Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/99144F3C03DB11F09FBAF32DC4F9AE02.roa
File:                     99144F3C03DB11F09FBAF32DC4F9AE02.roa (raw, json)
Hash identifier:          jKjAReByX9JHWgFRc4CHWo+r/zgbeE7aKkvlHi88tYM=
Subject key identifier:   F8:4F:19:7B:8C:A9:55:CC:DD:22:31:89:ED:D7:74:12:E2:4D:6A:1A
Certificate issuer:       /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Certificate serial:       3519
Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/99144F3C03DB11F09FBAF32DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:11:33 +0000
ROA not before:           Wed 19 Mar 2025 01:55:35 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     131279
IP address blocks:        175.45.176.0/22 maxlen: 22
                          175.45.176.0/24 maxlen: 24
                          175.45.177.0/24 maxlen: 24
                          175.45.178.0/24 maxlen: 24
                          175.45.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
                          rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13593 (0x3519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
        Validity
            Not Before: Mar 19 01:55:35 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=69a402c4-d2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:fe:45:3a:9c:ba:93:43:b7:21:a7:4d:31:
                    6d:0e:66:1f:f1:28:4d:37:a6:66:ea:e4:b5:fc:4e:
                    ad:58:48:9b:ee:e6:51:b9:e8:8d:7b:fc:8c:6f:1a:
                    8c:b7:20:d4:4b:0f:a0:3c:89:8b:81:95:67:f3:55:
                    6b:5a:0d:01:5a:25:fb:94:5b:1d:3d:69:f5:5f:ae:
                    44:8d:77:46:c7:e1:db:a4:94:bb:c0:30:e1:74:1b:
                    a9:57:ff:c7:32:ae:30:bb:5d:cd:5a:4a:8a:c9:5e:
                    4f:90:c7:b6:c3:db:49:bb:3a:32:17:8e:78:b3:c1:
                    11:1b:65:13:39:e5:04:d3:2b:73:b1:45:e1:0a:f3:
                    04:c5:65:71:60:4b:01:68:a7:6f:48:4e:48:70:38:
                    30:cb:43:23:8f:6b:72:ce:47:d9:d7:f2:2e:9e:e2:
                    47:49:9f:2c:86:bf:b6:87:19:d6:8b:fd:20:5a:58:
                    2c:c0:64:42:ad:f6:68:3b:fb:70:1d:dc:96:f9:7d:
                    a5:0f:c4:0e:c0:25:2c:16:65:cb:15:ed:b6:53:06:
                    55:d2:de:80:6b:ca:f3:c3:1e:07:8b:0c:9b:27:6d:
                    56:9c:59:54:c1:5f:71:46:56:45:77:98:f2:0b:5d:
                    cd:bd:1d:eb:43:27:df:cc:e8:a1:9b:45:0d:93:74:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4F:19:7B:8C:A9:55:CC:DD:22:31:89:ED:D7:74:12:E2:4D:6A:1A
            X509v3 Authority Key Identifier:
                keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/99144F3C03DB11F09FBAF32DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:c9:7b:89:56:f6:30:57:b8:16:62:06:80:cb:8b:6d:0c:23:
         54:42:cc:23:c3:56:c8:33:a5:30:6f:80:30:5f:a6:8b:a6:14:
         82:4d:57:90:d0:f1:7c:66:d6:d1:eb:ee:99:7d:ab:e3:b7:03:
         61:71:d0:9c:9b:5f:fa:37:05:14:5d:a7:5f:02:02:9e:8c:50:
         69:f1:36:bd:30:ac:b5:dd:d5:68:e2:91:10:e7:1b:2c:95:f2:
         8d:ae:b6:6b:32:6b:84:67:f9:7a:08:99:af:c2:2e:fa:10:08:
         c4:93:2b:75:a5:46:2d:a1:a7:ff:94:71:51:2e:89:61:d0:b8:
         ca:88:ce:97:63:33:da:22:5f:d2:9f:66:fd:d5:8f:a1:70:45:
         27:4f:4f:07:43:ac:da:e5:98:13:2f:32:52:0e:2d:26:da:27:
         46:d1:cc:9c:3c:97:d1:9c:f0:ff:14:d6:87:b1:f6:27:37:82:
         6f:35:22:d6:30:f3:49:34:79:e9:e7:d3:9b:9f:a7:a5:4d:cc:
         dd:df:04:68:36:d6:f9:e1:ad:57:a0:8c:7e:85:73:cb:40:39:
         2f:97:10:df:f0:5e:83:68:89:39:95:7a:b9:35:a6:aa:75:3f:
         ed:45:97:27:86:89:e0:a2:3f:ee:26:f8:17:df:7e:e7:52:de:
         7b:ce:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:17 2026 by rpki-client