Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/9E8B4A3AB3B111EF8237BD72C4F9AE02.roa
File:                     9E8B4A3AB3B111EF8237BD72C4F9AE02.roa (raw, json)
Hash identifier:          y0RyNz1LAeBV8ABcG9e0YM69z98WEzjyD1K8Nzgdc8M=
Subject key identifier:   C0:D6:34:76:43:42:EF:EE:42:51:26:DD:FF:3C:2B:F0:8B:E1:45:58
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0652
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/9E8B4A3AB3B111EF8237BD72C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 00:04:57 +0000
ROA not before:           Wed 27 Aug 2025 00:04:57 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55808
IP address blocks:        110.164.135.0/24 maxlen: 24
                          110.164.146.0/24 maxlen: 24
                          110.164.203.0/24 maxlen: 24
                          110.164.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Aug 27 00:04:57 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ae4ba9-0122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:bc:4e:6e:60:4a:f3:b1:cb:06:4c:b3:13:
                    04:d9:10:19:08:a4:13:09:c7:eb:f6:84:3d:95:cb:
                    3c:89:25:a7:6e:30:65:c7:b1:7d:fd:e9:23:fd:18:
                    84:67:9e:49:85:ba:f4:3c:da:e0:49:26:25:f3:6c:
                    4c:d3:bd:2f:e2:82:f3:c3:54:bf:c3:ae:12:59:55:
                    90:0a:30:2b:da:9d:a9:5d:03:4c:1b:9b:67:3c:89:
                    ee:3d:90:66:62:4c:a9:c9:90:f2:f7:a1:ba:6b:34:
                    fc:e3:d9:8e:e1:95:07:c7:cc:f8:a6:ea:1f:4e:df:
                    11:04:ff:4b:aa:7e:8f:0d:95:b5:59:dc:fe:04:db:
                    75:f0:e6:5d:ad:2e:da:11:83:a7:47:34:20:09:fd:
                    80:c3:25:90:33:c9:90:af:a2:49:fa:9b:44:98:a9:
                    57:e0:94:dc:ac:2a:14:ee:ab:4f:06:52:bb:ae:ff:
                    f1:85:53:d9:1b:51:ef:95:cb:42:4e:09:a8:7c:6c:
                    72:54:71:b7:f6:80:f5:ab:a8:23:6a:3a:f6:88:cd:
                    f9:5c:b8:4c:49:05:eb:3f:60:e1:61:b8:88:e9:bb:
                    fc:5d:69:40:27:34:3c:64:96:c6:88:ab:f0:37:e3:
                    c7:e7:66:cf:67:80:12:4c:21:8a:e8:03:74:3d:fe:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D6:34:76:43:42:EF:EE:42:51:26:DD:FF:3C:2B:F0:8B:E1:45:58
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/9E8B4A3AB3B111EF8237BD72C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.135.0/24
                  110.164.146.0/24
                  110.164.203.0/24
                  110.164.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b2:a6:e6:11:7c:9b:18:27:f1:b3:4d:63:a1:00:0c:bf:28:
         3d:e7:d5:c1:c9:31:1c:d3:10:0e:f7:ad:d1:9b:ea:f9:85:16:
         ff:39:85:a6:2c:4f:d4:66:76:8f:3b:14:a1:3f:aa:89:06:15:
         b9:c5:db:44:b6:57:2b:50:0b:3b:c1:d9:6d:31:3e:56:a1:c6:
         b3:40:f4:5a:14:85:76:05:a5:fe:93:00:b4:06:17:69:2e:bd:
         df:b7:20:bf:36:c0:c5:da:57:3a:c9:54:43:b6:bc:ab:cb:7a:
         88:07:0c:16:07:0c:d8:da:db:65:5b:d5:54:3d:73:a8:65:73:
         54:6f:52:11:2f:ac:42:5e:c9:41:a5:5f:90:9d:5f:c1:f2:41:
         a9:0a:84:96:32:3e:0f:fa:b2:9e:91:c0:a9:18:58:76:f2:9b:
         4f:da:ac:0d:43:b2:e9:c4:ec:0b:fd:51:1a:da:1e:44:68:ee:
         2e:99:4d:87:20:74:9e:2d:e2:be:c0:47:2b:7f:89:d7:9f:94:
         73:43:c9:ec:79:76:1b:95:be:7d:d1:02:c0:3e:10:10:f8:8e:
         97:55:e1:b3:09:b6:7d:1c:ac:f7:f9:44:28:b0:fd:f1:d3:3a:
         28:09:78:5d:96:4b:3a:2c:55:bb:b9:57:94:e1:0c:7c:3d:4a:
         45:e7:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:31 2025 by rpki-client