Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/EC9B786E9D8811EB80D73886C4F9AE02.roa
File:                     EC9B786E9D8811EB80D73886C4F9AE02.roa (raw, json)
Hash identifier:          4xSwdHNu/qRooFFfLt9LIxYJINV6E5OQ61yhhgGu4BE=
Subject key identifier:   5E:65:15:52:EF:F0:B0:2D:77:03:88:33:C1:30:3B:CF:64:73:61:46
Certificate issuer:       /CN=A918337F/serialNumber=31E7B10F718B1189A0319D6447E13F6C46407AA5
Certificate serial:       2771
Authority key identifier: 31:E7:B1:0F:71:8B:11:89:A0:31:9D:64:47:E1:3F:6C:46:40:7A:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/EC9B786E9D8811EB80D73886C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:38:39 +0000
ROA not before:           Thu 26 Jun 2025 15:53:33 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136402
IP address blocks:        45.114.232.0/23 maxlen: 24
                          163.47.224.0/22 maxlen: 22
                          2404:e400:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl
                          rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10097 (0x2771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918337F, serialNumber=31E7B10F718B1189A0319D6447E13F6C46407AA5
        Validity
            Not Before: Jun 26 15:53:33 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4415f-cb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:92:6e:aa:df:d1:20:81:e1:36:b0:ae:09:
                    25:f8:ec:72:76:cd:7f:70:85:a4:f4:1a:8c:fa:55:
                    a0:fc:d8:71:af:b4:d5:e0:53:66:1b:b8:44:77:8b:
                    fe:5d:5a:42:19:a3:ae:de:9a:16:27:0c:1d:8b:e7:
                    97:81:43:b0:3c:44:a8:0b:24:0c:ee:b0:7c:48:2a:
                    47:31:f8:63:0b:e1:13:25:e7:cb:7e:a4:3e:7b:97:
                    50:c5:a2:36:9c:c7:38:ce:74:0c:6d:e6:98:49:53:
                    cd:4e:14:27:71:22:53:d8:4d:76:1e:17:b5:b9:f9:
                    2b:9d:ab:e5:68:e9:bb:dc:f0:dc:a6:92:b1:09:52:
                    30:ba:7f:13:bf:d9:98:63:b7:fe:16:4b:6c:78:c4:
                    81:79:58:e7:3a:6a:45:8d:22:44:32:17:ea:30:74:
                    44:65:56:08:ae:a0:c1:28:d7:f8:b5:67:13:31:fe:
                    b7:bd:76:c7:71:85:56:ff:cf:16:6a:2d:85:9b:90:
                    6e:53:dc:d2:29:a9:40:24:1d:63:37:2c:8f:4f:54:
                    cd:8a:ab:9f:b0:f0:b9:46:9d:8c:af:eb:61:ef:6c:
                    a5:73:d9:9f:a7:b2:6f:e0:03:45:d8:78:8d:37:2b:
                    79:9e:71:11:0d:30:cc:d6:14:f1:70:9b:fc:93:81:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:65:15:52:EF:F0:B0:2D:77:03:88:33:C1:30:3B:CF:64:73:61:46
            X509v3 Authority Key Identifier:
                keyid:31:E7:B1:0F:71:8B:11:89:A0:31:9D:64:47:E1:3F:6C:46:40:7A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/EC9B786E9D8811EB80D73886C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.232.0/23
                  163.47.224.0/22
                IPv6:
                  2404:e400:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:00:5a:e1:98:24:e8:a6:5a:53:cf:41:dd:34:c6:50:2d:96:
         9b:b2:8c:49:f1:5d:f2:ce:d7:2a:38:f1:4a:28:c1:0c:39:48:
         2c:a6:34:4e:73:8d:29:56:be:97:24:dd:7c:ce:b9:ec:75:27:
         b7:77:49:07:15:55:cb:6f:fb:32:eb:af:4a:64:ca:13:51:dd:
         cd:2a:f0:7a:ce:e8:5a:f6:7b:4c:bb:e8:3e:6c:2c:81:45:40:
         71:95:93:6a:3c:d3:fa:ad:a7:54:bc:3c:81:84:ee:fe:2c:26:
         d4:55:83:2d:d2:32:ce:1b:d6:9f:56:d3:51:21:3e:76:29:da:
         26:38:15:ff:dd:5a:ec:9c:2a:aa:ec:a2:06:04:12:29:c5:e7:
         ff:f2:b2:9f:b0:0e:2b:c9:e8:d7:56:a3:bc:d3:5f:36:ee:31:
         59:10:d5:aa:f7:bf:fd:59:9f:f6:c1:35:95:30:44:8e:2f:55:
         76:bc:ec:0d:7d:6c:48:1c:70:57:7f:cb:f8:56:e1:1e:23:3d:
         64:bd:23:84:e8:cf:81:11:ab:fa:8d:d2:ab:45:87:7c:90:9c:
         5d:a3:0d:27:ac:07:21:7c:3b:ce:5e:6e:0f:53:d6:98:ba:ab:
         86:af:8e:3b:a6:a8:05:8f:d4:f0:36:12:32:b0:0f:ba:87:67:
         97:ca:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:55:17 2026 by rpki-client