Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/46DAB9387DF011F0A392A111C4F9AE02.roa
File:                     46DAB9387DF011F0A392A111C4F9AE02.roa (raw, json)
Hash identifier:          AQcKmsJt9IJs5jIdeC1sHVoe6SkebbETdV2pwOULpzc=
Subject key identifier:   7D:77:3A:31:6E:8E:AC:7B:2D:9B:4C:A3:0E:E4:80:C0:6F:9B:2D:97
Certificate issuer:       /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Certificate serial:       7B
Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/46DAB9387DF011F0A392A111C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:43:06 +0000
ROA not before:           Wed 20 Aug 2025 18:05:38 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137453
IP address blocks:        210.56.144.0/24 maxlen: 24
                          210.56.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
                          rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
        Validity
            Not Before: Aug 20 18:05:38 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a585da-414b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:71:3b:52:dc:fa:e3:e3:b7:d3:ed:02:9d:
                    c0:35:e8:2c:17:80:a3:71:38:99:b6:3f:40:06:15:
                    1e:74:ed:ec:29:98:18:8e:cc:5a:df:1b:15:ad:ef:
                    fa:e3:62:62:5a:3d:60:ec:f0:18:9c:6b:d8:4d:4a:
                    e8:81:22:7b:37:ae:44:c5:9c:76:b8:22:ab:a2:6c:
                    c5:8c:65:73:67:0a:98:a9:52:23:0a:9f:f2:fd:74:
                    02:5c:a6:ca:3b:8c:2e:75:fc:57:47:45:15:ac:9b:
                    c8:2e:3a:3f:5f:ac:7a:d7:37:b1:17:a2:60:e9:1e:
                    b7:ab:1d:60:f6:3c:14:84:a6:39:fb:ec:2f:73:1b:
                    a9:c1:80:41:8d:82:0a:26:8c:37:1d:dd:25:80:04:
                    45:e7:14:82:b9:8e:05:d5:0f:94:95:d6:48:7b:8b:
                    a4:54:52:51:ef:db:4e:1a:ed:44:7d:88:a6:7e:e9:
                    9f:25:bb:a0:54:20:8e:da:03:cd:41:f7:cd:91:ac:
                    bc:fe:4b:b6:3e:5f:57:d3:00:59:69:f0:43:7c:37:
                    1a:e0:6f:d8:19:19:93:4e:76:3a:61:ee:de:74:d9:
                    ab:f4:09:72:af:75:db:93:99:a8:55:26:04:cc:5f:
                    d0:e7:50:30:57:b8:eb:47:95:79:e2:4e:43:5e:6b:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:77:3A:31:6E:8E:AC:7B:2D:9B:4C:A3:0E:E4:80:C0:6F:9B:2D:97
            X509v3 Authority Key Identifier:
                keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/46DAB9387DF011F0A392A111C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.56.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:13:e6:96:f2:8c:8c:25:1b:f6:9f:d9:e1:00:8c:e2:08:f8:
         76:5f:a2:75:d2:33:52:0e:c1:72:06:12:3c:9a:3c:4a:5b:9b:
         49:f5:f8:c4:fc:68:4a:03:55:f0:f8:c8:90:63:07:72:95:f3:
         b3:35:9a:80:12:54:b4:60:4c:92:91:25:46:59:43:62:ff:80:
         53:00:ea:2b:d7:12:9f:e4:55:54:76:5b:2f:41:62:22:a0:a6:
         46:e8:4e:01:29:50:e5:fb:19:d8:3f:e6:55:9b:2f:03:15:49:
         14:8b:07:13:9c:b4:2c:5c:ff:b4:e7:d8:34:66:84:ad:5d:03:
         f5:d2:b5:9e:cf:6a:f7:f2:f1:3e:6b:41:e2:a5:e1:f6:e2:bb:
         ba:5f:cc:98:bf:a2:5d:f3:7b:f9:1a:85:fc:5d:bb:55:38:8a:
         6c:e1:38:f2:ad:d9:4c:cc:03:c6:ad:df:a2:8a:05:77:b9:eb:
         5c:64:66:15:f2:74:34:3d:4c:49:c6:ec:b2:11:18:ca:a5:28:
         0c:3d:77:43:aa:93:3c:d2:79:05:a1:9f:97:d1:43:cd:d3:0b:
         ec:b5:63:7b:85:46:9f:3f:c4:4e:cd:be:b8:96:57:42:cd:f2:
         17:3f:bb:aa:d2:33:e0:1b:ba:28:14:1d:83:f6:7c:fb:cf:21:
         3f:46:c9:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:45 2026 by rpki-client