Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
File:                     55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (raw, json)
Hash identifier:          MAQWeSNZ6rDOAYoqH9Tkz7JhBaIbmeLjFkqGtWvdR18=
Subject key identifier:   16:E1:9D:7B:2F:21:04:75:88:BC:52:1A:97:39:2E:57:38:0C:96:01
Certificate issuer:       /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Certificate serial:       0191
Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
Signing time:             Tue 25 Aug 2026 04:54:59 +0000
ROA not before:           Tue 25 Aug 2026 04:54:59 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45744
IP address blocks:        110.232.184.0/24 maxlen: 24
                          110.232.185.0/24 maxlen: 24
                          110.232.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0
        Validity
            Not Before: Aug 25 04:54:59 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8d2023-d51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:30:83:7d:cb:70:40:8f:ca:39:cf:10:3f:
                    68:21:71:64:29:96:86:2d:d2:c2:11:84:ed:49:dd:
                    15:ef:2f:41:94:b5:38:fa:97:1d:7f:8b:92:a2:6f:
                    0b:3a:40:cf:89:e2:a9:92:b8:82:f7:be:ec:62:5f:
                    50:ab:8a:b4:94:92:40:03:35:a8:3e:e1:68:61:c0:
                    da:98:44:17:f6:33:f3:46:dd:7f:ed:76:b9:51:db:
                    7f:15:a4:08:88:35:be:07:b2:0a:a8:30:cb:60:ea:
                    9c:d0:3f:18:04:0c:bf:53:7e:5a:11:1e:81:51:19:
                    8f:ef:12:20:19:bb:14:46:df:b1:50:9b:18:c8:b3:
                    8d:01:7c:1c:43:78:23:1f:3c:9a:44:d7:01:7a:36:
                    af:65:31:5e:db:35:f9:6e:ae:3e:fa:7b:57:dc:9d:
                    d3:ae:3d:32:20:de:99:c9:ae:c0:32:35:46:6d:e7:
                    81:17:b4:de:4e:d7:bb:ef:1e:94:a9:92:18:cb:56:
                    ad:4b:31:2e:1b:6a:72:96:4a:41:8a:ed:36:7d:9e:
                    f4:c5:b5:bf:4e:0a:a6:fc:19:d0:b7:fa:63:54:fd:
                    35:b3:48:af:2e:79:42:b0:95:17:8d:8f:b4:e5:3e:
                    c3:d1:b8:2c:80:b4:e3:57:b6:6e:ad:93:47:a6:65:
                    a3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E1:9D:7B:2F:21:04:75:88:BC:52:1A:97:39:2E:57:38:0C:96:01
            X509v3 Authority Key Identifier:
                keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:26:d8:22:d8:0d:cb:58:7b:34:94:72:20:db:7e:49:59:
         e7:17:8f:d9:cb:62:11:c8:75:be:eb:1e:a3:5a:43:d2:65:34:
         26:1f:bf:f5:5c:b9:b0:17:45:28:c6:db:ae:ec:57:a5:49:3e:
         ba:9b:aa:26:b0:fb:db:f3:31:3d:54:78:0b:91:46:e5:9b:06:
         aa:79:eb:84:1c:7e:b0:f1:cd:b5:08:38:dc:4c:30:73:f2:f6:
         a8:36:d3:b3:54:ad:7b:60:a4:9c:0c:d2:7d:0c:7d:ae:6d:3b:
         8c:2d:c2:9e:31:df:67:b6:ff:c8:ab:c7:c2:c7:cc:71:41:e7:
         44:18:d0:bd:7a:3f:78:b5:85:5e:bd:d1:60:6e:da:38:03:1c:
         38:21:45:16:73:a5:8b:3c:84:cd:03:50:3c:13:88:92:83:cc:
         5b:86:d4:e7:d0:4f:96:17:95:d4:7d:48:1a:2c:25:90:9c:ad:
         4e:2e:ee:12:a3:c8:91:58:c1:72:e8:c0:6d:21:a4:9f:32:2e:
         d9:5b:3a:32:05:77:71:52:07:03:35:a4:55:93:22:d9:4e:98:
         be:43:43:91:44:7f:c4:2b:6b:3d:16:03:8a:7d:b6:3a:d4:f4:
         8d:15:79:7a:51:77:73:86:e9:e1:91:8a:bb:e8:53:9d:c7:0e:
         75:e8:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:04:04 2026 by rpki-client