Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
File:                     B2690D6CCA5511EE9683413FC4F9AE02.roa (raw, json)
Hash identifier:          A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=
Subject key identifier:   79:61:A9:5F:DC:31:9D:B1:4E:91:36:46:99:30:66:CE:52:B9:6E:35
Certificate issuer:       /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial:       35BA
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:53:44 +0000
ROA not before:           Fri 24 Oct 2025 14:30:25 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151981
IP address blocks:        118.179.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
                          rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13754 (0x35ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
        Validity
            Not Before: Oct 24 14:30:25 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a47d28-6c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9a:de:4e:4b:cf:be:99:5b:ca:00:5a:93:df:
                    92:35:fe:7d:bc:a1:86:31:3c:be:84:21:a3:95:d2:
                    81:98:7e:f1:06:cb:ba:40:b6:e9:47:a7:b0:86:b8:
                    1c:9b:4e:4a:ce:d1:73:01:a5:ab:d1:ae:73:9f:01:
                    dc:03:8f:4a:18:68:0a:a8:48:e5:cf:4a:00:67:3f:
                    cc:dd:72:e4:a0:d8:47:6d:61:c8:91:6e:68:f2:9c:
                    78:c1:4b:2f:cc:1b:87:35:1d:f9:2e:ae:9f:5a:b9:
                    4c:b7:ef:b6:ea:54:9c:b3:6a:5d:61:4d:d5:69:00:
                    10:6b:1e:33:6b:59:1c:d6:e9:58:1a:bb:f2:06:43:
                    24:95:9d:db:4a:7c:eb:b6:77:fa:fe:42:f4:c0:e7:
                    13:ce:7e:06:c7:1a:2b:47:e8:ce:4e:e4:28:62:40:
                    3d:a5:90:f4:56:fd:14:b8:c9:9e:91:a1:3d:ab:17:
                    ab:60:af:1c:99:e5:a5:9f:53:bf:2e:10:77:10:e8:
                    f0:ee:1c:f7:86:b8:8b:fe:93:88:21:cb:c4:67:7d:
                    c7:30:f2:58:4e:7b:08:a4:52:cd:ac:f5:80:19:ee:
                    e0:15:96:10:96:c6:27:7f:00:f9:21:e4:57:c9:82:
                    ca:ef:3e:5b:71:56:c8:d4:e1:2d:f4:f0:1c:cb:eb:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:61:A9:5F:DC:31:9D:B1:4E:91:36:46:99:30:66:CE:52:B9:6E:35
            X509v3 Authority Key Identifier:
                keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.179.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:7a:99:63:6a:13:61:18:db:ad:45:13:9d:b4:ff:8c:92:b4:
         fe:84:20:59:f2:fa:4a:84:24:7b:ba:b2:6a:5b:74:7e:31:c6:
         f5:65:b0:e4:ba:5e:94:fe:7f:ae:eb:2f:22:1a:ee:40:d6:5c:
         d7:0d:13:d7:07:e1:62:ab:0b:95:d9:58:37:ab:6a:fc:a4:c4:
         fc:7e:e0:ee:95:cf:2e:53:72:2c:10:99:9e:63:2e:75:13:d2:
         14:76:95:22:fa:92:86:f9:86:c3:a9:a2:d2:f9:62:90:4a:f6:
         d3:7b:88:98:21:55:09:2f:e9:c6:df:6d:d7:2d:c7:83:30:58:
         1a:6d:ee:01:13:94:62:fa:7c:61:8c:f6:97:d5:e2:4a:21:cd:
         f0:b8:3a:1f:eb:40:bf:cb:9f:07:c8:3d:01:e4:68:54:2b:16:
         ac:86:77:7b:c5:be:b0:f4:65:ec:52:76:13:2a:44:c0:a4:b6:
         ba:85:20:6c:d0:a3:02:0e:06:67:24:da:b7:1e:e1:d9:74:9c:
         13:55:69:ea:0d:eb:b1:d2:62:52:da:5f:84:de:54:8d:9f:ca:
         51:b4:85:23:4d:0c:43:b4:fa:64:a7:9e:12:0f:80:85:0e:9e:
         26:70:89:c1:db:2a:c0:b1:75:dd:30:c9:ae:44:74:a0:f3:8d:
         98:dc:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:43 2026 by rpki-client