Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/59018DEE340611ED9C72786AC4F9AE02.roa
File:                     59018DEE340611ED9C72786AC4F9AE02.roa (raw, json)
Hash identifier:          7UDwHDZ3X7GHUQ2fV389Pi1SQYF3Qm8coRADgJTI7xI=
Subject key identifier:   A7:25:A6:9A:0C:14:8A:D3:1A:4B:3C:D5:75:63:46:E5:03:BB:77:E6
Certificate issuer:       /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Certificate serial:       06E7
Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/59018DEE340611ED9C72786AC4F9AE02.roa
Signing time:             Mon 16 Mar 2026 22:29:30 +0000
ROA not before:           Mon 16 Mar 2026 22:29:30 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9408
IP address blocks:        203.0.156.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
        Validity
            Not Before: Mar 16 22:29:30 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b8844a-eec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:0b:b5:9d:22:3e:ff:bc:a1:13:5e:22:74:
                    1b:4e:a0:43:f6:e0:78:16:9c:d6:af:e3:6f:2a:db:
                    23:e8:5c:39:a0:4b:07:86:62:a3:d9:cc:9f:30:08:
                    ca:5a:88:34:70:d9:2b:7f:3e:a4:4f:f3:a3:54:2c:
                    83:fa:09:b0:04:32:6f:0a:55:5a:7a:82:94:aa:04:
                    0e:ef:6b:3b:47:9a:23:f1:aa:23:4b:83:20:40:1d:
                    fe:d0:14:ae:e8:d5:01:19:f5:d5:cb:57:8b:32:1d:
                    39:9a:1c:84:5b:63:04:2a:7b:a7:ec:0a:e8:ec:74:
                    96:08:b8:96:4d:b5:b7:97:19:bd:66:b5:ca:03:64:
                    f8:1c:0c:14:7a:1e:8a:14:13:84:1b:97:23:c7:48:
                    13:e4:81:98:a5:e5:94:c9:c9:18:88:30:03:9f:1a:
                    47:2e:c9:4d:f0:5e:05:a8:81:e2:c1:4e:02:ce:1f:
                    fa:41:53:dc:04:43:07:f2:f8:ee:e6:87:38:de:23:
                    c3:c7:15:7c:68:c8:a0:6b:7c:f0:fb:de:f5:3d:52:
                    ed:85:76:a8:a2:21:71:06:b6:4f:23:29:d7:3a:5e:
                    f0:de:96:58:94:f4:e2:91:78:8a:d0:73:3e:e8:c7:
                    38:87:81:47:09:16:33:1b:9f:14:52:dc:4a:6d:44:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:25:A6:9A:0C:14:8A:D3:1A:4B:3C:D5:75:63:46:E5:03:BB:77:E6
            X509v3 Authority Key Identifier:
                keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/59018DEE340611ED9C72786AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.0.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:a5:2a:17:bc:2f:04:bf:ec:45:ff:f1:8c:d3:61:38:e6:68:
         a0:6d:91:d1:d4:76:47:13:17:21:3f:78:64:43:a4:80:f6:e9:
         9d:73:f4:95:69:36:12:58:62:3a:6e:e7:d3:41:2e:a8:f5:4d:
         d8:a5:68:cc:72:05:3f:e3:a5:cc:be:3a:84:91:22:c6:e6:60:
         13:28:c7:62:f6:10:3c:e7:14:9b:57:6b:5b:93:c7:14:c4:3f:
         8b:62:1c:9a:6e:ac:99:07:7f:d1:fb:b5:80:4a:56:59:82:4a:
         f1:bb:10:9a:99:b3:12:93:72:23:50:5b:95:34:fa:57:d7:06:
         ff:55:25:3d:44:48:45:c9:9b:10:ef:ed:66:e8:6c:bc:33:83:
         92:c9:88:11:22:b6:11:69:01:c5:e6:ee:93:ce:ca:0f:e6:bc:
         29:1b:ec:37:72:51:ad:ad:00:90:22:03:92:05:92:e3:16:93:
         81:83:66:3d:be:b9:53:84:05:68:41:ad:96:de:32:94:ad:08:
         0a:ff:e9:cf:a5:b3:66:b7:38:d1:4d:2b:95:22:2b:b8:9b:6f:
         0e:0f:ea:51:99:c4:b9:54:ec:4c:9b:9b:9c:b0:a1:5a:fd:cf:
         a0:88:33:84:2c:c9:fa:7f:df:7d:84:46:12:09:c8:17:2c:c7:
         6a:18:33:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:10:02 2026 by rpki-client