Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/BE466468B8D611ED876CBD7CC4F9AE02.roa
File:                     BE466468B8D611ED876CBD7CC4F9AE02.roa (raw, json)
Hash identifier:          49/FK2no0+eXe8VXT3R+zqFMOagQDVzOLbP2aHJeuSw=
Subject key identifier:   99:70:6C:63:E4:E6:87:D7:DE:6D:03:4E:22:0D:25:E7:3F:0C:7A:7E
Certificate issuer:       /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial:       1A0B
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/BE466468B8D611ED876CBD7CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:30:17 +0000
ROA not before:           Tue 14 Oct 2025 17:14:58 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     23893
IP address blocks:        180.210.128.0/19 maxlen: 19
                          180.210.128.0/23 maxlen: 24
                          180.210.130.0/23 maxlen: 24
                          180.210.133.0/24 maxlen: 24
                          180.210.134.0/23 maxlen: 24
                          180.210.136.0/23 maxlen: 24
                          180.210.138.0/23 maxlen: 24
                          180.210.140.0/23 maxlen: 24
                          180.210.142.0/23 maxlen: 24
                          180.210.144.0/23 maxlen: 24
                          180.210.146.0/23 maxlen: 24
                          180.210.148.0/23 maxlen: 24
                          180.210.150.0/23 maxlen: 24
                          180.210.152.0/23 maxlen: 24
                          180.210.154.0/23 maxlen: 24
                          180.210.156.0/23 maxlen: 24
                          180.210.158.0/23 maxlen: 24
                          2404:b00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
                          rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6667 (0x1a0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
        Validity
            Not Before: Oct 14 17:14:58 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45b89-f000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:92:35:d1:ef:04:f2:6f:79:4a:a2:61:38:
                    93:9e:12:95:c6:3b:86:25:c2:11:9e:84:53:10:34:
                    c2:ff:c7:ae:90:42:b3:41:95:c3:69:13:cb:5e:42:
                    96:5f:93:db:55:45:d9:d5:a4:6b:7e:f4:4f:4a:0f:
                    a8:35:20:c1:d2:2d:ca:5d:ce:97:c1:fb:6d:1b:94:
                    ec:65:13:3a:f7:20:4e:2a:98:8a:13:29:44:ec:78:
                    c8:55:a1:83:3a:48:76:f5:95:04:45:d0:3e:a4:f7:
                    a5:9b:6c:c2:6f:8a:a3:0e:73:90:77:27:83:40:62:
                    78:ed:e6:41:12:42:ba:50:b8:23:c4:10:ac:4e:f4:
                    6c:9f:8f:be:fb:95:ed:b9:45:48:c3:50:b7:29:24:
                    17:91:9b:47:71:0a:22:46:69:cb:18:fa:9d:28:74:
                    ba:cd:aa:c5:72:d6:c0:a2:ab:d7:bd:a4:d5:d0:6b:
                    18:22:0d:a6:2c:a2:f4:46:21:ea:04:e4:32:40:2b:
                    ac:15:91:c7:40:cf:80:05:aa:b6:e5:b1:b0:7f:be:
                    43:67:ad:91:29:57:0e:3f:83:b0:ef:4a:f7:f9:d0:
                    2c:e9:72:ea:01:19:85:bc:5c:4f:34:10:cf:24:eb:
