Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/004E48CA008611EEA0F2B440C4F9AE02.roa
File:                     004E48CA008611EEA0F2B440C4F9AE02.roa (raw, json)
Hash identifier:          SmQ5CGEJCE3s9/YNxwJXtFcb33wFKBOX7DlFwf6j2G4=
Subject key identifier:   32:6D:C1:7E:B4:54:2C:D2:31:49:DD:E4:5F:4B:61:6C:B7:33:D9:5A
Certificate issuer:       /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial:       3145
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/004E48CA008611EEA0F2B440C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:54:11 +0000
ROA not before:           Wed 30 Apr 2025 15:52:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141180
IP address blocks:        180.87.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
                          rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12613 (0x3145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
        Validity
            Not Before: Apr 30 15:52:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a47d43-1d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:13:fe:0a:bd:da:84:29:96:5d:06:be:55:
                    86:02:9f:1b:81:8d:62:8a:74:92:52:be:82:6d:c8:
                    46:37:b6:56:7d:f7:c2:ef:d2:5b:4f:0f:66:9b:32:
                    a3:15:da:12:d7:08:20:4a:46:fc:44:ad:57:46:34:
                    8a:ba:9f:62:5b:16:39:dd:bb:4e:9c:d6:dd:d4:78:
                    b6:c1:bd:93:38:09:32:58:09:e7:0d:c9:7c:2a:d8:
                    3e:89:7d:30:04:0f:79:65:d6:87:6a:26:87:7a:c8:
                    6e:7c:ba:86:01:2a:b8:31:9c:44:61:66:0b:65:ec:
                    5b:06:46:cd:26:cf:06:b0:a5:08:b6:dd:3e:14:b2:
                    80:ad:4e:e0:36:ec:98:85:65:18:86:1b:c4:dd:2a:
                    f6:7f:86:a1:b2:f6:4d:32:5b:dc:2d:43:ec:2a:f6:
                    96:50:1e:ff:bc:55:02:86:40:67:2a:bc:de:c5:49:
                    58:2d:f6:99:81:75:90:e1:b9:8d:43:62:3b:d6:58:
                    cd:f4:32:b0:0d:04:a0:1b:01:a3:39:9d:8e:5e:ca:
                    dc:f3:85:80:47:f9:c0:dd:c5:ca:4d:e3:c1:a8:a6:
                    6f:25:fc:19:7a:47:d9:79:ad:ff:54:d5:92:8d:63:
                    96:b1:8b:2e:59:c5:f1:5c:34:3c:fb:70:58:28:ac:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6D:C1:7E:B4:54:2C:D2:31:49:DD:E4:5F:4B:61:6C:B7:33:D9:5A
            X509v3 Authority Key Identifier:
                keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/004E48CA008611EEA0F2B440C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.87.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:77:fe:01:82:7b:72:cb:83:9c:5c:4a:e2:b8:1c:12:e5:76:
         dd:d0:94:d2:f0:66:45:f7:56:8e:14:95:45:c0:05:73:7f:61:
         7a:11:0a:7b:d5:f2:80:26:88:4e:15:df:b4:74:94:5e:50:ba:
         48:14:c0:5c:81:19:cc:46:8a:31:3e:6c:1e:aa:53:8a:e1:5d:
         d6:fb:97:ed:b1:b2:3d:fe:bb:02:95:55:aa:90:eb:b6:1c:23:
         a2:ed:a1:7f:68:b6:40:a5:25:07:78:c3:95:e3:07:3f:80:fb:
         4d:ec:68:75:76:c8:48:5b:18:92:26:0f:3f:0f:c1:18:2b:e3:
         3c:3d:03:34:25:6d:07:7f:e0:da:57:6a:b6:59:2c:ec:e3:ec:
         a7:07:8d:20:a8:74:06:b9:8e:83:3e:37:7f:87:99:46:34:77:
         7d:06:34:52:f6:23:f1:12:e3:36:ae:5e:c2:c6:38:10:98:ac:
         44:b6:21:44:49:f9:7c:43:cf:6e:f2:ab:03:e4:c7:9d:4f:d2:
         44:88:aa:ee:d1:47:f3:2d:29:5a:d8:82:a5:2a:64:5f:6b:9b:
         1f:90:46:8e:3a:28:bf:23:b4:7d:2a:ad:61:f0:3e:4c:7a:62:
         a0:da:3e:e1:80:92:9f:64:5a:1c:2a:d0:b3:d5:9d:af:72:70:
         3b:9e:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:17 2026 by rpki-client