Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/FA5399BC3AE211ECA119BA68C4F9AE02.roa
File:                     FA5399BC3AE211ECA119BA68C4F9AE02.roa (raw, json)
Hash identifier:          x1DOv6cF85uK2W/k4T89nA4T7d/X6L92YVXFUsvPnr8=
Subject key identifier:   B1:C3:9F:10:5A:B9:58:92:B5:50:65:B7:D1:57:0B:E0:52:64:A6:33
Certificate issuer:       /CN=A9145418/serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E
Certificate serial:       054C
Authority key identifier: 5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/FA5399BC3AE211ECA119BA68C4F9AE02.roa
Signing time:             Fri 08 May 2026 23:29:43 +0000
ROA not before:           Fri 08 May 2026 23:29:43 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     38325
IP address blocks:        182.239.32.0/21 maxlen: 22
                          182.239.32.0/24 maxlen: 24
                          182.239.33.0/24 maxlen: 24
                          182.239.34.0/24 maxlen: 24
                          182.239.35.0/24 maxlen: 24
                          182.239.36.0/24 maxlen: 24
                          182.239.37.0/24 maxlen: 24
                          182.239.38.0/24 maxlen: 24
                          182.239.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145418, serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E
        Validity
            Not Before: May  8 23:29:43 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fe71e6-fbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ca:07:1f:b7:28:09:68:be:cc:a4:d5:f4:7d:
                    a9:ab:0b:b7:2d:ec:2e:e3:5d:7f:b0:2e:6d:71:9d:
                    2d:bd:6c:b4:ad:12:22:17:49:92:ef:ab:89:4f:9b:
                    ed:d8:7d:ad:21:0f:46:b3:f5:04:ac:26:1d:59:68:
                    99:a2:9c:a1:22:1c:f5:b4:c6:4d:18:6a:46:53:64:
                    94:8c:a1:68:44:37:74:52:fc:a2:bb:f1:07:57:2f:
                    28:44:fc:ab:bb:32:32:05:2d:dc:55:79:5c:a8:42:
                    27:8a:7b:08:b3:80:3b:ec:51:39:47:51:95:86:cb:
                    c7:96:95:09:a4:86:3b:ae:de:6c:23:3a:56:48:dc:
                    73:15:a1:4e:f5:2d:2f:53:f6:4c:0f:cf:5c:99:e8:
                    ae:d0:a2:ae:4c:4b:5f:11:23:8d:1f:4c:3d:04:46:
                    cf:ae:9e:6f:33:0a:ce:57:bf:ae:aa:fb:f6:a2:22:
                    16:da:6d:88:2c:8a:3f:36:99:f8:ac:b5:3b:60:7e:
                    bb:0c:0c:e3:0b:ad:0a:3d:c5:fd:a2:82:03:f4:8f:
                    57:ed:52:3c:1d:8a:dd:b9:19:65:20:e2:c1:71:20:
                    d5:81:27:8b:02:42:30:9e:c0:96:ab:0c:0b:f8:68:
                    56:d3:36:08:5a:0f:3b:96:c7:dc:cf:82:72:a0:1d:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:9F:10:5A:B9:58:92:B5:50:65:B7:D1:57:0B:E0:52:64:A6:33
            X509v3 Authority Key Identifier:
                keyid:5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/FA5399BC3AE211ECA119BA68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.239.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:44:9e:67:43:24:59:b8:3f:a3:fd:06:ea:9b:a7:50:75:fa:
         03:91:d1:8a:8c:06:d9:e6:a1:1e:be:95:c4:a4:da:07:6b:98:
         53:9c:a4:50:1b:70:8a:31:cc:bb:69:49:60:72:15:e2:91:ac:
         31:06:84:58:72:5a:ae:8b:51:06:b8:6d:5f:cb:6a:de:64:6c:
         a7:68:55:7b:33:66:b7:d9:72:a0:04:f9:c3:ce:8d:14:bc:8e:
         eb:c5:8f:dd:4f:1e:b2:97:fe:f6:c2:c6:7b:10:b6:4e:4a:b5:
         f9:da:16:21:34:ae:d0:d2:66:3e:bb:4e:73:a8:2b:05:89:76:
         9f:25:97:1b:5d:51:de:c5:3d:65:90:45:78:26:1d:52:1a:17:
         5f:21:9f:f6:8d:84:9c:e7:7d:7e:ed:cd:4c:de:df:1e:fd:7e:
         75:67:97:41:f1:b6:eb:9e:e1:b3:13:fc:37:92:ff:92:33:9e:
         ca:0a:eb:75:7b:0d:f1:e0:57:2a:22:63:5f:04:96:76:da:ae:
         c3:ee:89:42:da:4f:0f:a3:74:9a:97:32:b8:ac:73:2a:2f:58:
         55:a2:4e:80:00:b7:64:83:fc:a4:ce:db:4f:55:32:8c:12:6a:
         2d:e7:93:6f:29:45:6d:0c:ce:15:67:34:54:2c:89:08:e7:c6:
         1a:b9:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:49 2026 by rpki-client