Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7CBE8274103011F08606D714C4F9AE02.roa
File:                     7CBE8274103011F08606D714C4F9AE02.roa (raw, json)
Hash identifier:          JB8Uszn3oQTPrkvApUejVMogI+fGMeNBhmhoPS3arPE=
Subject key identifier:   AC:1A:59:0D:11:63:03:0F:CA:55:B1:B0:38:AC:85:C5:AE:CE:10:2A
Certificate issuer:       /CN=A9189396/serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3
Certificate serial:       BA
Authority key identifier: EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7CBE8274103011F08606D714C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:04:20 +0000
ROA not before:           Thu 21 Aug 2025 07:45:03 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24436
IP address blocks:        152.98.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl
                          rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189396, serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3
        Validity
            Not Before: Aug 21 07:45:03 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58ad4-d5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:7c:62:06:7f:b2:3f:65:1f:a0:be:d9:76:
                    d6:2f:e4:56:84:3a:e5:ca:0b:32:74:a7:d3:1d:d6:
                    54:14:4b:9f:2f:aa:78:9a:4f:f1:7e:0c:08:56:c0:
                    f1:6a:51:08:a2:11:2b:65:8a:20:9a:70:a9:d6:30:
                    82:d4:76:2b:19:46:d2:1d:4a:8e:83:9c:5e:62:b1:
                    bb:de:00:23:9d:a8:9f:dc:74:1a:97:6e:e2:7b:75:
                    82:30:57:98:ff:b8:03:71:f6:2a:4a:e9:97:4d:79:
                    eb:a3:4b:52:55:01:9f:94:a6:c2:73:6c:99:df:c6:
                    7d:1d:0c:19:ae:2f:4d:3a:07:c8:9a:fe:b3:a8:cf:
                    ce:4d:79:e3:80:bf:f7:9e:d3:2f:80:0e:de:7f:72:
                    36:a0:db:9b:0a:9a:aa:7a:13:27:ed:ba:20:b9:0c:
                    5d:c5:ab:21:4f:89:74:b9:c9:94:97:c3:b3:35:4d:
                    a9:24:88:b6:2d:36:df:bb:c8:64:ee:6c:ba:b3:ae:
                    47:c3:0e:30:73:ee:32:46:74:3d:13:6c:d2:a2:5d:
                    ec:a9:12:32:c0:55:25:61:6c:d1:a3:8c:56:d4:ed:
                    a5:9f:ac:23:a8:dc:97:cd:fc:25:62:2f:2f:66:d6:
                    00:91:db:4c:e4:6d:a3:cd:17:c8:73:66:5f:b8:b0:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1A:59:0D:11:63:03:0F:CA:55:B1:B0:38:AC:85:C5:AE:CE:10:2A
            X509v3 Authority Key Identifier:
                keyid:EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7CBE8274103011F08606D714C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.98.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bc:31:ad:ad:a5:25:81:10:78:be:ff:7d:49:33:17:89:34:26:
         1d:6e:a4:d6:c8:86:cb:a0:fc:0a:37:ce:41:37:45:c6:14:f2:
         56:df:17:c2:10:72:14:06:ae:00:97:fb:a9:8e:39:87:4b:91:
         4e:47:dd:91:f5:10:11:fa:df:8d:29:56:7e:64:34:87:cb:eb:
         15:ca:78:11:20:42:26:01:df:83:3d:fd:8a:df:af:57:90:70:
         32:c7:37:ee:3a:44:55:2c:39:68:83:ee:13:c9:d6:2c:57:ee:
         83:e2:54:73:42:ff:b7:80:80:51:bc:3d:4e:48:e4:ea:de:5d:
         00:64:ef:54:a8:d4:39:65:e1:48:e1:81:1b:f1:94:9f:a7:68:
         eb:c3:03:da:cc:27:17:69:97:cb:3c:96:ed:5b:bc:fc:d2:6b:
         98:30:e5:c5:f8:b5:4c:cf:da:ac:5a:84:ea:d1:43:32:96:70:
         c3:e6:7d:5c:f6:db:e0:2a:61:95:0c:06:69:40:3e:97:df:98:
         5d:8f:1a:9f:06:6d:94:0b:0e:ce:dc:71:f7:15:fc:ad:24:cb:
         8b:69:77:c7:f0:bc:c9:04:4b:5a:f5:c9:35:f9:32:ff:53:93:
         57:1f:9c:de:69:56:06:68:c4:50:0f:22:27:4e:2c:e1:22:fe:
         10:b0:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:00 2026 by rpki-client