Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/47E1F234B45111EEA556091EC4F9AE02.roa
File:                     47E1F234B45111EEA556091EC4F9AE02.roa (raw, json)
Hash identifier:          y7FzZtWFboD8vtJhkIMB4U1/N9/RdxpQzgNAs6lz9Ac=
Subject key identifier:   2D:F4:12:89:56:D4:D1:4E:F1:2F:F0:70:92:D7:BB:9B:20:F6:9E:63
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       35C9
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/47E1F234B45111EEA556091EC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 16:13:49 +0000
ROA not before:           Tue 31 Mar 2026 16:13:49 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     56176
IP address blocks:        118.188.0.0/20 maxlen: 20
                          118.188.16.0/23 maxlen: 23
                          118.188.26.0/23 maxlen: 23
                          118.188.28.0/23 maxlen: 23
                          118.188.30.0/23 maxlen: 23
                          118.188.32.0/19 maxlen: 19
                          118.188.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13769 (0x35c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 31 16:13:49 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cbf2bd-82ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:9e:27:4a:8f:5d:05:b4:5b:f0:43:0e:08:
                    c9:73:91:e2:f3:37:21:ca:42:2f:39:54:99:37:81:
                    6c:10:26:ba:43:2f:4b:76:15:17:bc:61:ad:e9:a4:
                    2d:df:20:2f:73:ae:48:19:bb:cf:ac:5a:55:25:ca:
                    5c:2b:09:9a:44:a4:8a:3d:57:5b:44:42:1a:e3:a8:
                    c9:7d:5d:0f:7f:76:25:c7:b6:cb:ba:64:83:51:6c:
                    09:9b:6f:97:cb:52:da:26:b4:6d:7c:da:53:a2:96:
                    28:ab:14:6b:fa:9d:96:18:00:8a:fb:d9:3b:cf:eb:
                    ce:c5:bc:ba:98:6d:6a:3a:8b:8d:47:73:67:58:51:
                    fb:49:fb:d8:8d:f9:e2:a2:e4:e1:f8:9c:a1:7f:16:
                    69:8e:8a:cb:4f:fb:83:38:b5:6c:0e:e6:4d:89:22:
                    06:cd:91:5b:bb:c7:30:cd:b6:ed:dd:b9:23:6a:0a:
                    6b:91:cd:1f:45:ef:39:86:72:b1:1c:fe:4d:5f:94:
                    2d:a6:70:d3:19:7e:e2:46:41:b6:96:33:57:84:59:
                    8e:85:ea:04:2e:0b:03:e7:0b:9c:26:28:05:90:b3:
                    4e:1d:c6:2e:0f:c9:8b:79:5d:fd:ba:46:0e:67:69:
                    0c:80:3c:2b:ae:c8:10:ab:57:43:d7:ec:34:5f:b0:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F4:12:89:56:D4:D1:4E:F1:2F:F0:70:92:D7:BB:9B:20:F6:9E:63
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/47E1F234B45111EEA556091EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.188.0.0-118.188.17.255
                  118.188.26.0-118.188.127.255

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:71:83:ba:51:36:80:28:1c:bf:e1:c3:b4:94:fa:63:92:
         c2:56:93:16:59:e7:f1:0a:49:4e:cc:1d:b3:f4:9f:f8:de:0a:
         75:66:4d:34:d4:69:7d:4a:be:5d:d4:8a:e0:e3:8e:13:04:2e:
         25:d4:3a:97:41:ba:71:1c:53:8b:f4:9b:c0:1d:b5:73:6c:62:
         46:a9:66:6c:61:d4:a2:a2:22:cf:db:17:47:60:0a:eb:38:a4:
         23:2a:6c:ef:96:78:4d:b5:d6:95:7f:fd:de:0f:9a:18:a6:ff:
         80:1f:39:ac:a5:47:e1:ca:1d:25:d3:d6:67:2a:35:a2:df:1e:
         d0:01:20:1f:7c:56:f1:b1:86:db:ce:5f:3b:16:01:71:ad:f8:
         03:73:04:9a:02:df:9f:e5:52:fc:a3:a2:3d:11:c4:4d:8f:33:
         e8:b3:2d:b1:29:a6:75:32:20:4a:b3:7c:d0:f7:1b:f2:e5:e7:
         92:49:01:53:4b:ac:ca:9c:88:e2:ec:0e:c2:f7:c7:46:e2:84:
         0a:39:bb:f3:49:ea:96:8d:4e:9a:1e:94:ee:65:23:71:5f:b7:
         bc:e4:fe:75:9c:77:b0:7a:61:fc:8a:22:d7:cb:63:e9:e3:f3:
         af:ad:77:ed:9c:84:2e:ba:2f:e2:18:95:0f:0b:11:28:06:db:
         44:14:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:04:43 2026 by rpki-client