Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/ED816DEC95DA11EC993BD050C4F9AE02.roa
File:                     ED816DEC95DA11EC993BD050C4F9AE02.roa (raw, json)
Hash identifier:          fDOU5iTnJ9Tf4/wEKmB/yast8lh3cbWWkQ+UhkQy1GI=
Subject key identifier:   DD:3A:11:78:68:9A:B9:1B:BF:C6:54:78:DE:D4:A2:62:8B:E3:7C:85
Certificate issuer:       /CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
Certificate serial:       0455
Authority key identifier: 1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/ED816DEC95DA11EC993BD050C4F9AE02.roa
Signing time:             Wed 15 Apr 2026 00:31:34 +0000
ROA not before:           Wed 15 Apr 2026 00:31:34 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149523
IP address blocks:        103.182.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl
                          rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D1F, serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
        Validity
            Not Before: Apr 15 00:31:34 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69dedc66-f768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:44:bd:c5:f3:45:e0:5a:06:8c:24:30:e0:
                    47:66:d5:33:05:38:85:cd:ff:f3:5e:3e:ea:9b:a5:
                    bd:c2:68:95:ac:0f:6d:97:09:b9:f1:1b:fd:71:a3:
                    97:cc:c5:ac:95:11:02:b4:23:1c:10:49:7d:b5:bc:
                    9a:dc:3b:2f:85:df:2a:48:60:df:36:24:2f:88:a2:
                    6e:77:5d:23:07:8b:83:d6:40:d7:51:42:cb:a8:b4:
                    1f:53:62:f4:1a:60:53:bc:c4:0b:db:6f:5d:b9:1e:
                    df:ac:cc:31:dc:f7:13:40:26:09:4a:3f:38:dc:0c:
                    eb:df:0d:18:96:fc:a6:da:b5:53:78:6c:cc:9c:4d:
                    2f:31:a2:39:95:aa:7d:27:06:fe:3c:be:28:cc:ee:
                    dd:96:df:df:be:c8:59:2e:5d:ad:62:a6:cf:b7:33:
                    49:7d:04:2c:f3:61:c7:c9:75:50:b1:fc:4c:58:75:
                    f3:8e:b6:dc:07:09:5f:d9:38:a7:c6:a7:89:ef:8d:
                    45:00:1d:56:ea:25:a3:a9:b6:2f:24:be:1e:57:4a:
                    8a:ca:17:ba:e1:cb:e7:02:98:75:1e:86:17:c5:de:
                    3c:af:88:a1:8c:75:25:eb:a5:df:8b:2f:74:c9:00:
                    d1:97:53:cd:69:3b:4f:c4:21:3d:54:19:c4:28:ec:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3A:11:78:68:9A:B9:1B:BF:C6:54:78:DE:D4:A2:62:8B:E3:7C:85
            X509v3 Authority Key Identifier:
                keyid:1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/ED816DEC95DA11EC993BD050C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:b1:5d:3a:30:bd:01:c7:ba:fc:e7:58:e6:a0:75:3c:58:73:
         21:90:c6:6f:5c:48:15:6b:45:01:1a:67:35:33:b2:19:e7:60:
         65:ae:fb:2e:0e:21:d9:cc:66:5d:a5:63:06:d0:29:47:02:96:
         c0:d8:85:29:f5:dd:8b:1b:6a:e1:c6:1b:25:8c:be:88:24:8c:
         d9:68:56:31:9e:e2:00:48:60:ac:b6:cf:9d:ac:cd:ac:53:0c:
         52:64:e9:c4:46:e0:85:24:81:2d:7e:17:25:09:e0:79:ea:13:
         da:5e:cb:94:a3:25:a6:11:75:dc:0f:80:97:02:6e:ef:66:5d:
         06:44:06:f1:6d:4f:dc:37:da:3a:be:41:45:fd:69:aa:2b:75:
         85:e6:c2:a6:c7:0b:83:82:6a:ea:ed:b1:b9:50:a5:8c:a9:7b:
         06:3d:84:56:de:de:59:19:f1:ab:d1:3c:59:65:0d:07:c3:a2:
         5f:e7:fd:b7:b7:b2:d0:57:1c:e4:eb:c7:f8:54:79:c9:06:58:
         60:44:e4:74:2d:9c:fc:92:22:21:64:ff:1a:2c:cd:2c:eb:8c:
         b7:67:76:29:29:80:dd:eb:b7:a8:66:0d:be:ee:22:c9:4b:e2:
         68:e9:0a:77:1d:05:86:70:a4:30:2e:44:f3:82:5d:d9:54:4e:
         49:72:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:34 2026 by rpki-client