Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/A7DEA0DAC47D11ECB544A26DC4F9AE02.roa
File:                     A7DEA0DAC47D11ECB544A26DC4F9AE02.roa (raw, json)
Hash identifier:          f9p5nsZx4jMNkGPcJOkOhsmegpIzdL9T3kUEUM+NbsU=
Subject key identifier:   00:BE:93:22:94:04:83:22:EF:1A:16:87:81:20:18:5A:CD:99:67:92
Certificate issuer:       /CN=A9130138/serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8
Certificate serial:       0362
Authority key identifier: B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/A7DEA0DAC47D11ECB544A26DC4F9AE02.roa
Signing time:             Thu 21 Aug 2025 01:08:23 +0000
ROA not before:           Thu 21 Aug 2025 01:08:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55424
IP address blocks:        185.178.144.0/24 maxlen: 24
                          185.178.145.0/24 maxlen: 24
                          185.178.146.0/24 maxlen: 24
                          185.178.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl
                          rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130138, serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8
        Validity
            Not Before: Aug 21 01:08:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a67187-d51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:c0:c1:8f:bd:05:4e:54:5e:69:20:ea:c4:
                    05:25:52:c9:77:c5:3f:ef:60:d9:2e:22:bc:6d:fb:
                    3c:27:39:b9:c2:94:11:fa:8e:1a:4d:dd:14:d7:59:
                    7c:e8:1d:e4:fb:92:13:c5:e7:02:95:53:6f:ed:d1:
                    74:5a:8b:c3:8a:fc:ca:9a:dd:77:c6:9d:ab:65:3e:
                    99:a2:5c:d0:a4:7a:f9:db:77:e1:86:9a:ab:01:c4:
                    1c:c5:5f:ae:ff:ea:e2:94:3c:78:b5:d0:f5:55:f2:
                    22:da:1a:60:e3:86:b0:69:a3:88:a4:65:26:27:06:
                    a0:6a:0d:b5:89:7e:6a:1c:22:2e:0f:89:b6:a3:4b:
                    77:29:00:cd:d8:04:03:1c:aa:10:be:d3:29:08:f3:
                    3b:87:de:86:4c:64:56:96:f5:fe:c1:4f:22:e8:0b:
                    3f:64:9d:97:c2:34:4e:8b:be:2e:99:ed:3a:f0:93:
                    5d:2d:e9:3b:31:da:56:d8:e1:64:33:59:b7:23:3e:
                    68:f5:20:ca:24:c8:c7:37:52:93:c4:d5:e1:b5:b0:
                    8b:49:c3:78:45:e7:0a:d0:e0:4a:48:d4:3b:5b:21:
                    b9:d1:b1:6f:4b:2a:db:9a:4e:7e:34:0d:b3:54:d3:
                    5d:29:3d:50:dc:39:4e:d7:17:b8:7e:85:07:2c:85:
                    97:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BE:93:22:94:04:83:22:EF:1A:16:87:81:20:18:5A:CD:99:67:92
            X509v3 Authority Key Identifier:
                keyid:B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/A7DEA0DAC47D11ECB544A26DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.178.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:09:36:f4:6c:f5:5c:cd:e9:b5:f4:9a:8b:19:fc:95:55:5a:
         2f:33:0b:7a:85:75:74:98:47:2f:1a:cf:44:13:ef:2b:d9:4c:
         7f:66:09:da:fe:39:43:40:af:61:71:46:ee:a8:23:f5:3b:00:
         2b:5c:29:b8:ce:22:ab:a1:9b:9f:16:82:29:8f:e4:ad:3e:73:
         b9:f3:ba:1c:82:f8:50:14:66:bc:ea:aa:a1:6e:29:8a:59:cb:
         67:58:cd:48:7f:88:09:ab:7a:73:70:46:61:b3:79:59:16:54:
         d3:30:9a:79:4b:7a:4a:a8:e0:e6:d2:99:94:5b:a0:03:f3:6e:
         61:d7:71:88:09:da:c5:d0:32:ae:9c:a3:58:45:e4:ca:48:50:
         3d:11:81:16:2e:ba:3a:54:d6:6f:9b:b7:ab:c6:d0:9c:59:ed:
         fd:cf:c8:90:fa:68:f3:32:d2:2c:66:c6:0a:df:6f:c4:fc:5e:
         ca:62:f2:07:20:0f:a9:ec:52:0e:6a:31:06:ce:58:86:f8:38:
         44:45:a9:82:7d:57:76:c9:82:78:80:d2:e9:a1:fd:6d:9d:db:
         15:69:1c:ea:04:22:43:91:2f:d9:b5:82:bd:53:cd:78:de:8c:
         34:fe:1a:7e:5a:2a:7d:97:33:e2:8f:0c:6d:ca:a9:c6:48:25:
         b4:cb:94:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:05:39 2025 by rpki-client