Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/37778C1E130A11F18BFDFDDD163D8C67.roa
File:                     37778C1E130A11F18BFDFDDD163D8C67.roa (raw, json)
Hash identifier:          qD4FzBM9GJo1gDlcFGgv2r0jyPu0ckC4NLxrIlbLUp0=
Subject key identifier:   26:6A:84:AC:C9:CA:37:CD:F9:97:5B:03:7D:56:61:76:66:56:26:13
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0D21
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/37778C1E130A11F18BFDFDDD163D8C67.roa
Signing time:             Sun 04 Oct 2026 20:38:52 +0000
ROA not before:           Sun 04 Oct 2026 20:38:52 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     131471
IP address blocks:        180.178.130.0/24 maxlen: 24
                          180.178.131.0/24 maxlen: 24
                          180.178.136.0/24 maxlen: 24
                          180.178.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
                          rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3361 (0xd21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Oct  4 20:38:52 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac2b95c-485e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:45:b7:6c:fa:a6:db:55:4b:dc:dd:07:17:
                    ef:e7:34:d2:91:93:40:70:f1:26:a1:28:6a:5f:21:
                    d8:e9:f7:d7:51:0a:48:b7:86:48:c5:ed:bb:3e:3b:
                    18:93:29:c6:95:07:a6:39:a6:2e:6e:5b:ba:df:35:
                    5c:72:b4:51:db:cf:1e:da:a5:42:5c:8c:24:02:78:
                    71:f5:de:73:02:88:1d:94:c1:8e:90:00:1b:2d:f6:
                    a0:eb:47:04:a3:76:66:98:a5:cf:03:e3:9f:14:d3:
                    39:c5:ab:33:4e:da:12:96:a0:c6:84:8d:28:9c:8e:
                    ec:16:3d:35:90:6e:ad:e3:de:2d:d7:1d:6b:bf:52:
                    52:bd:cd:57:6c:b9:cc:f2:de:03:5b:e0:7f:61:93:
                    7a:0e:4a:41:ee:56:82:c1:e0:fb:3d:0e:3b:a4:9d:
                    75:24:01:74:48:59:4f:35:6c:94:86:cd:80:8f:37:
                    ff:da:de:15:93:2f:87:2e:6d:3a:f5:69:87:7c:33:
                    38:d8:82:f1:04:cf:73:1e:b3:e4:a1:70:d1:ca:3e:
                    34:03:58:2d:5e:aa:8f:d3:4b:c6:cc:fa:dd:e0:9e:
                    be:7d:c1:eb:f1:3b:e7:67:36:92:d3:86:9e:e4:f7:
                    9c:f9:be:1a:7c:87:33:45:5c:f1:fd:07:5b:77:73:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6A:84:AC:C9:CA:37:CD:F9:97:5B:03:7D:56:61:76:66:56:26:13
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/37778C1E130A11F18BFDFDDD163D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.130.0/23
                  180.178.136.0/24
                  180.178.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:6e:16:8f:89:c4:50:19:38:d4:9d:a6:9e:8e:63:e9:88:5a:
         7d:75:13:6e:2c:32:81:ff:ab:a1:08:1c:72:52:07:50:e2:0b:
         34:a4:cd:43:92:61:3e:a1:ed:e5:e5:57:cb:b1:b5:e6:d5:b9:
         e2:0c:93:90:5c:53:32:98:d1:81:26:c9:fd:a1:b6:31:88:d3:
         da:42:17:dc:80:cd:29:3b:5e:ae:ec:0b:3a:ed:0c:fd:91:87:
         c1:9d:21:b5:ea:be:76:ca:52:a7:c5:f3:f9:6b:f8:e2:8f:af:
         2e:e2:27:bd:27:a9:ac:d4:d8:b2:f7:36:00:6e:3e:bd:c4:df:
         a2:74:5f:24:67:87:5d:0e:3a:45:ef:9c:b3:14:ed:1c:9d:6d:
         7d:ad:dd:20:bc:47:28:ed:29:ee:59:a7:40:8a:d1:2f:82:ea:
         fe:46:6b:b4:d0:f8:15:95:08:dc:65:94:3b:11:6d:28:c2:54:
         4a:71:e2:b8:2f:5f:ce:61:0d:51:9b:00:86:61:00:3d:24:76:
         f8:02:ad:01:c7:f0:69:91:c6:d5:6b:f0:51:93:58:1f:5f:5e:
         c9:4e:d6:66:a2:ef:24:ce:dd:4f:dd:6b:f8:40:94:a1:30:f8:
         20:e7:00:b6:4e:69:a9:8c:65:ed:bd:e8:62:ed:b6:78:fd:b3:
         c1:8a:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:01:40 2026 by rpki-client