:2a:81:67:1c:55:6c:7a:bb:ee:eb:81:
                    5d:03:64:92:81:2e:fb:3a:f2:f5:5a:60:27:14:b0:
                    1e:e1:c7:ec:93:74:24:16:ed:1e:05:e0:e7:00:4a:
                    a4:b8:ac:10:4a:87:45:8c:aa:e2:6b:3d:2a:4a:5b:
                    02:37:26:09:50:0e:56:30:0c:ce:5b:58:51:2f:b4:
                    cb:96:07:d8:c8:24:e8:ae:51:2e:e5:7c:b7:d4:7d:
                    7f:75:99:50:76:dd:53:da:b0:8b:cc:d4:d7:01:1e:
                    dd:d0:1a:42:9f:c5:fb:76:c4:7a:ba:cd:31:7a:04:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:61:B2:B9:8C:01:21:8A:CF:C3:CE:45:4A:2A:6C:0A:37:3C:8C:94
            X509v3 Authority Key Identifier:
                keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:a4:c8:2b:87:31:34:b4:24:df:d1:8b:a4:96:07:03:63:4e:
         07:45:1b:5c:e5:a4:ce:e0:04:b6:6b:2b:95:03:6d:60:48:9d:
         85:22:b7:1f:da:04:e2:87:57:bb:74:1d:8b:90:e5:48:64:fd:
         9f:b1:d0:e1:8d:b9:a0:09:2a:22:06:cb:71:f1:37:db:c0:7e:
         18:d0:ef:15:cc:3d:f5:e4:ea:2d:be:9d:90:9e:0d:74:9d:89:
         ec:b4:47:e5:31:5d:a1:cb:b5:c2:c1:5f:46:56:76:f7:10:ae:
         de:3e:6e:3f:4b:55:ac:49:a5:91:67:cc:a2:ca:8e:d8:c8:57:
         29:6f:42:6d:13:d9:a2:45:55:d9:b4:53:0e:16:85:f1:37:1c:
         98:a7:1e:11:40:77:d6:d0:92:7f:2c:9e:22:88:b3:39:80:16:
         a5:d6:9c:82:c8:f1:72:6f:8f:de:2d:3f:1e:c1:58:a9:60:e3:
         61:2a:57:f9:68:b9:4c:f8:8f:d8:81:d3:c2:1a:1c:c4:d6:0c:
         5f:64:80:e0:69:3d:10:39:3d:0c:6b:06:76:0c:9e:32:6a:2e:
         a7:04:08:2d:22:84:23:f9:c3:2a:e1:eb:08:36:59:5f:a6:0e:
         32:9d:63:a1:1a:88:2f:37:1c:be:9b:95:e3:43:51:36:32:b5:
         22:bd:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:36:21 2025 by rpki-client