Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/0D0118A89A4C11EEB7AE8812C4F9AE02.roa
File:                     0D0118A89A4C11EEB7AE8812C4F9AE02.roa (raw, json)
Hash identifier:          z7xT0Q19l8as89JVcBqiCD1+uHSolXQv/bw/RnKomw0=
Subject key identifier:   38:4A:8A:0D:D7:02:2E:DF:F8:2A:78:9A:BC:E4:55:79:BD:A2:50:7F
Certificate issuer:       /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
Certificate serial:       01A7
Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/0D0118A89A4C11EEB7AE8812C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:28:43 +0000
ROA not before:           Sat 03 Jan 2026 03:25:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152152
IP address blocks:        210.79.170.0/24 maxlen: 24
                          210.79.171.0/24 maxlen: 24
                          2001:df3:38c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl
                          rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A9C8, serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
        Validity
            Not Before: Jan  3 03:25:39 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a414db-0cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:36:b6:f6:91:97:c9:41:32:af:3f:b7:68:
                    7e:d0:aa:90:bf:cb:27:db:f9:fb:1c:33:2a:49:58:
                    37:94:7b:20:72:7e:f6:6e:2f:ef:f3:e2:b3:86:94:
                    f0:43:a8:9c:1a:b3:2b:64:8e:2a:53:93:e4:d2:fc:
                    ac:5a:0a:36:50:2a:10:fe:19:4d:31:bc:50:59:cb:
                    d2:45:69:e6:ca:ee:94:ed:3e:12:b1:13:42:88:92:
                    a6:ec:2e:13:bb:da:5e:20:c5:11:f0:8a:cb:ea:35:
                    5e:91:fe:42:8b:9c:d3:5e:a8:2a:39:78:e8:7c:dd:
                    ec:f0:98:0a:4c:6b:8e:23:92:1f:f9:a9:61:dc:fd:
                    d2:b4:f5:d0:ed:19:ee:19:e8:e9:7e:db:58:4b:f3:
                    10:16:eb:6d:24:eb:f7:16:af:99:58:0d:4b:12:e5:
                    86:c5:09:64:85:42:d0:27:b1:41:42:25:6b:bf:a9:
                    3f:40:40:e2:5e:5b:70:fb:42:90:b0:ec:89:59:39:
                    6e:a8:62:56:db:d0:e1:a4:91:3f:28:6e:81:4d:27:
                    df:a0:6f:7d:db:2c:9b:48:b6:e5:82:94:de:50:e5:
                    35:1d:03:2c:1a:fa:50:7f:a4:44:a7:ec:9e:54:ea:
                    13:6f:67:63:ee:33:93:d7:cb:05:b3:6e:1d:b2:3d:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4A:8A:0D:D7:02:2E:DF:F8:2A:78:9A:BC:E4:55:79:BD:A2:50:7F
            X509v3 Authority Key Identifier:
                keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/0D0118A89A4C11EEB7AE8812C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.170.0/23
                IPv6:
                  2001:df3:38c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:be:77:b4:bf:29:ff:83:20:fe:48:07:66:87:cb:08:6b:97:
         4a:e8:93:8c:21:c2:c4:9e:5f:e9:69:ad:5d:3d:3e:c9:fe:bd:
         c5:47:18:b7:50:1b:7d:44:51:1e:95:b2:0f:55:bd:b2:c8:2d:
         28:c0:c7:b7:2b:ba:91:1e:fb:df:48:01:77:09:54:53:ed:7a:
         5d:f6:b6:51:0c:94:1b:a2:6f:7f:7d:44:aa:4c:05:a8:99:8b:
         6a:ca:46:86:75:bb:8a:33:c9:b6:49:ce:da:d1:d3:5c:f7:2e:
         c5:0f:71:03:d2:37:04:30:f2:1c:30:d7:7a:74:e0:02:ed:80:
         ca:ad:14:36:98:2a:90:5b:e8:41:f6:d6:be:a0:29:ca:c7:9f:
         b5:58:6c:89:43:e8:0d:fb:ad:f5:0e:fc:9d:19:6d:c0:c0:1d:
         c9:6f:54:6a:fc:63:69:b8:b6:9e:21:f7:61:c1:31:4f:ca:3d:
         e2:5d:31:43:28:8b:f0:1a:9c:2a:e3:60:77:83:91:6d:c8:ab:
         38:6c:cc:e1:27:df:af:f5:c9:62:91:e6:a6:5e:f7:fa:75:a8:
         20:84:1f:33:7c:a5:76:ea:2e:a1:03:e7:c9:7c:a3:d2:4f:8d:
         07:54:4d:f4:d1:8e:a7:09:f8:42:ef:6f:01:2a:93:19:95:58:
         20:8d:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:31 2026 by rpki-client