Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/E8819018178811EC876F5F50C4F9AE02.roa
File:                     E8819018178811EC876F5F50C4F9AE02.roa (raw, json)
Hash identifier:          vUBN3WiPziWGZpfHV/nuh0lxaXpR2pUDXk1dHU8ebwE=
Subject key identifier:   9E:0B:7F:2A:69:79:B7:EE:03:4B:12:4B:F7:C5:9F:82:E2:BC:11:81
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       0CBE
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/E8819018178811EC876F5F50C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:27:47 +0000
ROA not before:           Sat 16 Aug 2025 19:30:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45682
IP address blocks:        180.189.10.0/24 maxlen: 24
                          2407:b000:4011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3262 (0xcbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Aug 16 19:30:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a59053-e03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:02:bf:d8:6a:73:a8:b6:3c:bb:94:c3:28:
                    e3:d8:5e:a3:d1:e9:f2:ed:ba:88:6d:69:1d:6a:c7:
                    19:b0:1e:f3:44:94:aa:30:4e:ec:75:51:8c:be:e6:
                    d8:a7:ac:fd:4e:d4:72:c3:c7:88:a8:f3:f1:b7:01:
                    f1:ad:fd:3e:5d:80:17:5b:e2:a2:9a:5b:c9:b4:b4:
                    c2:2a:2f:fc:58:7b:8d:ba:33:59:f8:68:86:84:6f:
                    69:40:44:e9:10:a6:86:8d:b6:7e:7d:e5:cd:39:3b:
                    ee:8e:26:6c:70:51:bd:f2:8b:71:f5:a9:50:2e:f5:
                    cf:b5:7f:ff:35:39:03:bc:29:21:de:40:2a:f6:0f:
                    0e:29:53:1a:c8:04:54:fd:1d:82:80:3f:d9:10:c0:
                    85:51:57:3f:8c:a1:46:bb:e6:e6:78:a9:9f:a3:f8:
                    70:9a:6e:87:c5:9e:cb:2f:0b:df:fe:27:07:75:04:
                    75:29:1c:31:1d:0a:b4:06:d8:7d:9f:3d:85:e7:12:
                    93:c0:6d:58:a1:b1:3a:92:3f:58:f7:17:3a:99:6c:
                    68:9a:47:5d:9d:88:e9:31:0e:6b:22:19:2c:22:08:
                    55:0d:06:b0:43:be:e0:b0:e9:95:f5:94:c4:d1:e5:
                    05:23:1f:7a:43:9d:02:53:42:a8:e9:a9:48:26:2f:
                    cd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0B:7F:2A:69:79:B7:EE:03:4B:12:4B:F7:C5:9F:82:E2:BC:11:81
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/E8819018178811EC876F5F50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.189.10.0/24
                IPv6:
                  2407:b000:4011::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:86:28:66:57:91:46:8b:4e:00:d4:d7:55:6c:4e:d9:4a:
         4c:c1:20:be:7c:36:b7:8f:f2:af:a4:41:59:fb:48:a0:e9:c7:
         fa:69:57:93:69:2b:61:0f:ae:2b:25:b6:51:75:f7:3d:20:50:
         1c:ef:da:38:a6:db:d2:fe:19:59:85:d2:26:5c:05:11:23:a4:
         42:42:53:72:8a:f8:3e:c1:de:3d:be:2e:f5:85:83:fc:2e:f1:
         3c:92:c8:d6:d3:8d:e4:8a:eb:2d:b2:07:4f:b4:30:96:ce:53:
         22:ac:b7:4e:86:96:59:f3:63:86:c9:8a:e1:b6:76:40:1d:62:
         91:d3:8d:57:38:7d:a1:c7:c7:c6:52:2c:ef:09:b4:e6:5a:86:
         b7:c0:d9:3a:2c:4a:85:f0:0c:01:b6:19:a9:c2:a1:e6:17:e6:
         23:62:e7:28:4e:af:a9:a1:65:17:6b:c3:cf:80:59:26:01:0f:
         72:58:2b:09:63:5f:85:42:4a:31:f8:b3:87:fb:a3:2d:2c:db:
         d3:98:9b:a5:39:05:c3:83:89:8c:b4:77:f2:24:e7:57:da:a2:
         37:a0:3c:6c:07:93:66:01:fc:9b:ff:20:57:75:f8:e6:b4:e7:
         09:7f:62:e4:00:f7:37:ff:4a:42:12:b0:77:1a:85:85:59:75:
         44:af:03:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:17 2026 by rpki-client