Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/11600CECBA8E11F09FE88B46C4F9AE02.roa
File:                     11600CECBA8E11F09FE88B46C4F9AE02.roa (raw, json)
Hash identifier:          NzPA3vTx/A3a5wnPCMTUeeGHZAhzPwo4b+b76jAubug=
Subject key identifier:   35:0A:F4:5C:D8:00:2E:8F:E3:67:C9:98:30:D2:36:46:E1:C3:96:2B
Certificate issuer:       /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Certificate serial:       1C65
Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/11600CECBA8E11F09FE88B46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:59:23 +0000
ROA not before:           Wed 05 Nov 2025 21:26:19 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9432
IP address blocks:        132.181.0.0/18 maxlen: 18
                          132.181.64.0/19 maxlen: 19
                          132.181.96.0/19 maxlen: 19
                          132.181.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
                          rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7269 (0x1c65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
        Validity
            Not Before: Nov  5 21:26:19 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4706b-cc4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:8e:b3:82:8e:d9:2f:87:04:c4:f0:51:55:
                    56:6a:ca:eb:1f:67:44:88:91:d7:e6:05:5a:25:d2:
                    09:7a:99:63:c5:8c:ed:b6:f4:b4:4a:e2:3c:a6:32:
                    ab:7f:01:ca:75:c1:a4:b8:84:f2:81:d1:1a:61:91:
                    31:0b:bb:97:88:32:07:a7:fc:26:db:40:1c:98:7a:
                    24:a2:07:3a:42:e2:23:84:16:e8:5c:41:15:fd:7f:
                    b2:9a:b0:b4:75:46:4a:a1:d3:7a:57:7e:69:ec:85:
                    80:27:43:e5:72:6a:01:4e:06:39:d1:88:c5:87:58:
                    2d:97:4b:09:be:4e:26:44:83:8a:c0:b8:97:8d:53:
                    0c:ec:a5:91:63:02:12:9c:85:b2:a1:ee:0e:06:88:
                    7e:04:7a:4a:a1:62:3b:84:32:8e:72:9a:24:47:ba:
                    c7:ac:bf:f1:df:74:bb:bd:d0:5f:1f:24:ca:0f:e4:
                    e8:6e:25:22:fd:59:71:33:62:c5:39:81:ad:42:49:
                    93:cf:a3:cf:96:86:9d:01:e1:f8:3c:05:50:5d:f5:
                    1c:50:c3:9b:a4:9f:bd:bc:c1:75:63:08:d5:5a:27:
                    c8:c5:8e:b0:2b:ae:fe:11:10:54:99:57:0d:0b:d8:
                    40:9d:77:e2:b4:85:db:c7:54:09:54:e6:cf:70:bc:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0A:F4:5C:D8:00:2E:8F:E3:67:C9:98:30:D2:36:46:E1:C3:96:2B
            X509v3 Authority Key Identifier:
                keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/11600CECBA8E11F09FE88B46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.181.0.0-132.181.159.255

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:1e:e8:35:db:f3:80:13:0b:ec:04:5e:98:a4:08:58:38:
         d8:ac:54:d1:b7:92:03:28:d3:e9:a8:64:3b:d5:a8:10:db:d8:
         b7:6d:02:e8:ef:95:7d:5a:52:7d:44:1c:9f:bb:51:3a:11:12:
         b3:c3:60:0d:24:f9:5a:52:98:a5:40:4c:57:f5:1a:65:c7:f8:
         70:43:4a:83:e1:ab:23:56:ce:77:ec:5e:33:ba:6a:8f:20:7e:
         09:05:c2:00:c1:f8:2a:e5:10:0c:df:6c:b1:6e:62:33:a7:da:
         dc:5f:e8:11:f2:f6:06:7d:03:be:10:d5:1f:61:2e:04:db:25:
         6f:1c:96:13:21:e8:96:4d:32:28:45:ff:6f:ba:4e:db:58:ec:
         e7:3d:99:ea:3b:92:ab:38:e6:e7:85:99:ca:39:90:5b:ef:b6:
         53:52:a2:a8:8e:bd:d3:92:cb:aa:bb:15:26:2e:b7:37:23:8a:
         37:7f:7e:67:7f:dd:62:e7:c2:b9:24:3d:76:ca:ac:8c:59:40:
         fe:15:58:e6:5c:0e:73:fd:7c:35:b3:78:69:02:35:29:39:77:
         17:f8:0f:db:73:4d:9a:69:7d:bb:cd:24:0f:6a:db:e4:f8:79:
         01:c8:a0:f9:ab:14:af:d3:ae:ad:c9:48:dc:a8:3a:80:e1:cf:
         06:f3:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:26:51 2026 by rpki-client