Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
File:                     76C5842CC3DD11EDAAED714EC4F9AE02.roa (raw, json)
Hash identifier:          pQvpTI5eSHdU4vC6OQBhD4Hgt3Ete3VDcSJCkrNyhkE=
Subject key identifier:   95:2D:DB:DC:99:C0:55:7D:14:2B:A6:C9:E3:89:96:89:90:80:2A:3D
Certificate issuer:       /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Certificate serial:       067F
Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:22:56 +0000
ROA not before:           Wed 30 Jul 2025 23:35:07 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38829
IP address blocks:        118.127.168.0/21 maxlen: 24
                          118.127.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
                          rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663 (0x67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
        Validity
            Not Before: Jul 30 23:35:07 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a44bc0-0424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:14:c7:d8:f9:58:3b:f3:43:fc:27:5f:73:2b:
                    18:4e:07:60:a7:cf:0f:5f:90:51:94:90:bc:3c:43:
                    fa:b4:d5:1e:29:44:94:a8:c4:04:6a:f6:27:f7:ca:
                    f6:00:fd:54:1e:b5:19:86:7b:05:ac:eb:eb:3b:5f:
                    d1:4b:a9:83:1b:b4:92:88:86:3b:3c:2d:db:7f:f2:
                    e2:d7:a1:6d:15:7d:4f:1e:0c:19:23:98:7d:cc:cd:
                    93:70:c3:52:54:8c:59:48:11:b7:99:d9:d7:4c:c2:
                    14:3f:ef:b8:c5:77:32:46:1e:e1:2b:8f:cd:5e:5d:
                    ce:ed:06:52:dd:8f:91:30:fa:75:4b:8e:dd:68:3c:
                    91:f0:19:60:a0:39:5d:73:dc:75:8b:26:c5:32:5d:
                    98:b0:48:44:6a:57:76:2d:f9:d1:41:72:77:0f:ff:
                    d4:e6:9d:2e:c1:7a:dd:70:a0:79:5f:21:9a:64:a4:
                    25:2a:84:db:66:3d:45:57:c7:e8:52:35:77:b4:f9:
                    07:9a:df:2f:c3:92:17:ef:cb:15:31:19:ff:aa:e8:
                    35:39:a6:13:c6:8a:73:f4:39:57:4a:30:56:31:cd:
                    af:66:a4:9d:95:e7:8e:58:3f:f2:d1:db:02:40:b7:
                    62:fc:9a:89:4b:74:9f:3a:54:46:52:c3:93:31:31:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2D:DB:DC:99:C0:55:7D:14:2B:A6:C9:E3:89:96:89:90:80:2A:3D
            X509v3 Authority Key Identifier:
                keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.127.168.0-118.127.191.255

    Signature Algorithm: sha256WithRSAEncryption
         0f:9d:4e:35:72:66:ae:52:d5:c1:8b:4b:ab:f2:1f:2e:4d:e6:
         41:95:9e:73:6f:d4:a5:4a:06:c2:02:7f:f6:4d:da:1a:d2:0e:
         b0:aa:97:bc:ef:56:a5:b8:84:7b:5a:7e:26:a1:85:ad:2e:2e:
         e2:3e:d3:9a:b2:f7:50:eb:bb:be:0f:6b:81:56:2c:74:78:5e:
         28:f5:5e:b7:93:25:44:ef:fd:20:14:cc:8a:9d:69:33:47:e0:
         71:4e:4b:4a:d7:ac:e7:cf:41:5a:fd:38:bf:82:39:10:03:21:
         c9:84:9c:2c:9f:b7:5d:0a:61:39:a3:55:45:35:97:13:12:7e:
         7d:0a:3b:8d:58:09:1e:e1:8c:6d:ab:c0:61:77:d7:42:62:3a:
         1e:ca:da:b5:f1:75:1c:5a:09:fb:cc:53:e6:f9:dd:68:de:20:
         05:07:f5:7e:53:b9:cf:49:d2:b7:fa:7f:19:78:76:bd:e3:17:
         16:a0:2f:20:12:32:b0:d2:7d:f1:49:ad:77:16:11:80:b3:ee:
         d4:45:ef:af:85:a9:5d:fa:ed:52:eb:7c:09:20:21:5a:a5:28:
         cc:bb:08:5b:c5:df:c0:cb:2a:e2:ec:e3:0f:f9:6a:04:0d:ac:
         3e:d3:a5:fb:ff:46:cb:2e:02:cc:16:3f:8d:62:dc:41:64:2f:
         b3:2f:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:23 2026 by rpki-client