Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/777A4FE4A67311F0B63FA56CC4F9AE02.roa
File:                     777A4FE4A67311F0B63FA56CC4F9AE02.roa (raw, json)
Hash identifier:          V9p3VnVVXAQzSFcHBfkfDtu8sHJ32uFT2t4ErkB7q/M=
Subject key identifier:   A3:DF:99:90:40:FF:DD:9C:18:68:76:F3:19:2F:2B:AE:20:45:3E:F5
Certificate issuer:       /CN=A9156801/serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Certificate serial:       4C
Authority key identifier: 9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/777A4FE4A67311F0B63FA56CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:13:52 +0000
ROA not before:           Sat 11 Oct 2025 07:25:31 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132313
IP address blocks:        180.148.8.0/23 maxlen: 23
                          180.148.8.0/24 maxlen: 24
                          180.148.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
                          rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156801, serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
        Validity
            Not Before: Oct 11 07:25:31 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3d920-9bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:35:9c:af:b2:21:8e:91:76:31:c6:c8:5b:
                    0c:b2:1e:7e:04:85:68:71:ac:a5:bd:d6:ae:64:dd:
                    96:a5:8b:44:71:08:63:29:c6:86:d8:a6:af:73:ca:
                    cc:d4:b9:1a:81:fd:e9:8a:ac:05:3b:b5:7d:fe:e2:
                    cc:43:3c:08:e7:39:5a:8a:67:d7:bf:3b:9a:0e:50:
                    35:57:bf:cb:86:dd:82:d7:b6:13:38:77:fe:46:4f:
                    b7:75:04:66:92:0a:bf:a6:c9:7d:64:c4:da:70:cd:
                    b0:5f:73:39:28:e4:f2:63:b3:5e:ca:a1:ff:6d:2a:
                    b2:29:6c:ab:68:e5:c0:b7:be:a7:00:ca:bf:5b:11:
                    2a:56:b2:b5:fa:73:70:e4:54:b8:da:96:ee:4d:71:
                    5a:f5:47:b8:c7:b1:40:ad:30:f9:e8:e4:94:93:ee:
                    98:54:74:76:d7:87:6c:7c:00:a7:9b:65:d4:f2:d3:
                    7e:48:bf:40:11:4f:ef:6d:67:6b:1d:6d:63:3b:06:
                    88:8b:63:fd:c1:4d:29:a0:60:b8:cd:32:a7:b5:d9:
                    70:a1:4a:53:3e:ad:97:8c:21:3a:21:2a:1c:62:c5:
                    e2:81:5d:16:0e:ae:26:12:a8:a6:3d:73:9a:c9:0c:
                    dd:2e:86:51:d2:93:23:43:5a:95:9a:3b:b5:09:31:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:99:90:40:FF:DD:9C:18:68:76:F3:19:2F:2B:AE:20:45:3E:F5
            X509v3 Authority Key Identifier:
                keyid:9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/777A4FE4A67311F0B63FA56CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:b1:67:a1:fd:45:7a:24:6f:e5:5c:03:16:99:b9:f0:4d:fc:
         51:08:bc:5d:74:f4:30:27:c4:26:1c:2d:ee:0b:0c:d1:20:e8:
         bb:ed:69:fe:46:51:4f:37:d7:3f:59:36:14:2d:47:9e:44:d0:
         3b:64:82:79:36:27:6f:70:5d:87:5d:b0:51:a7:df:c9:d2:ce:
         05:d8:56:14:bf:a1:63:87:06:3d:49:68:11:17:ea:56:20:5d:
         91:a2:e8:5c:35:94:7c:72:b0:00:a4:a1:d7:3d:1f:99:9f:2a:
         9b:e0:39:82:02:f4:d8:9e:91:02:95:33:02:a4:49:43:17:26:
         e9:78:ac:94:d5:c1:1f:c8:c8:05:b8:9d:fc:45:dd:fe:f1:57:
         1b:83:59:6a:1b:58:e0:95:5b:5a:c7:7f:fe:8b:e5:b2:93:b0:
         79:52:6f:2e:eb:75:e1:69:f8:95:50:72:fc:4c:4b:31:ab:79:
         d4:7c:58:64:43:8b:ca:0d:fd:70:16:9c:ef:00:2c:95:2b:ea:
         55:10:91:a6:c6:2c:c4:81:2e:d2:64:e6:b1:b6:e6:ab:1f:e1:
         39:4a:9a:c7:fb:b6:30:00:35:63:06:93:28:0f:a6:ee:05:a7:
         ee:c6:91:98:0c:e8:d2:8f:ee:76:02:19:e7:3c:5a:0f:76:b1:
         7a:5f:31:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:04 2026 by rpki-client