Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/5E8E480C335B11ED92E25960C4F9AE02.roa
File:                     5E8E480C335B11ED92E25960C4F9AE02.roa (raw, json)
Hash identifier:          I2w0+/e1Kb9CMzXZGTK123IbYwzsAgG1t96AYmZZdH4=
Subject key identifier:   7C:A3:9A:2F:19:F8:2B:11:04:A8:5E:ED:D5:45:0D:42:9D:03:BE:25
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0BF1
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/5E8E480C335B11ED92E25960C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:02:32 +0000
ROA not before:           Thu 08 May 2025 19:54:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     206264
IP address blocks:        45.115.25.0/24 maxlen: 24
                          103.55.8.0/24 maxlen: 24
                          103.55.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3057 (0xbf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: May  8 19:54:36 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47f38-ba23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:b9:7e:3a:22:40:57:c6:09:e5:ab:0c:00:
                    ea:a9:90:e5:da:ee:a5:2b:b1:ac:51:b2:75:b0:76:
                    73:0e:bd:05:30:8d:64:70:12:fa:fd:3f:84:8e:bb:
                    d2:10:aa:5a:58:21:69:d3:38:f1:2a:6a:25:97:e5:
                    be:29:54:1c:67:fb:cc:1a:ed:f2:7c:d7:2c:46:7a:
                    d9:72:c1:fd:79:dd:2f:90:a0:9b:82:76:78:48:22:
                    c2:c7:26:1b:70:7e:95:77:fc:be:69:31:3c:e1:8c:
                    bc:85:65:79:d0:64:19:9a:8d:1f:b9:60:54:9f:ea:
                    4d:3a:00:75:e9:aa:d6:31:3f:a2:52:51:44:ab:1a:
                    8a:cc:ef:8a:be:20:c8:11:eb:56:7e:1b:71:73:13:
                    8e:ae:5c:1a:17:2c:da:76:6d:bc:f8:74:b0:aa:b3:
                    74:b3:c7:62:47:95:9c:6f:6e:3a:4f:57:19:84:fc:
                    d4:7c:3c:97:8e:fa:e6:89:89:1d:7d:02:a1:e8:3f:
                    42:31:c8:7e:51:02:e2:42:b0:a2:90:0a:b8:7b:24:
                    20:a9:71:7e:fd:41:93:f4:f3:ed:d8:f1:c5:97:85:
                    d4:15:7c:68:d1:2e:6d:78:cd:0e:4b:9e:bc:8e:56:
                    62:e8:2a:47:c2:a5:d4:37:da:6d:32:66:bd:bb:4d:
                    4c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A3:9A:2F:19:F8:2B:11:04:A8:5E:ED:D5:45:0D:42:9D:03:BE:25
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/5E8E480C335B11ED92E25960C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.25.0/24
                  103.55.8.0/24
                  103.55.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:24:a1:64:dd:8f:3d:5d:ab:b6:cb:29:bd:29:06:50:d4:0c:
         22:3c:84:c2:dc:9d:ba:dc:de:3d:d5:57:0c:cd:ab:11:dc:51:
         f9:25:96:12:af:89:91:f7:bf:94:52:4f:80:7a:6a:bc:00:4b:
         35:c3:c8:17:aa:31:2f:57:01:6b:ae:8c:d6:0a:06:b4:cb:8d:
         2d:5e:2f:ac:2e:f8:5b:5f:f0:63:74:e5:70:6c:59:32:78:78:
         80:84:b7:d3:d8:47:5c:ca:8b:cd:87:35:79:6a:c1:b8:6f:17:
         b7:33:28:06:b2:50:af:e5:fe:74:4d:b3:07:aa:cf:64:2d:68:
         30:01:c9:0f:4d:bd:1f:b3:ee:27:43:71:11:f8:c6:63:93:7f:
         3b:51:c9:64:90:9e:e4:ff:f2:52:67:95:cc:45:42:c3:c7:88:
         4c:11:4d:a6:19:99:61:7d:45:ba:d1:39:d8:12:a9:4a:c2:76:
         f3:89:f9:91:e4:a9:e4:b5:56:9f:84:19:cf:9b:4d:ff:91:f2:
         98:f8:08:13:78:14:d9:ca:c8:fb:ed:3a:dc:5b:09:a6:5e:6d:
         38:34:24:e0:51:fd:fd:88:20:e5:69:c4:d0:00:cf:80:bf:ff:
         d2:93:df:06:17:33:a8:46:38:82:ff:e6:e2:14:d3:47:46:a3:
         4a:ad:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:53 2026 by rpki-client