Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/B4FD92C42C5211EEAD14C272C4F9AE02.roa
File:                     B4FD92C42C5211EEAD14C272C4F9AE02.roa (raw, json)
Hash identifier:          FDw45yR+UbBpAGinSl1fAl1lgBy1+jOVmwDkOeQk0cg=
Subject key identifier:   A4:07:44:EC:2C:26:38:FC:AE:1B:13:D4:26:87:82:CA:63:28:E2:B2
Certificate issuer:       /CN=A914417A/serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
Certificate serial:       351D
Authority key identifier: 55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/B4FD92C42C5211EEAD14C272C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:12:11 +0000
ROA not before:           Wed 06 Aug 2025 15:21:01 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     131235
IP address blocks:        180.211.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl
                          rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13597 (0x351d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914417A, serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
        Validity
            Not Before: Aug  6 15:21:01 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a42d1b-1f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:4c:e3:f5:18:bd:2b:f1:35:75:1c:4a:50:
                    df:88:a6:35:76:63:80:d7:eb:e0:f4:a0:a8:15:0e:
                    e8:a7:a8:7a:d3:e2:6a:aa:b2:01:7c:7d:13:f3:ef:
                    ac:c7:de:db:be:f7:ed:87:11:f5:6b:a2:b7:16:bd:
                    15:9d:c7:93:9f:0e:32:0a:87:f9:03:4d:a5:62:af:
                    3b:ee:32:36:84:37:42:66:3a:5d:42:a1:20:59:14:
                    50:4b:f2:db:6c:7c:e7:9b:ca:80:03:c2:f9:f6:d3:
                    c8:65:b9:74:7c:06:48:04:bf:d6:7e:b7:ed:38:02:
                    9f:4e:86:67:5a:2d:31:b7:04:0a:a3:90:c1:e3:ba:
                    67:74:3a:e6:f8:0d:33:79:b5:bb:d3:58:10:f6:ba:
                    5f:2f:ca:b7:19:77:89:2d:a8:d6:d8:d6:58:cc:0c:
                    ae:f2:69:81:af:8f:bf:2b:6f:01:f4:77:54:d3:63:
                    1a:53:5f:ee:bb:a1:a7:41:ac:e1:b8:81:a7:71:f7:
                    25:7e:b9:50:e1:51:51:0a:bb:9c:09:c5:aa:ed:7b:
                    77:8e:88:21:e8:92:14:55:1c:f4:28:4e:d4:54:d0:
                    d0:cb:f3:95:25:c5:cb:13:af:8d:49:be:05:5b:bb:
                    d9:ee:cd:e8:2c:e1:70:71:90:dd:1b:19:af:66:73:
                    8f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:07:44:EC:2C:26:38:FC:AE:1B:13:D4:26:87:82:CA:63:28:E2:B2
            X509v3 Authority Key Identifier:
                keyid:55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/B4FD92C42C5211EEAD14C272C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:99:16:04:be:be:b6:5d:92:1c:e2:35:0f:11:f7:2f:66:57:
         32:3a:8c:39:b2:30:d2:70:da:1e:40:4b:58:44:26:e1:e6:6b:
         7e:59:12:59:06:fc:44:7a:60:b7:b7:bc:68:81:36:d4:1f:12:
         01:a5:0d:25:6f:7a:06:c5:29:5c:a1:0c:66:ba:f8:95:0e:c9:
         1a:62:73:58:45:20:27:b2:8f:06:b7:de:0f:c6:f1:4e:de:10:
         ba:4f:e6:bd:d2:55:a5:d7:85:f8:65:2f:1f:de:f8:58:a4:f4:
         11:b5:1a:39:08:a5:a8:7c:72:09:2c:ee:7b:1b:c4:c2:80:3c:
         5a:22:7d:b9:d5:e1:6a:c4:7e:9a:61:61:98:e0:45:fe:86:9e:
         3b:cf:73:3e:3f:c5:24:69:13:ea:63:2e:d9:77:f6:7c:6d:ae:
         8c:2b:9c:df:dd:9d:23:bf:2b:71:97:59:4a:ec:a1:90:db:f5:
         92:b9:13:8f:99:a2:89:c7:1d:ed:79:6d:f2:0a:69:6d:17:24:
         21:63:46:79:76:08:24:5e:a7:b0:2f:db:e5:8c:a2:eb:65:b8:
         56:d2:82:9e:30:a7:42:6f:30:2b:13:10:d3:bd:87:40:b6:70:
         01:48:d1:42:0c:95:6d:c9:a7:a4:9b:e2:e6:51:23:9f:c4:87:
         e2:56:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:03 2026 by rpki-client