Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/245F176CA81311F0A8A82B85C4F9AE02.roa
File:                     245F176CA81311F0A8A82B85C4F9AE02.roa (raw, json)
Hash identifier:          eX1W6sEO6qSGiwMhq2AqfocdX9JRjmM9eN6Q3NFHq5U=
Subject key identifier:   AF:7F:BD:CA:9F:B9:39:CA:7B:DB:4D:23:42:CD:1A:FB:63:87:98:0E
Certificate issuer:       /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1
Certificate serial:       0113
Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/245F176CA81311F0A8A82B85C4F9AE02.roa
Signing time:             Sat 04 Apr 2026 19:25:01 +0000
ROA not before:           Sat 04 Apr 2026 19:25:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18186
IP address blocks:        45.158.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1
        Validity
            Not Before: Apr  4 19:25:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d1658d-2be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:70:ba:ff:ed:92:ae:7f:e4:6d:73:13:30:
                    5b:5e:2b:17:9e:01:02:62:0a:14:d1:ff:2d:32:51:
                    e5:f3:72:ca:f7:a1:61:0f:4d:f6:9e:1f:8e:8a:4f:
                    5d:1a:d8:79:cd:42:7a:4f:63:9d:5b:eb:02:d8:3b:
                    db:27:d6:9c:88:d1:ca:1a:80:24:85:4b:55:72:0e:
                    44:54:98:3d:aa:15:36:fa:46:f9:36:03:1f:51:3f:
                    fa:8d:df:56:f3:5b:38:05:01:28:fd:e3:bd:d0:c2:
                    6f:46:6b:61:3b:7d:e4:2b:bb:cc:75:0e:e7:25:c5:
                    b6:e3:81:20:ee:6f:0f:11:07:8b:f3:cb:ec:1e:ca:
                    08:c1:b6:d6:f0:e4:e1:7f:b0:55:af:ad:04:b1:4d:
                    dd:06:3b:b0:da:26:fb:2d:ac:3d:37:4d:59:c6:e2:
                    91:b8:e0:0c:c0:36:58:5e:6d:2d:62:9f:d0:1f:8e:
                    fe:b7:f5:89:90:17:70:4b:9e:0e:39:e7:2e:52:97:
                    15:3e:d1:e8:fd:f2:da:33:00:78:4c:80:03:2a:0e:
                    ff:7c:b1:5f:b3:42:53:30:63:60:14:2c:ca:08:6d:
                    98:af:c0:16:15:ad:60:75:2e:22:f9:8a:a4:24:d3:
                    46:57:9d:15:85:2d:43:8d:82:57:42:62:e5:8c:d7:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7F:BD:CA:9F:B9:39:CA:7B:DB:4D:23:42:CD:1A:FB:63:87:98:0E
            X509v3 Authority Key Identifier:
                keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/245F176CA81311F0A8A82B85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:1c:30:67:e5:70:9c:d8:68:c6:dc:43:c6:23:3b:88:08:ba:
         79:0b:87:0a:a7:ca:cb:3a:de:6e:a7:2a:36:b6:c9:f9:b8:d4:
         02:fa:1d:d5:c1:fe:5c:25:40:31:e4:ff:06:75:7f:a7:a2:f6:
         4e:f5:ad:3c:71:73:1f:53:e6:2e:8d:e7:55:64:70:7e:29:6a:
         84:61:a2:48:63:a3:13:a4:17:db:30:1c:f2:1e:32:5a:26:3c:
         48:b4:86:ef:95:b4:d2:82:49:f4:95:2b:2a:37:b6:21:72:3e:
         ab:d3:4f:a5:fe:a1:24:4a:2c:fa:df:18:d1:c0:1b:3c:8e:64:
         3c:66:da:0a:52:5f:4f:29:46:dd:be:97:96:cc:f4:57:de:b0:
         0c:f8:7b:7a:af:97:21:58:35:36:b6:bb:f5:33:a3:12:6d:13:
         09:16:ff:77:4e:4f:ab:06:6e:a1:47:d3:0c:37:f3:24:b1:70:
         11:64:c5:57:cc:2f:42:eb:1b:f0:99:61:7b:fb:38:be:0e:7d:
         6d:30:ef:ea:8d:32:44:08:cc:f1:3e:8a:77:99:32:89:98:4e:
         72:de:08:76:6d:64:2c:a0:7f:c8:a1:15:3b:bd:ec:bf:8a:39:
         e2:a1:a5:77:7a:5c:d4:f6:e0:4c:5d:68:1f:57:53:71:9e:94:
         31:af:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:56:33 2026 by rpki-client