Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/14FFD39467BE11E8910CB13EC4F9AE02.roa
File:                     14FFD39467BE11E8910CB13EC4F9AE02.roa (raw, json)
Hash identifier:          aoK1qMo+XLiglTyrOyoKUd3w0AOhsSnhUEAZl5VjK2k=
Subject key identifier:   6A:57:2D:E7:2D:44:D3:74:0D:37:12:4A:E0:7A:13:6E:9F:1F:65:30
Certificate issuer:       /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Certificate serial:       1DAB
Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/14FFD39467BE11E8910CB13EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:28:49 +0000
ROA not before:           Fri 30 Jan 2026 16:14:10 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     9988
IP address blocks:        45.112.176.0/22 maxlen: 24
                          103.52.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl
                          rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7595 (0x1dab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
        Validity
            Not Before: Jan 30 16:14:10 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69a45b31-809c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:c9:df:32:ef:13:f7:44:b7:b4:67:2d:a7:
                    8e:b1:fa:61:8e:c5:38:16:15:54:9f:25:8b:f6:d7:
                    58:2f:e7:6c:2d:bd:cb:4f:3b:e4:b2:d0:35:4b:09:
                    6d:ec:bf:df:02:ab:3a:a8:13:f8:8a:5d:21:75:5f:
                    32:11:31:b2:af:f7:39:13:0a:9a:38:a9:fe:33:15:
                    0f:56:4a:87:b0:f3:ce:9b:81:2d:6e:c3:19:fa:08:
                    e4:2c:3a:7e:cc:47:11:d3:83:9b:27:b0:39:0b:27:
                    44:80:e4:d8:61:68:fd:ea:04:60:30:f6:11:c5:29:
                    b8:6a:cf:bb:a2:d8:3e:8b:f7:4a:33:b9:4e:ac:17:
                    5a:6d:83:a5:2a:3a:d0:d6:5a:22:74:7a:26:92:ef:
                    99:4b:9b:1a:99:aa:bb:6e:17:30:d7:bc:47:d0:c7:
                    71:68:64:96:8d:62:0d:aa:77:0e:0b:d0:88:2b:b9:
                    83:45:0c:67:a6:f6:12:38:37:82:61:8e:79:01:62:
                    b4:3f:96:20:81:76:be:5d:ca:e9:f1:95:e6:c5:8d:
                    f7:ac:1d:35:c5:ea:85:1d:45:69:45:be:24:fc:50:
                    73:9b:a1:5f:a2:e2:a3:c5:0b:8c:f8:e8:bd:cc:61:
                    d3:98:b1:4c:02:10:eb:98:d2:ec:aa:fb:61:ff:31:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:57:2D:E7:2D:44:D3:74:0D:37:12:4A:E0:7A:13:6E:9F:1F:65:30
            X509v3 Authority Key Identifier:
                keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/14FFD39467BE11E8910CB13EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.176.0/22
                  103.52.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:2e:b7:4e:86:78:dd:6e:61:68:2f:e0:e0:41:81:b0:1c:36:
         c9:fe:35:19:3b:79:ca:ba:fa:43:4d:fc:20:1b:44:e3:29:1f:
         90:ca:0d:d5:1b:ea:e1:f6:22:55:6f:92:c8:d4:c9:10:86:d4:
         97:1e:91:c1:3f:a2:d4:ee:de:91:91:80:15:96:35:d5:a2:07:
         03:64:d9:43:54:14:a9:52:e7:be:ec:fc:f3:f1:86:6f:22:1e:
         2c:a8:24:60:e7:e4:e6:ab:29:3c:e8:8a:4d:8f:a0:28:7c:2f:
         b2:bc:28:ef:d8:e3:5b:7c:81:c1:4e:4d:13:70:7a:ff:b7:2f:
         e7:f0:6b:41:f1:2e:94:18:71:35:65:9d:80:76:73:4d:ed:a0:
         f7:b7:07:0e:0c:2a:df:92:4e:ad:c3:be:e9:6a:7f:6e:4f:82:
         d8:56:d4:2b:b6:94:d1:49:83:5d:b8:45:ec:51:32:d2:e2:5d:
         80:2b:c3:d7:79:0f:4c:8a:9a:0d:b6:98:9e:0d:de:e3:87:01:
         67:7d:51:f2:7e:34:eb:8b:10:df:d4:5c:22:4f:56:e4:ff:c0:
         ab:9e:85:f1:17:c5:68:d8:6b:e2:7e:30:40:e2:d2:34:d6:0f:
         ad:a0:f2:b1:a3:b3:6e:eb:42:7a:5d:33:62:64:9b:69:0f:3e:
         c1:27:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:38 2026 by rpki-client