Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/7BABB4BE884C11EE81C71A38C4F9AE02.roa
File:                     7BABB4BE884C11EE81C71A38C4F9AE02.roa (raw, json)
Hash identifier:          HevTC5ZTqWMZdb2lCr7Xxf/uzITO4Vvq7vTDaOoX1vI=
Subject key identifier:   C2:4C:88:63:DA:8F:A2:64:E0:D0:FA:48:01:AF:D8:CF:0D:06:0E:65
Certificate issuer:       /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Certificate serial:       01BE
Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/7BABB4BE884C11EE81C71A38C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:53:42 +0000
ROA not before:           Thu 15 Jan 2026 03:22:32 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     133126
IP address blocks:        180.94.0.0/24 maxlen: 24
                          2401:51a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
                          rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
        Validity
            Not Before: Jan 15 03:22:32 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a46f16-ba09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:72:ef:85:db:3f:c6:15:f1:e5:11:fb:c3:
                    8d:34:2d:57:f8:6c:ab:f7:f5:04:52:89:de:cf:79:
                    2b:cb:2c:68:5d:c3:41:03:30:99:09:74:fe:5e:1d:
                    7c:f4:d2:fd:18:a8:c0:ef:dc:89:bb:68:95:42:d8:
                    9c:4f:f4:77:ff:04:b3:82:cf:b7:0a:33:1d:6d:76:
                    f9:5b:21:50:21:39:17:6d:b2:40:86:fd:f5:52:97:
                    66:24:72:d1:47:85:cd:64:c1:02:f4:a3:5a:72:0a:
                    70:7c:ec:b5:48:c5:2f:ab:93:79:0b:05:5e:55:13:
                    56:82:81:0d:09:f8:41:70:05:22:86:76:0f:6a:66:
                    2e:35:ac:22:8c:66:8a:2b:fd:c8:bb:81:94:7e:58:
                    b1:be:9f:a2:b2:ec:01:f4:fb:ba:5b:cb:e7:46:92:
                    40:a5:02:a3:8c:a3:2e:2f:c4:3f:a0:ca:71:bb:90:
                    69:fd:6b:e1:bc:10:61:d2:b5:d8:f1:bb:48:1f:d3:
                    68:02:38:22:3c:58:fb:a0:fc:6b:1b:a4:35:36:37:
                    5c:05:6e:fc:a2:5c:b9:6c:6f:78:34:f1:04:f8:18:
                    29:54:74:32:f1:b1:9a:76:91:7c:01:41:49:d2:c5:
                    50:0b:18:b1:69:b0:f3:a0:1b:f2:52:e4:97:79:8c:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:88:63:DA:8F:A2:64:E0:D0:FA:48:01:AF:D8:CF:0D:06:0E:65
            X509v3 Authority Key Identifier:
                keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/7BABB4BE884C11EE81C71A38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.0.0/24
                IPv6:
                  2401:51a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:4a:0b:96:30:62:a0:33:29:eb:8d:c2:a0:24:0e:d7:86:
         13:25:61:54:75:63:7d:a6:76:eb:73:3c:1c:d3:1d:23:b5:b4:
         df:3b:6f:e1:c3:51:73:bb:4a:80:73:70:30:36:ff:88:cb:5d:
         ce:4d:40:11:0f:41:d8:a9:6d:91:8d:18:48:a3:ba:1b:57:1e:
         21:20:a0:1c:77:17:24:65:3f:91:7a:ca:3c:f9:25:a8:73:b6:
         38:ea:ab:e9:fd:84:bb:d0:fb:77:6c:f1:80:86:7a:29:a3:5d:
         b7:db:ea:73:05:72:fa:92:df:ce:54:67:0a:2b:88:c9:82:c3:
         af:38:79:1d:d3:d7:b9:67:da:29:04:d4:cc:15:14:6e:ba:2d:
         84:b8:46:41:a6:c1:27:cc:f8:6b:b1:82:f6:3c:aa:3e:f2:9e:
         0f:98:5b:a2:55:0e:ad:04:fe:96:cf:2d:0a:cb:59:f8:ca:d8:
         78:01:71:e1:a9:2c:6c:bd:af:30:7a:68:22:12:b4:e7:59:3a:
         12:e3:c9:39:61:3f:cf:45:0d:45:7c:a8:52:b0:13:31:69:16:
         c6:da:24:0a:c2:b8:19:39:a3:04:75:bc:9d:b1:56:de:96:cf:
         2c:06:4d:13:66:2c:a5:4f:39:a5:9d:3b:40:3f:a6:ca:a5:06:
         bb:cf:31:1e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3NjcxMTAvBgNVBAUTKDg0NjhCMDIxOTdGQzlCNzcwQUY4NDA1NTdCRjQxNUEw
QjYxMzgyMEQwHhcNMjYwMTE1MDMyMjMyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmYxNi1iYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs2Vy74XbP8YV8eUR+8ONNC1X+Gyr9/UEUonez3kryyxoXcNBAzCZCXT+Xh18
9NL9GKjA79yJu2iVQticT/R3/wSzgs+3CjMdbXb5WyFQITkXbbJAhv31UpdmJHLR
R4XNZMEC9KNacgpwfOy1SMUvq5N5CwVeVRNWgoENCfhBcAUihnYPamYuNawijGaK
K/3Iu4GUflixvp+isuwB9Pu6W8vnRpJApQKjjKMuL8Q/oMpxu5Bp/WvhvBBh0rXY
8btIH9NoAjgiPFj7oPxrG6Q1NjdcBW78oly5bG94NPEE+BgpVHQy8bGadpF8AUFJ
0sVQCxixabDzoBvyUuSXeYzWjwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMJMiGPa
j6Jk4ND6SAGv2M8NBg5lMB8GA1UdIwQYMBaAFIRosCGX/Jt3CvhAVXv0FaC2E4IN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc2Ny83QkM2MUQ4Mjg4
NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0zY0stRUJWZV9RVm9MWVRn
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hHaXdJWmY4bTNjSy1FQlZlX1FWb0xZVGdnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTg3NjcvN0JDNjFEODI4ODRCMTFFRTgxN0ZCNjdGQzRGOUFFMDIvN0JBQkI0QkU4
ODRDMTFFRTgxQzcxQTM4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAtF4AMA0EAgACMAcDBQAkAVGgMA0GCSqGSIb3DQEBCwUAA4IBAQBm
u0oLljBioDMp643CoCQO14YTJWFUdWN9pnbrczwc0x0jtbTfO2/hw1Fzu0qAc3Aw
Nv+Iy13OTUARD0HYqW2RjRhIo7obVx4hIKAcdxckZT+Reso8+SWoc7Y46qvp/YS7
0Pt3bPGAhnopo1232+pzBXL6kt/OVGcKK4jJgsOvOHkd09e5Z9opBNTMFRRuui2E
uEZBpsEnzPhrsYL2PKo+8p4PmFuiVQ6tBP6Wzy0Ky1n4yth4AXHhqSxsva8wemgi
ErTnWToS48k5YT/PRQ1FfKhSsBMxaRbG2iQKwrgZOaMEdbydsVbels8sBk0TZiyl
TzmlnTtAP6bKpQa7zzEe
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:20 2026 by rpki-client