Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/7D1BFC5E24B411F08834DE10C4F9AE02.roa
File:                     7D1BFC5E24B411F08834DE10C4F9AE02.roa (raw, json)
Hash identifier:          1KI+aZbE9Mv6odog4v9f/D+YWvSf6u1v6UudyMifRKo=
Subject key identifier:   59:F7:9F:FD:85:21:9C:AA:BD:AA:9D:D8:55:02:E6:D2:F2:DE:A5:64
Certificate issuer:       /CN=A9180669/serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
Certificate serial:       C2
Authority key identifier: AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/7D1BFC5E24B411F08834DE10C4F9AE02.roa
Signing time:             Thu 07 May 2026 07:44:57 +0000
ROA not before:           Thu 07 May 2026 07:44:57 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     45691
IP address blocks:        163.227.180.0/23 maxlen: 24
                          2001:df5:76c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl
                          rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180669, serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
        Validity
            Not Before: May  7 07:44:57 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fc42f9-ad68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:c5:05:c0:26:cd:df:97:1e:5d:d4:94:cc:
                    1e:82:89:b9:3d:f7:34:60:cc:7f:0a:42:12:51:63:
                    63:61:10:e1:cd:92:92:0c:f0:ce:66:8d:54:79:ce:
                    b2:03:8a:a2:21:f9:42:e6:7e:66:9e:9e:60:e5:8f:
                    46:02:6e:e8:95:65:94:f4:19:26:b0:ed:60:4a:09:
                    15:bf:2d:67:5e:fc:29:fd:83:4b:7b:67:80:d9:a5:
                    f3:2b:1a:5b:d0:fd:ce:36:e2:a4:da:10:09:16:d5:
                    fa:d5:3a:ad:b0:0b:cd:8a:7f:1e:7c:56:2e:0c:4a:
                    f2:2d:ab:6a:16:2e:1a:e6:01:b9:75:e0:7f:37:86:
                    fa:29:fa:92:3a:f0:8f:92:4a:d0:68:8a:66:c0:e9:
                    ad:23:d4:e8:6b:7c:b5:84:6d:9d:48:c7:2c:aa:0a:
                    1f:b3:2b:b9:c5:1b:42:42:60:38:6e:03:41:4c:a8:
                    f7:52:14:b5:8b:61:d3:23:09:7e:34:2c:44:cf:d0:
                    61:c6:2f:49:f2:27:11:43:5e:5a:7c:18:91:29:f8:
                    cd:53:3e:8c:27:34:c1:4f:ad:28:41:0e:cf:2e:8d:
                    ec:1b:01:59:aa:32:25:78:07:5e:b8:2f:a9:3b:ec:
                    84:65:56:e3:aa:7e:16:86:2d:fd:e5:2c:0a:de:91:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F7:9F:FD:85:21:9C:AA:BD:AA:9D:D8:55:02:E6:D2:F2:DE:A5:64
            X509v3 Authority Key Identifier:
                keyid:AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/7D1BFC5E24B411F08834DE10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.180.0/23
                IPv6:
                  2001:df5:76c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:70:cd:0c:9f:24:b2:af:54:5c:fd:70:62:70:9b:15:8f:97:
         78:4a:2b:43:46:32:b5:f7:92:ac:d7:a9:00:43:7a:ef:b8:b6:
         bc:96:fc:2b:b6:ca:94:19:c8:2f:46:41:72:3a:2c:80:dc:ea:
         bd:9c:b6:a1:cd:17:67:74:4f:47:1d:37:9a:fc:2e:1d:19:14:
         5e:06:27:c4:2b:79:ab:2b:76:70:1e:6f:12:00:72:fd:0e:82:
         1d:fd:76:ab:38:5c:c4:2f:51:d2:59:6a:f5:9b:65:62:16:6e:
         a9:de:51:eb:de:bd:13:6b:ee:26:50:b9:5c:3c:27:f4:74:cb:
         98:bc:78:1b:a7:ed:5e:e3:81:a6:fb:73:5a:2d:fa:42:a0:a3:
         9a:35:87:7b:14:71:b3:06:b3:60:ab:c5:a9:6a:d7:12:d8:fc:
         15:cb:f3:00:07:49:a5:ee:e3:0c:85:64:05:07:a7:73:a1:b8:
         e1:1b:ab:07:32:15:f1:30:f4:71:79:a9:6d:15:8b:79:52:63:
         fb:1e:ea:e6:52:1e:08:8a:b3:e3:2c:12:b0:88:21:f1:dd:f4:
         86:2c:4c:07:2a:88:c7:e2:26:d6:9d:40:7e:38:ef:c5:e7:41:
         3a:55:ea:58:72:84:79:36:9a:39:f8:eb:ce:6e:fd:66:e0:11:
         a5:4c:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:16 2026 by rpki-client