Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa
File:                     BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (raw, json)
Hash identifier:          aYugIyHCZJwAmq9KTfLv5V2NclVJEThsuFyltYOyWPM=
Subject key identifier:   1C:81:01:57:B1:0A:1C:3D:43:77:73:72:81:F2:62:EF:4F:6D:E4:A2
Certificate issuer:       /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Certificate serial:       0176
Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:11:31 +0000
ROA not before:           Sat 03 May 2025 05:12:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152668
IP address blocks:        117.55.254.0/24 maxlen: 24
                          117.55.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
                          rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9
        Validity
            Not Before: May  3 05:12:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58c83-a3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:c5:29:4a:a3:80:0a:59:a0:ac:58:27:b7:
                    57:7f:17:e7:76:1c:9e:dd:07:5f:e7:71:e2:18:11:
                    f8:25:27:14:5e:32:53:36:7a:db:d8:4f:65:d6:bd:
                    1c:67:92:40:30:75:ef:1a:e0:8a:46:d5:05:cd:79:
                    df:92:da:7a:8c:6d:af:a2:45:cc:e8:4a:8f:80:53:
                    80:21:2c:43:59:ae:42:d3:b7:63:79:6d:2f:9f:41:
                    46:85:e6:fc:ee:1a:92:02:a3:e4:45:a7:de:36:79:
                    ea:3a:b8:39:6f:8b:8c:8b:b2:79:72:fd:e7:51:8e:
                    3a:61:71:e0:48:87:5e:46:38:e8:29:88:72:c3:4a:
                    8e:8c:97:46:32:f4:9b:8b:fc:92:57:93:d1:28:ca:
                    fa:49:36:32:bd:a0:37:45:80:c3:35:9e:d4:a4:81:
                    4f:5c:52:bf:62:d0:e4:61:b4:13:55:5e:59:10:d1:
                    f0:a7:e2:6f:d6:55:c2:b5:67:77:61:cf:02:21:b2:
                    8c:5b:fe:a7:de:be:b2:90:e4:70:18:37:99:1a:c9:
                    2f:7c:df:1e:3b:ff:94:3d:62:8b:4a:8a:ca:c4:6f:
                    2b:a3:9c:1c:39:4e:c3:4c:7b:64:83:fc:9c:2b:45:
                    9e:f9:9a:30:43:d3:6a:3b:c8:0d:96:af:7b:f7:d4:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:81:01:57:B1:0A:1C:3D:43:77:73:72:81:F2:62:EF:4F:6D:E4:A2
            X509v3 Authority Key Identifier:
                keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.55.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:85:ec:84:a3:35:fe:a3:8a:12:24:db:3a:68:db:77:53:f9:
         e1:5f:54:ac:c5:17:21:d0:4b:c2:26:e0:08:c9:85:cf:74:11:
         06:29:52:b2:2e:9f:e6:90:1c:78:0f:0a:1f:70:5e:d9:f3:fd:
         76:17:33:38:3a:fa:36:6e:33:28:41:b1:9b:56:79:75:5e:9c:
         c6:08:bf:78:7e:c9:ec:f3:7b:0e:d1:96:b0:0b:42:90:82:00:
         83:d3:f0:e9:20:ea:07:67:d7:a4:f5:55:6f:cd:36:b6:67:f4:
         b1:c0:b4:43:b6:31:1c:85:b6:f4:12:92:f2:dd:8d:2f:08:37:
         1a:af:1a:42:b9:71:b1:1f:09:ae:01:92:93:b2:0b:d6:66:c2:
         c1:1b:62:c6:2a:f9:42:80:c6:f4:2b:7c:0d:ef:35:bb:c1:58:
         f3:c1:20:6c:07:44:7e:d8:4b:73:b4:c8:1c:9a:65:05:f1:d4:
         07:40:33:c3:73:55:1a:83:76:94:d5:9e:c6:da:ad:82:cb:dd:
         ac:95:76:54:83:4a:c8:a5:02:2c:d9:9f:c2:8b:b5:14:2d:ca:
         2f:dd:87:f9:90:64:85:58:b4:66:f0:da:de:1c:da:aa:ee:9d:
         60:4b:15:a0:3b:4f:9e:7d:d3:7f:b4:60:50:aa:6f:ae:ea:01:
         28:72:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:21 2026 by rpki-client