Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/71403B04F7E511EEBC67981CC4F9AE02.roa
File:                     71403B04F7E511EEBC67981CC4F9AE02.roa (raw, json)
Hash identifier:          /m0o2RYXlVzJfDGAuvr1e/kZrSjtpAFdFgupCqbwiOo=
Subject key identifier:   CD:E0:96:0D:48:E2:4D:99:3E:EC:33:5C:33:6D:58:2D:7F:33:FA:E6
Certificate issuer:       /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Certificate serial:       01C7
Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/71403B04F7E511EEBC67981CC4F9AE02.roa
Signing time:             Thu 27 Aug 2026 03:54:00 +0000
ROA not before:           Thu 27 Aug 2026 03:54:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     7637
IP address blocks:        192.190.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl
                          rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
        Validity
            Not Before: Aug 27 03:54:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8fb4d8-8415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:d3:bd:62:a9:0a:8a:ec:02:84:bd:87:6a:
                    90:a7:58:29:b9:44:91:7c:73:e6:3e:7c:45:5c:7e:
                    96:50:f0:d0:40:c2:c3:5f:97:6e:16:34:f8:1e:b3:
                    7f:c1:8d:08:60:76:87:03:ac:07:b6:13:76:c2:bc:
                    e9:7b:3a:d8:fa:81:f6:83:b7:12:d6:63:e7:48:8b:
                    61:51:78:b8:98:d8:40:ff:97:92:f7:17:66:6f:2e:
                    65:80:12:61:84:c2:8f:b6:cb:05:02:f3:dd:b4:94:
                    a8:ac:7f:5d:44:7b:d8:bb:fa:f7:b5:a1:f1:99:49:
                    51:e3:01:87:69:1f:4c:b0:be:53:e9:a6:fd:56:18:
                    0a:91:4b:0d:34:d5:07:29:01:5c:9c:01:94:c2:09:
                    8e:21:f2:02:4d:07:00:ea:be:a5:b0:82:31:8a:88:
                    4e:a1:22:9e:e6:c8:5c:99:d5:24:67:de:5a:d0:70:
                    83:a4:a7:ac:33:23:e5:a0:da:6e:fc:4f:7b:ac:0a:
                    ed:c7:2f:8a:a9:ce:d4:be:ad:b0:a3:70:39:1d:c1:
                    5c:0a:16:31:9d:7d:c8:f1:14:4b:7e:cc:15:53:05:
                    0d:6c:09:6e:ba:a6:db:a9:3b:5f:1b:71:18:28:9a:
                    76:67:99:2c:22:7c:39:b7:fb:f6:d2:21:45:cc:b1:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E0:96:0D:48:E2:4D:99:3E:EC:33:5C:33:6D:58:2D:7F:33:FA:E6
            X509v3 Authority Key Identifier:
                keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/71403B04F7E511EEBC67981CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:1f:7b:31:d9:04:06:66:8e:70:7b:57:84:ec:dd:03:a6:cf:
         ff:fa:5d:84:b5:55:90:47:fe:8e:00:83:4d:ce:23:9d:7b:94:
         94:53:2d:a9:7a:16:0d:ea:24:75:9e:6a:ba:02:9f:e7:82:7f:
         fe:8f:e5:f6:92:62:12:58:95:23:4b:93:23:da:f2:44:00:51:
         5d:ee:7a:c6:68:ac:c6:97:10:ed:76:20:d4:83:74:9b:82:c6:
         10:d0:6f:fc:62:1d:70:c5:27:64:21:bd:47:8b:26:41:d8:12:
         13:11:b9:3f:31:a2:b2:22:4c:9b:73:b4:60:d8:2d:28:9e:d5:
         7d:3d:0e:ef:a8:9d:66:64:6d:ab:49:30:3a:71:d8:62:d0:67:
         c6:df:ec:47:85:db:22:bc:48:7c:37:20:e5:3a:95:b8:cb:dd:
         46:aa:3a:2c:87:94:4d:50:97:3c:f5:e6:d9:74:82:a5:00:c0:
         a4:70:55:73:58:83:bb:a2:39:38:d7:2f:18:1d:89:14:04:16:
         65:19:28:cf:aa:31:64:b4:36:c0:68:5c:a7:ca:5d:df:d3:f5:
         a2:05:ee:63:2a:f0:6d:42:be:3e:ca:1b:dd:74:30:a8:b0:39:
         8c:d6:b5:0d:11:6d:37:a9:ba:ed:9a:a3:6b:31:af:8a:3f:2e:
         81:31:81:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:57:38 2026 by rpki-client