Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/A770EFB01E5611EFAF3FCB38C4F9AE02.roa
File:                     A770EFB01E5611EFAF3FCB38C4F9AE02.roa (raw, json)
Hash identifier:          EvrlKUJ7eCvu6YP+MtDTuqMrMSZ2GeflApGRKT/txT4=
Subject key identifier:   35:11:62:21:80:AA:9A:F9:41:A8:14:EC:30:FC:8F:64:AF:86:BB:B6
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1CAD
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/A770EFB01E5611EFAF3FCB38C4F9AE02.roa
Signing time:             Fri 24 Apr 2026 16:20:31 +0000
ROA not before:           Fri 24 Apr 2026 16:20:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137127
IP address blocks:        45.248.16.0/24 maxlen: 24
                          45.248.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7341 (0x1cad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Apr 24 16:20:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69eb984e-e26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:28:9c:a4:85:90:97:0c:07:cc:75:56:16:78:
                    93:6c:ed:54:f5:30:4c:6a:ab:c3:7d:71:cd:31:71:
                    d7:62:d6:96:b3:4b:94:ed:f3:72:55:67:42:6d:bc:
                    21:a8:8e:c2:68:fd:63:3c:99:18:af:4a:06:bc:3a:
                    8c:43:24:dc:90:60:07:9c:a5:c0:c9:dd:48:f5:da:
                    dd:59:95:b6:c4:55:89:b4:ef:2b:14:87:5c:e3:1a:
                    c7:dc:4f:0d:10:95:fd:ee:27:4a:3c:d5:21:99:05:
                    91:cd:e4:79:bd:17:13:0a:27:53:51:89:d2:67:23:
                    26:f2:0c:69:d5:33:0b:76:03:63:2a:41:9a:0b:a2:
                    af:c3:8f:ba:14:48:1c:74:04:cf:8c:81:af:c4:84:
                    4a:c8:b6:92:30:2b:2a:12:cf:78:43:2c:8e:7f:1d:
                    ce:2a:39:50:f7:ac:ce:20:ef:2b:0b:f2:67:68:1b:
                    09:bc:4a:c9:f9:02:35:35:7c:6b:98:5e:c8:da:d1:
                    69:86:e1:19:0d:c0:26:91:08:52:6d:b3:6b:4c:f6:
                    38:9a:ca:2c:94:99:f6:9b:bf:23:83:bd:9d:7b:60:
                    d3:30:5e:41:76:fa:41:a3:bd:c1:12:f2:30:27:2a:
                    1a:75:81:fb:3d:62:01:49:39:f2:d1:fa:20:11:8e:
                    02:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:11:62:21:80:AA:9A:F9:41:A8:14:EC:30:FC:8F:64:AF:86:BB:B6
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/A770EFB01E5611EFAF3FCB38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:d1:bc:b1:c0:72:bd:14:44:38:9e:3e:8e:7f:67:ba:54:7e:
         19:ed:9e:57:c0:b8:b5:a2:94:10:fa:c2:b1:dd:f1:bc:df:17:
         cf:cb:cf:1e:37:4d:0e:15:34:54:f3:b0:ff:c6:68:2a:20:10:
         a0:d7:19:3d:17:55:4f:48:b8:93:8b:fa:0e:de:72:22:ea:83:
         cc:3b:51:3d:b9:ee:ad:01:c1:fc:42:7f:aa:fb:71:3f:94:05:
         cf:14:4e:a7:e4:a2:45:28:ca:cc:ec:31:ed:cd:c4:b8:01:fc:
         43:7a:1b:a2:37:d2:d9:d6:37:0f:b0:e2:46:83:17:25:1c:77:
         9a:c6:3d:28:91:5d:e6:8f:9c:73:50:90:b3:1d:04:6b:5a:47:
         e3:a4:87:4b:cf:97:8e:d6:32:1c:fe:3c:cd:83:81:0a:1d:7b:
         8b:fe:d9:7e:58:48:b8:7d:bf:b1:e2:86:da:1e:f6:a6:e9:e1:
         17:6a:fe:e8:32:98:96:53:a2:2d:fe:58:2b:7c:00:de:62:80:
         4e:2e:3c:ea:ab:76:27:a1:b7:28:31:d9:80:48:03:28:85:f5:
         cd:83:14:1c:8c:28:43:8d:99:1e:31:ef:6c:e0:fc:b0:aa:dd:
         38:a1:3e:d5:af:2a:52:70:1b:37:60:b0:d7:af:d3:bb:00:83:
         20:9c:da:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:29 2026 by rpki-client