Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/45A83CC809EE11EBAD92B66BC4F9AE02.roa
File:                     45A83CC809EE11EBAD92B66BC4F9AE02.roa (raw, json)
Hash identifier:          HcLDyPRL+MT2O9fJsYm7M+qXsJBaxLqG4r5GUTvez5w=
Subject key identifier:   50:39:F9:F7:D3:D3:9C:6B:A9:15:B1:0F:21:C3:79:5A:CF:FA:82:D0
Certificate issuer:       /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial:       0B3D
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/45A83CC809EE11EBAD92B66BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:19:40 +0000
ROA not before:           Wed 26 Mar 2025 19:29:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     18233
IP address blocks:        203.160.160.0/19 maxlen: 24
                          2400:8a81::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2877 (0xb3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
        Validity
            Not Before: Mar 26 19:29:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a42edc-2e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2d:cb:08:b2:31:9c:68:1d:0c:bd:83:4e:4e:
                    00:7c:fd:78:b9:91:d7:41:13:d5:02:e6:05:5b:b1:
                    0f:40:df:9e:bf:37:30:f3:16:69:d9:c0:3d:89:26:
                    9e:f4:b5:aa:7a:b8:f0:d5:e2:b0:85:09:46:30:40:
                    ea:f3:ff:64:bf:c7:f5:89:57:12:47:21:d3:d9:76:
                    f4:47:07:0e:0d:e0:ab:0e:d9:1f:9d:4f:f1:22:76:
                    06:e6:9c:d7:c8:21:3d:47:3b:75:dd:ed:05:61:a9:
                    a6:9b:a7:24:19:07:4e:dd:46:7d:43:ca:a0:ac:67:
                    87:46:f4:0d:44:8a:ee:d6:a3:87:fd:c8:b2:67:07:
                    df:71:1e:87:18:d0:df:b5:d6:ce:9e:24:31:d4:aa:
                    bd:23:86:2e:20:eb:e1:2c:3a:8f:87:98:4e:c5:87:
                    9c:38:18:2a:a8:21:55:c4:a4:4d:1d:36:df:f4:b9:
                    1c:e0:d5:52:14:ed:23:8f:c6:05:ab:3f:56:19:b7:
                    bb:d5:10:fe:ae:12:48:51:a1:17:34:fa:a1:f6:be:
                    ed:63:66:74:30:9b:b4:9c:50:f8:c7:0c:3f:77:7f:
                    14:d7:20:93:ca:66:a7:81:e4:e7:62:db:90:a3:16:
                    6c:a3:10:a1:ad:ee:20:e8:3d:31:7f:19:54:11:17:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:39:F9:F7:D3:D3:9C:6B:A9:15:B1:0F:21:C3:79:5A:CF:FA:82:D0
            X509v3 Authority Key Identifier:
                keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/45A83CC809EE11EBAD92B66BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.160.0/19
                IPv6:
                  2400:8a81::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:ef:5f:a4:73:63:50:48:90:8f:19:19:75:58:04:7c:d9:0d:
         b9:f7:e4:d6:d3:3e:57:dc:ad:45:aa:c3:98:3c:df:0b:e9:38:
         76:4c:65:5e:5f:4c:d3:5e:77:d8:65:ed:86:bb:54:e7:c3:15:
         55:a4:00:78:3a:f6:8c:bc:f0:6a:00:4e:09:7a:e6:a1:7a:62:
         54:80:b9:80:4b:eb:b5:3a:b3:f1:2f:cb:15:3c:33:ca:bb:45:
         b2:d7:f3:ce:7c:83:cf:58:0a:27:d0:32:3d:f3:19:9d:67:f2:
         11:74:39:b7:30:4f:7c:20:4a:4c:8d:25:e0:48:8b:8b:9c:80:
         6c:be:98:85:99:ef:69:14:99:35:0a:94:61:2c:a2:54:80:6e:
         0a:ac:f8:5f:a3:d2:2b:01:00:0b:7a:e2:f2:b9:d9:fc:b8:7c:
         7a:47:43:fe:5c:84:97:55:65:f8:a5:e7:59:41:9d:f8:99:3c:
         ba:c7:a0:09:e0:92:1b:ae:95:67:f8:85:9e:23:1c:1f:76:03:
         81:94:03:84:21:87:1a:0d:f0:2d:52:8d:5f:08:e2:bf:b7:9c:
         ee:cd:e5:27:49:b0:fe:47:db:77:c9:2a:1b:92:4e:c1:b5:01:
         cb:fe:79:18:13:85:b8:2e:62:ff:0c:43:46:eb:f7:1f:66:1a:
         cf:0b:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:31 2026 by rpki-client