Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/177E82C884B211F0BC4C5E79C4F9AE02.roa
File:                     177E82C884B211F0BC4C5E79C4F9AE02.roa (raw, json)
Hash identifier:          nQ8/S4fDZyv48myDWztXRtqlsXhCCaXTuQ/nJrb13Q8=
Subject key identifier:   DB:9C:11:C3:BB:DD:AC:52:68:8F:08:CE:E3:40:F4:58:EB:C7:51:2C
Certificate issuer:       /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Certificate serial:       98
Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/177E82C884B211F0BC4C5E79C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:27:55 +0000
ROA not before:           Sun 01 Mar 2026 09:27:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133182
IP address blocks:        2001:df4:c5c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
                          rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
        Validity
            Not Before: Mar  1 09:27:55 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4069b-8fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:7b:e2:4d:b6:90:c1:80:e3:18:5b:6b:33:
                    3c:6a:07:10:7f:77:aa:d3:15:9b:bc:a4:71:33:99:
                    c6:89:9f:33:3d:40:ba:ac:41:d8:99:55:f0:cc:cb:
                    2b:4c:8e:ee:63:d1:9b:97:c6:07:51:9c:d1:9d:57:
                    44:d5:8d:89:8c:72:c8:90:0d:ed:39:b8:19:9f:28:
                    c9:27:61:61:99:8f:1c:ce:5c:9d:98:cc:93:16:60:
                    4d:15:2d:45:5d:9e:8d:cb:6c:a1:56:20:da:19:12:
                    90:dd:8a:3b:ac:94:96:bb:ea:04:12:4a:c1:84:d0:
                    57:43:af:2e:e6:a4:62:16:f5:8b:ed:c3:11:97:0b:
                    71:34:a9:25:5a:a5:fc:e8:1a:73:6b:4b:d0:90:4f:
                    04:91:3b:f1:2e:50:da:26:a8:ba:02:30:3c:32:07:
                    a8:b1:95:47:30:b3:07:56:94:a6:5b:4f:73:02:f8:
                    33:57:fa:f5:26:78:fe:fc:63:b7:db:84:9a:74:2e:
                    81:52:d9:01:85:1a:f5:67:23:28:d6:12:d9:c4:34:
                    9b:e8:fd:40:17:9a:50:b5:82:ba:2c:34:c1:10:2e:
                    de:88:98:54:0c:c1:79:44:da:62:49:b2:d6:ce:53:
                    79:5b:00:ed:2e:83:41:32:51:e8:a9:fb:14:29:a4:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9C:11:C3:BB:DD:AC:52:68:8F:08:CE:E3:40:F4:58:EB:C7:51:2C
            X509v3 Authority Key Identifier:
                keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/177E82C884B211F0BC4C5E79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:c5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:1a:7b:e6:cf:29:af:3f:5d:4c:bd:36:57:e8:bf:eb:12:ee:
         2e:a4:6c:ed:39:37:42:43:26:ac:b9:35:fa:2b:12:19:6a:7e:
         fa:30:7f:64:1f:06:6f:36:85:cf:f1:05:2d:6f:82:ed:19:fb:
         dd:3c:46:f0:36:e4:4a:08:44:de:18:bf:08:b4:df:c2:75:e9:
         1c:e0:38:f5:07:e0:27:a4:67:64:ab:b1:41:7c:b0:3b:99:21:
         7f:b5:6e:7f:51:0e:bf:89:df:b2:aa:60:0c:a4:20:83:0f:73:
         b4:a4:32:58:a4:fd:05:3a:29:1f:05:d2:c4:45:1b:73:24:0e:
         86:0c:61:95:8c:e8:c5:f1:d4:1f:8d:a4:4e:ae:08:8c:07:27:
         e0:15:53:01:b6:42:5d:26:a9:cb:96:48:6a:3c:b9:f5:ca:74:
         0a:b0:76:66:93:67:26:cc:f5:8d:5f:84:1b:68:df:13:01:7f:
         e2:bb:ba:17:ff:c7:44:9e:6f:cb:a0:1a:f4:51:ee:83:27:a1:
         71:aa:d8:d4:6b:26:48:76:1d:d9:15:8c:3f:ab:75:0c:84:76:
         9f:0b:7b:b9:c3:40:f7:67:54:e0:25:1d:79:35:24:c2:9b:3d:
         db:4d:6c:aa:00:34:df:68:3c:54:4a:80:2f:47:06:6c:63:e4:
         1e:d7:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:28 2026 by rpki-client