Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
File:                     52040BECDCBF11F0B2EC67DA4A6F56BC.roa (raw, json)
Hash identifier:          8GUCnWGwQKv7AVc43/CF2Tf/opw5Si0JDT9fOcD5AfE=
Subject key identifier:   69:6C:6F:43:CC:D6:3A:82:44:EB:47:52:40:1A:21:2F:91:F0:D2:43
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       F7
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
Signing time:             Sun 01 Mar 2026 18:35:14 +0000
ROA not before:           Mon 09 Feb 2026 11:24:17 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        202.181.180.0/24 maxlen: 24
                          202.181.181.0/24 maxlen: 24
                          202.181.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Feb  9 11:24:17 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a486e2-81b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:59:2d:9a:c3:54:1f:e2:10:a7:8b:7f:77:4a:
                    24:ab:ef:fe:32:f6:0c:8d:3b:a9:2e:86:0b:ea:86:
                    13:df:7f:53:e0:e4:70:85:ab:ba:78:99:00:ac:89:
                    24:4e:98:f3:6d:bb:f2:1a:e3:34:89:ea:9f:83:3f:
                    03:55:a0:4c:26:97:9e:77:1f:28:c3:00:36:6f:19:
                    95:2b:0d:4d:1b:fe:85:9d:50:c6:fd:d1:71:00:17:
                    21:9b:e6:91:ca:b1:f1:44:e5:0f:2d:ca:7b:ef:dd:
                    f5:8f:50:02:2e:4f:53:77:b7:4d:45:d7:c4:69:97:
                    b5:eb:9c:44:b1:01:2d:06:63:48:18:8c:d4:8d:36:
                    9b:0b:20:aa:45:7f:11:43:82:a7:2d:03:fd:94:eb:
                    9f:76:ac:ac:69:b0:6a:59:d3:cf:d7:0a:e9:f8:a9:
                    ff:58:8d:13:25:f1:6c:35:93:35:32:c4:22:b0:42:
                    fb:ff:f9:6f:8b:02:1e:e8:f5:7a:ab:af:d3:8e:63:
                    af:39:65:74:33:b6:19:bb:eb:10:9a:d2:00:61:95:
                    0e:bc:e9:e2:92:70:20:53:c6:f6:f3:e5:9c:05:2b:
                    3f:17:37:ad:ab:b1:94:c4:d8:1a:d7:ba:6b:c1:9a:
                    50:16:c5:b8:48:79:11:f8:5b:4f:d6:a7:84:1e:50:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6C:6F:43:CC:D6:3A:82:44:EB:47:52:40:1A:21:2F:91:F0:D2:43
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.180.0/23
                  202.181.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:03:e9:67:fb:54:4b:37:8f:9a:4b:a1:58:d9:a8:1b:b4:ad:
         a6:09:b7:de:92:23:87:dd:e1:d5:90:62:be:9e:3e:d1:36:6a:
         98:4a:9d:c5:f7:81:a8:3c:6b:6a:d8:5c:9a:44:b3:d8:ff:0f:
         bf:ba:75:3e:db:e1:4f:64:93:48:b7:32:fd:27:9b:8e:cb:ac:
         af:ca:3f:9f:65:94:4b:7e:45:15:eb:93:76:4a:6e:29:9a:47:
         43:a6:dc:13:92:8f:b0:45:80:4c:36:55:a0:03:bf:36:3c:97:
         43:3e:97:08:0d:9e:76:35:be:90:c6:94:52:e9:86:9d:30:a1:
         56:f4:d8:d3:7e:b5:83:29:9f:13:12:6d:a1:82:bc:2e:66:ba:
         4f:6f:86:0a:ae:0b:3c:b9:6c:32:f2:f8:bc:5c:18:13:f1:77:
         6e:60:5b:31:6d:3e:2b:6d:0a:14:eb:3e:a0:d9:7c:f6:38:1e:
         bc:16:08:7c:fb:d6:d4:04:2c:2f:51:7b:ce:b3:ec:60:8b:a8:
         31:b9:ac:47:0a:f0:f2:a2:0f:44:48:5e:44:51:cf:05:77:9a:
         87:0b:90:35:b8:45:3b:38:e2:e4:de:e6:cb:41:7d:f5:1d:56:
         db:37:fe:5b:fe:88:8c:6e:8b:17:8c:f3:a1:50:bc:20:c7:a2:
         0e:0d:30:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:15 2026 by rpki-client