Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/AC1FAF84432211EEB1984F73C4F9AE02.roa
File:                     AC1FAF84432211EEB1984F73C4F9AE02.roa (raw, json)
Hash identifier:          5f3PGGQ4lIHquQnRshVK4NbBoJAP65xZO5Xtmj/sUr0=
Subject key identifier:   7D:11:26:10:29:E9:B8:43:BC:BE:86:C9:E0:81:91:54:E9:96:E2:4F
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       01F6
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/AC1FAF84432211EEB1984F73C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:02:10 +0000
ROA not before:           Wed 03 Sep 2025 04:23:03 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     10118
IP address blocks:        203.145.72.0/21 maxlen: 24
                          203.145.80.0/20 maxlen: 24
                          2407:3100::/32 maxlen: 32
                          2407:3100::/36 maxlen: 36
                          2407:3100:1000::/36 maxlen: 36
                          2407:3100:2000::/36 maxlen: 36
                          2407:3100:3000::/36 maxlen: 36
                          2407:3100:4000::/36 maxlen: 36
                          2407:3100:5000::/36 maxlen: 36
                          2407:3100:6000::/36 maxlen: 36
                          2407:3100:7000::/36 maxlen: 36
                          2407:3100:8000::/36 maxlen: 36
                          2407:3100:8113::/48 maxlen: 48
                          2407:3100:9000::/36 maxlen: 36
                          2407:3100:a000::/36 maxlen: 36
                          2407:3100:b000::/36 maxlen: 36
                          2407:3100:c000::/36 maxlen: 36
                          2407:3100:d000::/36 maxlen: 36
                          2407:3100:e000::/36 maxlen: 36
                          2407:3100:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Sep  3 04:23:03 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a438d2-d3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:11:0d:97:22:5d:99:3e:06:67:35:4d:bf:
                    55:44:fb:1e:f8:55:a4:4e:0c:b5:cd:ab:6a:0a:fa:
                    4d:cf:ac:a9:40:75:eb:48:4f:87:a2:c5:9d:f8:06:
                    59:20:77:5f:92:3d:20:07:29:1f:17:a6:3a:cf:c0:
                    41:3f:54:fc:45:7e:44:4f:51:66:53:01:81:69:06:
                    da:6d:8b:e8:51:20:60:47:6a:0e:7a:99:88:a3:71:
                    ee:97:e6:fb:43:4d:f2:3d:48:9a:83:50:3e:31:92:
                    5c:78:40:ce:07:31:c5:9c:6d:64:1f:46:bc:80:d1:
                    65:bb:d2:f5:74:97:72:6d:dc:f0:f0:9e:47:84:40:
                    f3:3c:4b:df:5c:74:65:c7:47:d6:4c:b3:78:0d:61:
                    e5:a6:49:9f:9f:e8:71:41:4f:3b:ae:98:be:cf:5f:
                    05:b9:be:47:f6:46:a2:14:b8:eb:d5:1a:05:52:0d:
                    6e:e2:25:7c:58:46:70:99:59:10:2a:dc:ae:8c:dd:
                    07:be:1a:93:4f:16:7d:53:0e:5a:45:b3:50:04:08:
                    58:37:1e:57:39:ed:25:f1:53:2e:e9:a6:4c:03:6c:
                    3c:45:25:d8:bc:59:93:a3:36:c8:f1:74:62:f6:19:
                    cd:70:9c:c3:1d:f0:9b:b3:25:04:18:3c:bd:be:8e:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:11:26:10:29:E9:B8:43:BC:BE:86:C9:E0:81:91:54:E9:96:E2:4F
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/AC1FAF84432211EEB1984F73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.72.0-203.145.95.255
                IPv6:
                  2407:3100::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:1c:74:b4:26:d6:4a:51:7c:4e:3a:a3:72:95:0c:3d:3c:d6:
         43:0b:cf:4d:4a:b1:73:d1:7d:81:c0:2a:dc:e8:0b:d6:dd:db:
         79:7f:49:28:1a:36:f7:4b:f5:23:10:8b:54:5b:90:55:73:fc:
         9b:ff:e1:a5:cf:85:8e:b7:a8:be:2e:0b:ec:9b:24:5e:f4:75:
         15:62:0b:2b:f5:95:4a:3d:b5:24:2d:42:7a:51:bd:26:64:c3:
         26:6c:0f:2d:57:89:d9:84:9b:b2:48:12:de:56:08:be:03:aa:
         2b:31:4c:c2:23:1e:c0:75:d0:9f:9d:1a:fe:44:f1:22:61:a6:
         f4:c1:3b:9a:95:26:29:59:ca:2e:e9:55:4e:db:48:7d:89:d8:
         c6:4d:81:ae:bf:bd:a5:62:e9:a2:e1:e2:bd:47:de:fb:0d:3e:
         d4:43:33:f5:74:1f:f3:2a:83:47:16:b0:d9:a0:a1:ff:84:3a:
         be:c7:82:30:c2:ef:2d:9f:4f:8b:75:8b:2c:d7:40:32:48:90:
         1e:ec:0e:e2:4a:e2:4d:6b:c1:1e:36:7b:42:2f:94:87:ad:fe:
         57:53:15:4c:0c:17:45:05:e2:a8:41:c9:3a:22:65:e1:bb:3c:
         3b:4c:58:5c:b2:27:4f:c7:5a:14:c6:b9:dd:d0:49:b3:26:6d:
         4d:68:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:28 2026 by rpki-client