Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/9EF5320617C811ED95FB874FC4F9AE02.roa
File:                     9EF5320617C811ED95FB874FC4F9AE02.roa (raw, json)
Hash identifier:          7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=
Subject key identifier:   53:9F:C0:B5:71:55:24:31:54:0C:08:60:80:5D:98:7E:30:2B:3F:CB
Certificate issuer:       /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Certificate serial:       0777
Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/9EF5320617C811ED95FB874FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:34:56 +0000
ROA not before:           Sat 28 Feb 2026 22:19:06 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     10122
IP address blocks:        45.249.44.0/24 maxlen: 24
                          45.249.45.0/24 maxlen: 24
                          45.249.46.0/23 maxlen: 23
                          45.249.46.0/24 maxlen: 24
                          45.249.47.0/24 maxlen: 24
                          103.208.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986
        Validity
            Not Before: Feb 28 22:19:06 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a46ab0-357d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:38:4b:4b:2a:be:dc:64:42:83:74:db:fc:da:
                    e0:e1:e1:3c:09:27:00:10:61:dc:44:e5:08:54:b2:
                    83:98:f6:fb:ab:0e:e0:d6:bc:2f:da:27:e8:aa:22:
                    78:8c:d1:5f:41:fe:36:fe:b1:29:b7:19:89:3f:bf:
                    c0:cd:d8:03:ba:6d:1e:ca:06:d5:4c:64:34:b5:12:
                    04:d1:a4:d5:fc:6d:ec:0e:a5:77:f1:e4:66:e1:65:
                    74:f6:3d:ad:d0:d2:d1:2c:44:c1:10:31:88:54:93:
                    ab:d2:9e:0c:d5:58:cc:04:ed:56:e0:ab:9f:56:74:
                    06:45:6d:be:a3:9f:75:f6:1c:25:b8:85:85:6a:41:
                    9f:72:d4:f9:a6:fe:64:c9:b1:68:9b:e9:d9:3c:14:
                    84:94:eb:5a:00:79:fe:db:71:44:98:05:e3:17:de:
                    2a:87:2c:93:07:e0:49:6f:ca:cf:ac:f6:0d:3f:20:
                    ad:31:b9:4f:9e:37:a7:f4:0a:c6:d7:b9:01:03:60:
                    79:51:0b:aa:35:38:9a:64:29:11:1a:8d:a3:28:0c:
                    47:74:b8:5e:93:65:11:3f:08:8e:df:6a:01:be:c9:
                    6b:6f:6c:42:8d:c7:5f:7b:c7:f2:5c:22:79:48:16:
                    07:fd:9b:0f:5c:ab:f3:e3:ec:05:44:d1:ea:c2:66:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9F:C0:B5:71:55:24:31:54:0C:08:60:80:5D:98:7E:30:2B:3F:CB
            X509v3 Authority Key Identifier:
                keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/9EF5320617C811ED95FB874FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.44.0/22
                  103.208.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:7f:89:d6:ec:1a:78:c7:ab:35:15:6a:2e:32:c9:16:83:08:
         b3:b1:2f:13:5d:87:b8:3f:61:e1:7f:a6:b2:84:00:e4:25:77:
         c9:bf:28:82:38:71:a0:c2:ab:00:ff:dd:3d:f3:03:eb:87:11:
         35:df:03:c9:e3:a0:23:8c:91:ce:71:df:50:75:a6:e9:e0:ea:
         c9:5e:a1:be:ae:93:41:3b:21:b0:78:10:4e:91:64:4a:9b:e5:
         e6:ce:75:fd:97:63:2f:76:ca:a3:7e:54:11:b4:e7:33:f9:4a:
         57:de:94:13:8f:2f:82:6c:a8:0f:9a:97:0e:5e:f2:81:cf:c7:
         92:6b:77:df:86:07:3c:56:cf:f5:06:a4:d4:13:da:01:53:b6:
         a2:be:a0:58:0c:02:3b:83:50:05:ec:95:24:a3:04:4d:ab:10:
         f8:3c:b1:63:70:41:45:67:c3:36:4f:66:41:5f:35:ee:ac:4d:
         be:b7:d0:ac:64:ea:8a:95:11:37:b8:34:ee:ac:7f:a7:b4:fa:
         57:c3:44:e7:c8:c4:7a:31:69:6d:47:28:ad:31:ef:ff:07:ef:
         e1:47:7a:79:00:9e:4d:25:58:cc:d6:db:af:d7:21:29:98:09:
         1b:99:ff:d9:9f:06:3f:a6:81:51:55:c5:8b:a4:bd:ae:ee:68:
         21:5d:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:52:26 2026 by rpki-client