Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/130A89761FAE11F0B3E41E84C4F9AE02.roa
File:                     130A89761FAE11F0B3E41E84C4F9AE02.roa (raw, json)
Hash identifier:          D/XxgpTmAqVDQH9jHYni1JxMUh1+GB1xdzs9QThZoNk=
Subject key identifier:   C2:AE:BD:E8:43:A1:98:1F:43:5D:40:78:18:B9:31:00:8F:B8:D4:17
Certificate issuer:       /CN=A918D0AA/serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA
Certificate serial:       0279
Authority key identifier: 0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/130A89761FAE11F0B3E41E84C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:11:22 +0000
ROA not before:           Tue 03 Feb 2026 02:21:28 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        210.80.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl
                          rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D0AA, serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA
        Validity
            Not Before: Feb  3 02:21:28 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4652a-50eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:f7:b4:02:18:b8:cc:8d:14:d4:9b:a2:28:
                    f5:d4:45:dd:52:6f:66:de:5d:7a:cd:85:7f:28:1e:
                    5c:ae:98:5d:84:25:86:19:85:aa:1f:bd:03:4f:91:
                    a5:c8:ed:e7:7d:18:2a:1f:ff:56:33:9a:67:cc:97:
                    3d:dd:a9:71:9a:8b:d3:49:5a:32:b3:c0:58:a0:c4:
                    ef:2e:a9:ab:bf:e8:c7:ff:38:20:15:63:12:f7:80:
                    93:08:36:90:4d:ae:fc:21:41:b4:2e:f7:d6:d4:f9:
                    b7:87:fd:d3:2d:23:37:e9:d9:8b:36:fe:2c:6f:30:
                    39:2e:21:54:b7:f6:3a:bd:c2:a5:a3:89:73:6a:49:
                    28:38:19:9e:36:fd:ba:0e:ae:35:80:d6:ed:64:2c:
                    34:7a:9f:b1:5c:29:87:d6:65:03:c2:52:c0:b2:ae:
                    bf:4d:62:29:84:9d:2b:4c:f6:ab:03:29:40:ca:61:
                    e6:09:bd:a1:10:d2:22:49:57:67:cd:13:5a:67:66:
                    4d:d7:cb:87:9b:c0:01:aa:7c:88:bb:7c:94:59:e9:
                    0b:0a:6e:78:00:3b:e6:3d:30:08:3e:26:c8:d7:09:
                    37:14:c4:b2:85:e5:db:f0:de:3c:fe:a2:1f:60:d3:
                    28:ac:bd:12:38:9b:e0:95:cd:f6:bf:65:f5:1d:5c:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AE:BD:E8:43:A1:98:1F:43:5D:40:78:18:B9:31:00:8F:B8:D4:17
            X509v3 Authority Key Identifier:
                keyid:0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/130A89761FAE11F0B3E41E84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.80.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:d4:22:af:12:46:15:4c:af:c0:2e:d7:ca:7a:75:60:f4:c0:
         35:a2:c8:da:1c:de:4f:09:03:d2:16:6c:c8:de:a1:01:41:0c:
         c8:82:f6:13:c6:13:51:51:7d:c7:79:5b:c8:53:67:c3:2d:c2:
         76:ff:a5:23:88:36:ec:0f:a8:25:5b:06:02:87:66:95:02:51:
         7d:9d:6d:13:d6:6a:cb:2d:18:ad:25:17:cd:07:3b:f0:32:0a:
         d9:2f:96:e1:47:8b:be:e3:66:51:e2:99:a9:33:e1:6e:b7:80:
         1d:69:9f:72:c0:47:9c:ff:ba:41:0f:c6:e4:19:36:1b:fc:43:
         cd:02:e1:c7:35:82:29:57:de:ea:72:c8:e9:c3:5d:89:fc:61:
         fd:84:ea:53:9d:b8:31:28:47:5e:b3:5c:ff:24:11:85:b5:bc:
         8c:dd:81:0b:d9:75:46:ca:48:47:e9:48:9f:08:83:10:b2:ae:
         0d:dc:a7:79:10:a0:d7:f6:9c:cf:e1:07:5c:ff:46:e2:1c:73:
         10:23:07:ae:dd:26:81:12:e2:ed:cf:b3:f9:4a:52:ac:84:c2:
         27:3c:9a:d7:f9:98:3a:6d:ae:d5:ec:c4:02:a6:b0:48:9d:33:
         39:11:80:eb:3a:49:1c:00:18:62:70:25:d3:36:88:47:2b:02:
         36:04:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:49 2026 by rpki-client