Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0F0DB8A2C80411ECBA7BB174C4F9AE02.roa
File:                     0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (raw, json)
Hash identifier:          MvvBMJL+ARU0EoVAzOHVsomLSG69M9mjf1RtpPa9ecA=
Subject key identifier:   BA:23:58:56:51:20:ED:B9:2F:1F:59:09:80:41:BB:18:B6:F4:39:C1
Certificate issuer:       /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial:       0404
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0F0DB8A2C80411ECBA7BB174C4F9AE02.roa
Signing time:             Tue 05 May 2026 01:31:00 +0000
ROA not before:           Tue 05 May 2026 01:31:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134451
IP address blocks:        45.114.118.0/24 maxlen: 24
                          2402:2f80:5::/48 maxlen: 48
                          2402:2f80:6::/48 maxlen: 48
                          2402:2f80:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
        Validity
            Not Before: May  5 01:31:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f94854-dce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:18:15:66:22:2e:60:14:f8:e3:d5:9b:22:
                    e6:c9:34:49:38:e9:7f:3e:96:56:dc:34:b1:e4:f0:
                    e9:e8:ec:5e:4e:ee:3f:1c:84:5d:2d:5c:29:b8:77:
                    58:a5:8d:1f:87:51:3b:b7:80:b9:1d:f2:38:28:44:
                    39:9d:ea:cc:b5:1b:e5:2d:29:70:ee:cb:d1:74:4e:
                    04:7b:78:d6:4a:aa:c7:4e:66:41:3e:d0:9d:53:e4:
                    c3:f5:6c:3b:c1:bf:b8:45:1e:4d:1e:0e:35:34:ae:
                    9d:f3:4f:b3:b5:97:63:ee:58:46:3f:74:b4:21:c8:
                    7c:7a:a2:a9:6e:c3:ad:87:e6:53:bf:b8:b6:4c:02:
                    4f:ef:1b:4d:01:e6:f9:b8:07:91:f0:fd:8b:63:08:
                    10:0d:11:67:64:bd:2e:71:85:30:ad:5e:3f:03:b6:
                    e7:12:51:db:a2:4c:1b:f9:fd:c0:39:14:ab:66:95:
                    34:0d:23:e2:15:69:8f:c4:7d:76:ad:9f:ff:a2:83:
                    3c:44:43:45:a9:fe:64:6e:4b:a0:70:1e:fe:58:33:
                    2b:8f:54:a4:fd:e3:0e:02:8e:5a:5e:72:76:79:d6:
                    17:51:7d:d7:c4:67:b9:9e:b8:31:e9:f2:40:1f:76:
                    ee:9c:ee:07:4d:a2:37:4d:76:ab:05:04:ca:1c:0f:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:23:58:56:51:20:ED:B9:2F:1F:59:09:80:41:BB:18:B6:F4:39:C1
            X509v3 Authority Key Identifier:
                keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0F0DB8A2C80411ECBA7BB174C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.118.0/24
                IPv6:
                  2402:2f80:5::-2402:2f80:7:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:39:3c:cc:b2:cf:29:bb:94:d0:7d:00:bb:b0:ec:3e:84:
         36:2e:58:29:af:01:2b:6f:01:43:9f:1d:41:67:72:51:46:1e:
         b2:86:90:a3:77:a3:59:49:23:26:e5:92:84:1b:fb:7b:6e:8b:
         e7:17:27:c4:62:04:0d:ad:a6:9a:00:6a:70:47:40:49:98:a9:
         5d:37:c0:1a:8d:3b:6f:4e:bd:df:03:47:ca:3e:4b:1b:ac:47:
         bd:c3:3a:17:b5:2e:0a:a4:73:53:90:60:83:77:bd:9a:ba:29:
         2d:34:dd:8f:a1:b0:f9:4e:80:7c:2a:b6:dd:26:78:b4:c3:b3:
         35:f3:d9:e8:a5:4a:0e:ea:d9:2a:46:ca:d6:21:fb:4a:45:31:
         3b:4c:35:3d:e6:92:85:15:e1:df:2d:91:66:e8:cd:c7:ce:7b:
         6b:1e:42:de:cf:6c:31:31:bc:46:54:19:4b:36:eb:db:44:49:
         54:d1:2e:39:96:c1:75:bd:09:ff:1c:d5:4e:a9:fa:2c:d7:3f:
         ea:31:8a:09:64:59:c0:2a:34:f9:6c:49:44:07:2e:9a:a0:a6:
         a2:2f:d8:90:24:48:a8:fa:89:13:68:83:77:a4:90:65:6e:3a:
         a5:0f:76:67:5b:39:10:aa:23:6e:4f:eb:5c:ae:b1:ba:dc:1a:
         52:27:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:46 2026 by rpki-client