Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FC6691740CB511F187780B832C3D8C67.roa
File:                     FC6691740CB511F187780B832C3D8C67.roa (raw, json)
Hash identifier:          pFpCQ8IiZ9g1uuW1/0WtgKIkVmZ5BLDSjUkSQPO2znI=
Subject key identifier:   45:CA:8D:4A:AF:E2:5E:F1:0C:7D:D4:2F:9E:0B:9A:D9:D5:05:40:72
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D2D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FC6691740CB511F187780B832C3D8C67.roa
Signing time:             Sun 01 Mar 2026 21:27:20 +0000
ROA not before:           Wed 18 Feb 2026 10:38:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     213441
IP address blocks:        180.178.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11565 (0x2d2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Feb 18 10:38:39 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4af38-3f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:6b:1b:db:5b:c7:08:ec:fa:53:f9:24:65:
                    81:05:c7:02:0d:b4:f0:cb:92:d9:4f:8e:d8:dd:8c:
                    da:d6:74:2b:69:61:15:5e:61:f0:d0:e0:3e:97:84:
                    fc:26:ba:b1:e6:5e:9e:1f:5f:2c:f3:bf:27:d9:d5:
                    bc:fb:98:d8:ea:6e:d6:09:bc:45:a9:7e:76:9b:ab:
                    55:a4:86:10:09:7a:d2:e3:00:63:5f:c5:0b:6b:ba:
                    b6:ee:b4:bd:43:93:25:7e:63:f6:71:38:6c:9b:66:
                    95:d5:66:1b:bc:00:87:5c:39:58:d0:c7:08:4b:99:
                    02:70:1d:8e:e9:47:d7:77:ff:69:c8:6f:cd:40:2a:
                    9f:95:02:49:e7:d3:fa:d9:ff:af:31:8c:6b:1f:0b:
                    c7:96:fb:a9:57:3c:cf:19:bc:cd:ca:ea:a2:21:a5:
                    66:7b:f9:49:7c:06:70:85:0c:94:45:a0:d5:d9:00:
                    26:08:6c:07:ab:89:a7:ae:4a:83:ab:9c:c4:61:af:
                    9c:be:70:f3:5b:9c:c1:4c:3a:ce:ae:be:aa:ad:83:
                    d8:ba:03:6a:19:ab:92:48:fd:50:ad:7f:50:89:6b:
                    88:86:e0:c9:df:37:f8:6b:9d:95:cf:5a:c1:3a:ff:
                    00:f7:97:bd:ff:ca:51:75:06:96:9a:a0:cf:fa:92:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CA:8D:4A:AF:E2:5E:F1:0C:7D:D4:2F:9E:0B:9A:D9:D5:05:40:72
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FC6691740CB511F187780B832C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:29:89:38:ce:ec:cd:e9:0b:ef:68:71:5f:ed:8a:5e:d6:eb:
         a7:2c:6b:8f:3d:b3:aa:61:21:40:ed:7b:c8:8d:99:c3:ec:bd:
         d5:72:2e:d4:87:ce:3c:d5:16:08:53:51:37:30:9f:e8:43:bd:
         4b:13:31:44:4f:f1:5a:ba:ac:4a:f6:8a:41:97:53:29:a1:05:
         ca:21:75:05:f3:ab:54:13:05:4b:9d:15:88:eb:56:b1:9d:29:
         18:96:19:87:6c:41:e2:bd:6a:c4:02:ef:1b:d9:2b:31:e9:58:
         77:22:ed:5e:37:4f:ab:9c:d8:d3:50:67:bb:aa:2f:34:ee:69:
         88:5b:8d:a3:58:dd:d5:56:c0:44:e2:5a:c5:1c:7a:f5:8d:06:
         5e:bb:14:9e:69:22:fb:76:d2:a2:a9:a8:45:39:b5:88:9e:e3:
         ff:e2:3d:5b:26:78:15:7a:82:c1:5b:1f:dd:3c:40:35:b7:70:
         2a:48:93:de:fa:b0:36:c8:16:3a:c7:e8:4b:e1:c8:ea:4e:bd:
         c9:7b:da:2f:f5:04:68:56:18:15:f3:4a:93:37:12:42:52:c0:
         8d:97:e7:05:e1:81:b2:32:2c:e7:f7:bc:76:e3:61:e4:7b:8e:
         36:2b:c8:a1:3c:cf:8e:0f:81:94:f6:f1:00:3c:a7:f9:83:91:
         f8:e5:aa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:25 2026 by rpki-client