Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/EAB11C569E7A11EF9C2A9E09C4F9AE02.roa
File:                     EAB11C569E7A11EF9C2A9E09C4F9AE02.roa (raw, json)
Hash identifier:          WjyM3KD8j7LYktjGDYnf9TzfHp76S+j3QqZZ2zALeh0=
Subject key identifier:   E9:34:E6:C0:CD:98:C8:52:62:86:2A:0C:10:B7:2F:73:AA:6C:AE:FA
Certificate issuer:       /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
Certificate serial:       2E34
Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/EAB11C569E7A11EF9C2A9E09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:27:37 +0000
ROA not before:           Thu 28 Aug 2025 16:02:37 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150389
IP address blocks:        118.179.10.0/24 maxlen: 24
                          118.179.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl
                          rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11828 (0x2e34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127523, serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
        Validity
            Not Before: Aug 28 16:02:37 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a45ae9-5fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:a2:76:6c:07:a6:cc:65:92:37:d7:ef:96:
                    b1:dd:32:da:66:75:60:28:56:b5:dc:3b:12:4d:00:
                    1b:78:f4:7a:d8:51:70:29:b7:81:f3:65:62:35:32:
                    da:71:ad:28:e7:26:dd:78:4f:22:eb:e0:e1:6c:7e:
                    76:00:59:76:5a:6a:b0:e2:37:28:08:0f:d2:25:62:
                    3f:ec:0c:9c:20:a7:3f:02:81:2a:3e:ec:9d:29:92:
                    fb:d5:da:2d:2b:80:73:b7:5a:55:52:12:cb:f4:a9:
                    0e:a9:f4:ed:83:5b:d7:a7:ea:76:52:bb:3e:ae:e8:
                    ea:86:de:40:e8:91:dd:6b:2f:1d:ca:4e:7c:b6:83:
                    c6:b2:61:b4:1e:50:ee:e0:10:20:93:0f:97:c1:0f:
                    e1:0c:dc:ad:ad:0e:96:3b:ac:eb:f4:8d:fc:59:bc:
                    22:a2:cb:77:83:e4:c3:a1:f1:d2:c7:aa:81:c8:17:
                    7c:0a:af:12:e6:e2:3f:d0:79:72:da:ee:af:ef:e1:
                    5a:15:41:ee:38:73:d3:66:7e:c4:b4:99:d4:c3:31:
                    3d:a8:59:da:1a:91:7c:9a:20:11:93:b3:0f:21:2b:
                    71:f7:5b:23:5a:26:da:5b:bd:cd:61:67:f0:70:dd:
                    dd:6c:7e:fd:c1:6a:fd:4d:f4:1a:59:bb:cc:e5:2a:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:34:E6:C0:CD:98:C8:52:62:86:2A:0C:10:B7:2F:73:AA:6C:AE:FA
            X509v3 Authority Key Identifier:
                keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/EAB11C569E7A11EF9C2A9E09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.179.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:1c:aa:8a:b2:06:dd:97:cb:ec:4c:52:de:8d:70:3e:27:e9:
         62:45:14:aa:2b:89:75:e7:ec:40:4c:52:7f:5b:7e:ee:9d:54:
         83:ed:6d:db:a4:1b:c0:6e:ae:55:62:fb:6d:69:a0:07:38:0c:
         4c:a4:58:ad:3b:29:6b:86:4b:30:50:39:d9:fb:58:69:f2:bf:
         d9:2f:f7:77:64:bd:2e:dc:69:f2:cc:72:ea:9b:13:fe:99:6a:
         e6:cc:f4:2f:cd:40:21:f8:68:83:7a:af:4a:3f:44:73:ef:6b:
         bc:3c:2d:6c:8e:1e:1e:32:c2:53:87:23:6c:30:f5:38:78:50:
         88:e6:fd:89:a4:49:5a:74:01:40:6d:1d:c5:f8:c3:3e:c4:99:
         fc:66:a2:c5:cc:0e:6e:76:51:b4:8b:9f:23:6e:87:6e:fc:f0:
         a8:b4:4b:df:92:b7:86:38:67:62:f7:2b:f9:dc:d0:1c:a5:87:
         c4:76:d9:f1:c8:a9:c0:6d:4a:0e:01:43:dc:28:cf:5b:0f:6e:
         08:44:04:6d:87:8e:4e:5b:ce:a3:1f:4a:b7:18:70:72:e0:d5:
         3a:fa:aa:23:d0:4d:3b:b3:d3:ba:e6:26:b1:4b:2f:57:06:64:
         d5:67:84:8a:1c:76:b6:34:61:1f:a4:31:e5:59:65:00:b2:fd:
         53:42:14:58
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1MjMxMTAvBgNVBAUTKDhBNjgxREQwQzQzNzMxRDBGNDc2M0E0REJERDVENEND
MDFGRDY0QzIwHhcNMjUwODI4MTYwMjM3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWFlOS01ZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoAWidmwHpsxlkjfX75ax3TLaZnVgKFa13DsSTQAbePR62FFwKbeB82ViNTLa
ca0o5ybdeE8i6+DhbH52AFl2Wmqw4jcoCA/SJWI/7AycIKc/AoEqPuydKZL71dot
K4Bzt1pVUhLL9KkOqfTtg1vXp+p2Urs+rujqht5A6JHday8dyk58toPGsmG0HlDu
4BAgkw+XwQ/hDNytrQ6WO6zr9I38Wbwiost3g+TDofHSx6qByBd8Cq8S5uI/0Hly
2u6v7+FaFUHuOHPTZn7EtJnUwzE9qFnaGpF8miARk7MPIStx91sjWibaW73NYWfw
cN3dbH79wWr9TfQaWbvM5SoW3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOk05sDN
mMhSYoYqDBC3L3OqbK76MB8GA1UdIwQYMBaAFIpoHdDENzHQ9HY6Tb3V1MwB/WTC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzUyMy8xMkI5OTdFODlB
RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01kRDBkanBOdmRYVXpBSDla
TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ltZ2QwTVEzTWREMGRqcE52ZFhVekFIOVpNSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1MjMvMTJCOTk3RTg5QUUzMTFFM0E1QTI1N0E3NTkxMUVBMzIvRUFCMTFDNTY5
RTdBMTFFRjlDMkE5RTA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBdrMKMA0GCSqGSIb3DQEBCwUAA4IBAQCcHKqKsgbdl8vsTFLejXA+
J+liRRSqK4l15+xATFJ/W37unVSD7W3bpBvAbq5VYvttaaAHOAxMpFitOylrhksw
UDnZ+1hp8r/ZL/d3ZL0u3GnyzHLqmxP+mWrmzPQvzUAh+GiDeq9KP0Rz72u8PC1s
jh4eMsJThyNsMPU4eFCI5v2JpEladAFAbR3F+MM+xJn8ZqLFzA5udlG0i58jbodu
/PCotEvfkreGOGdi9yv53NAcpYfEdtnxyKnAbUoOAUPcKM9bD24IRARth45OW86j
H0q3GHBy4NU6+qoj0E07s9O65iaxSy9XBmTVZ4SKHHa2NGEfpDHlWWUAsv1TQhRY
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:05 2026 by rpki-client