Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/99144F3C03DB11F09FBAF32DC4F9AE02.roa
File:                     99144F3C03DB11F09FBAF32DC4F9AE02.roa (raw, json)
Hash identifier:          WfsF1bvKni5VB3KJXOJWKTos4KJh8XNEQL5f6UbIbfQ=
Subject key identifier:   EE:61:51:99:94:04:56:66:D5:38:93:B4:13:8A:77:D4:D8:8A:81:F3
Certificate issuer:       /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Certificate serial:       354F
Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/99144F3C03DB11F09FBAF32DC4F9AE02.roa
Signing time:             Sun 31 May 2026 15:13:13 +0000
ROA not before:           Sun 31 May 2026 15:13:13 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     131279
IP address blocks:        175.45.176.0/22 maxlen: 22
                          175.45.176.0/24 maxlen: 24
                          175.45.177.0/24 maxlen: 24
                          175.45.178.0/24 maxlen: 24
                          175.45.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
                          rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13647 (0x354f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
        Validity
            Not Before: May 31 15:13:13 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5009-168d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:91:5c:fd:64:3b:be:5a:7c:cb:7c:8f:d1:
                    2b:c8:30:66:c6:8f:ee:ad:a1:17:9e:d5:cd:f7:b4:
                    33:d1:ed:c4:7e:9a:11:ad:3f:7c:1f:e5:4b:c3:b3:
                    8e:34:24:4c:15:6d:14:60:2a:92:c1:cf:e7:c5:46:
                    e4:42:46:9d:20:db:4a:2f:a3:6c:a2:01:cf:8b:bb:
                    ae:7e:c8:51:86:4e:6c:f3:5f:0a:22:d4:6c:87:f5:
                    3b:4d:e4:d0:81:e3:fa:b0:48:84:c8:87:a2:1d:23:
                    0d:62:52:bb:64:70:f4:3e:4b:8e:bf:40:f3:1c:5c:
                    ea:f5:5a:0e:60:63:3c:ad:8b:73:79:f5:c0:69:eb:
                    c7:b9:b9:43:bb:00:e9:1f:84:aa:53:fd:a1:ac:2f:
                    43:4d:b8:9f:d1:0d:33:d4:fb:7d:57:cc:56:d7:2c:
                    81:ef:28:5b:3c:be:6e:b7:46:7f:d0:c7:6d:bc:10:
                    39:06:00:01:0e:5a:ee:57:69:46:62:b1:12:0f:9e:
                    8f:35:13:c8:75:61:ba:85:70:b1:e8:99:42:f9:46:
                    38:91:41:81:a2:45:bc:a6:be:20:00:cb:0b:c0:83:
                    41:8c:d2:53:bb:c7:c2:f0:62:a5:f0:4a:a8:30:d2:
                    c1:3c:12:2d:ff:a4:ce:2f:7a:db:50:d1:74:4a:75:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:61:51:99:94:04:56:66:D5:38:93:B4:13:8A:77:D4:D8:8A:81:F3
            X509v3 Authority Key Identifier:
                keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/99144F3C03DB11F09FBAF32DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:69:54:98:38:53:90:e8:9f:25:ed:5c:b0:8c:fe:01:83:66:
         44:43:74:e5:8b:65:f3:85:2f:34:37:af:ea:0b:6f:b6:c4:28:
         c4:b4:9c:c7:a2:27:90:51:d6:e9:72:69:44:28:8b:6b:c6:10:
         1d:4d:34:6f:c4:8c:c8:b2:db:a3:e3:86:b0:4b:09:32:91:c5:
         10:f6:b6:91:e4:11:35:71:5d:8c:33:15:fc:9f:cf:f1:df:df:
         46:af:41:2f:0a:c7:d9:e2:7e:9c:f3:5b:70:a4:01:46:2d:7e:
         36:6b:06:57:e2:fb:6d:5f:e5:85:82:1a:4b:c9:ec:2f:7c:3e:
         47:bb:e8:03:1b:df:25:06:bd:a2:56:db:12:21:db:3d:e7:68:
         7d:53:29:19:15:ce:d0:9c:0d:06:80:b7:46:6b:08:15:fb:f4:
         b7:f5:91:59:ad:41:6f:84:77:8b:d7:65:da:f8:b1:86:a1:6e:
         8d:79:f0:66:df:33:6e:c1:ad:2d:ae:bf:2f:a2:cb:aa:26:25:
         ae:ed:81:05:eb:4c:cf:0a:28:68:4d:32:ba:22:14:33:64:f6:
         a0:06:6c:68:ac:9e:63:82:4e:30:af:5c:91:84:a6:3c:03:5b:
         94:ff:9b:e1:af:86:31:4d:37:28:aa:96:fc:10:e0:2b:a4:af:
         0f:60:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:31:02 2026 by rpki-client