                    e1:22:b7:4f:a3:a7:dd:21:d0:97:17:6c:3b:a2:20:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:70:6C:63:E4:E6:87:D7:DE:6D:03:4E:22:0D:25:E7:3F:0C:7A:7E
            X509v3 Authority Key Identifier:
                keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/BE466468B8D611ED876CBD7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.128.0/19
                IPv6:
                  2404:b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:ba:43:85:82:da:c9:a4:57:3d:9c:3c:a8:c9:1d:2d:0c:97:
         3b:37:e3:6e:af:d6:11:67:51:8f:a7:db:09:1e:04:2d:10:39:
         86:67:b1:57:c4:b7:0b:16:12:d2:54:c3:f5:82:3d:2e:e9:0d:
         b1:60:97:8a:f1:b4:0c:c9:c6:21:a6:a9:ef:27:18:0c:a6:56:
         da:d8:5b:0b:b8:26:27:85:a0:29:da:ad:f3:77:9a:4f:5f:65:
         0f:f7:e5:ad:2e:0e:0c:f7:a3:c0:71:d3:89:fc:61:58:e4:2d:
         c8:03:ed:9c:fa:1b:00:4a:8e:1e:25:0f:50:93:ec:d6:3c:30:
         3f:0e:14:32:92:f0:fd:43:df:be:32:be:5c:6f:08:85:61:43:
         76:57:9d:0f:73:5e:fa:cf:82:f7:95:6f:1c:45:02:ff:87:5d:
         0c:2f:4b:fb:a0:ac:4b:c9:ab:89:b6:52:29:9a:0d:d1:e1:df:
         ad:99:e4:31:3b:06:d6:f3:cf:8d:ed:be:c1:0d:c8:9b:57:69:
         c4:1c:f9:aa:5f:e6:b1:5c:68:74:47:4c:71:ae:6b:58:df:7f:
         4d:cc:49:6c:cb:27:d4:bc:02:28:42:1c:6e:0d:04:4e:b7:00:
         ec:89:a7:4e:df:6f:68:d6:be:73:f0:a1:ac:5a:93:a8:a9:50:
         4c:40:36:f9
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICGgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU4OUExMTAvBgNVBAUTKDI2Mjc5MENEOTE0Q0VBOEVDMTFFMjU4NjlCODk4REUw
MDAxRkJEMDkwHhcNMjUxMDE0MTcxNDU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWI4OS1mMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyr+SNdHvBPJveUqiYTiTnhKVxjuGJcIRnoRTEDTC/8eukEKzQZXDaRPLXkKW
X5PbVUXZ1aRrfvRPSg+oNSDB0i3KXc6XwfttG5TsZRM69yBOKpiKEylE7HjIVaGD
Okh29ZUERdA+pPelm2zCb4qjDnOQdyeDQGJ47eZBEkK6ULgjxBCsTvRsn4+++5Xt
uUVIw1C3KSQXkZtHcQoiRmnLGPqdKHS6zarFctbAoqvXvaTV0GsYIg2mLKL0RiHq
BOQyQCusFZHHQM+ABaq25bGwf75DZ62RKVcOP4Ow70r3+dAs6XLqARmFvFxPNBDP
JOvhIrdPo6fdIdCXF2w7oiChVwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJlwbGPk
5ofX3m0DTiINJec/DHp+MB8GA1UdIwQYMBaAFCYnkM2RTOqOwR4lhpuJjeAAH70J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTg5QS9BQ0Q2RkI4QTdE
OTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZvN0JIaVdHbTRtTjRBQWZ2
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ppZVF6WkZNNm83QkhpV0dtNG1ONEFBZnZRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU4OUEvQUNENkZCOEE3RDk0MTFFNzkzOEJDRjRFQzRGOUFFMDIvQkU0NjY0NjhC
OEQ2MTFFRDg3NkNCRDdDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQFtNKAMA0EAgACMAcDBQAkBAsAMA0GCSqGSIb3DQEBCwUAA4IBAQC7
ukOFgtrJpFc9nDyoyR0tDJc7N+Nur9YRZ1GPp9sJHgQtEDmGZ7FXxLcLFhLSVMP1
gj0u6Q2xYJeK8bQMycYhpqnvJxgMplba2FsLuCYnhaAp2q3zd5pPX2UP9+WtLg4M
96PAcdOJ/GFY5C3IA+2c+hsASo4eJQ9Qk+zWPDA/DhQykvD9Q9++Mr5cbwiFYUN2
V50Pc176z4L3lW8cRQL/h10ML0v7oKxLyauJtlIpmg3R4d+tmeQxOwbW88+N7b7B
DcibV2nEHPmqX+axXGh0R0xxrmtY339NzElsyyfUvAIoQhxuDQROtwDsiadO329o
1r5z8KGsWpOoqVBMQDb5
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:43 2026 by rpki-client