Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/004E48CA008611EEA0F2B440C4F9AE02.roa
File:                     004E48CA008611EEA0F2B440C4F9AE02.roa (raw, json)
Hash identifier:          JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=
Subject key identifier:   97:30:53:CF:47:81:1D:AE:51:B6:6C:68:5C:16:3F:E4:F6:41:54:EA
Certificate issuer:       /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial:       3177
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/004E48CA008611EEA0F2B440C4F9AE02.roa
Signing time:             Sat 02 May 2026 16:18:26 +0000
ROA not before:           Sat 02 May 2026 16:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141180
IP address blocks:        180.87.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
                          rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12663 (0x3177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
        Validity
            Not Before: May  2 16:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f623d2-0054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:b7:b7:f6:89:e1:37:90:73:88:84:1b:86:
                    ef:ef:fe:4a:89:bf:e3:8e:33:ed:94:bf:f3:0d:fb:
                    98:92:86:e5:74:bd:12:eb:a4:92:a1:7c:4b:66:7d:
                    3d:8d:c5:b5:51:36:65:ba:c2:0a:4b:23:72:e1:75:
                    91:61:6e:2d:ec:9d:b5:3d:b6:2e:47:ca:28:29:53:
                    d6:00:70:15:1a:55:b4:c6:72:32:ac:c2:ef:ca:79:
                    be:bf:55:e8:42:c4:eb:97:0b:e8:5d:af:88:a7:ff:
                    59:fc:b9:6d:d2:47:38:a6:9c:0e:1a:60:8d:92:93:
                    b5:3f:8b:03:4f:4e:0d:13:3e:be:c7:41:73:12:15:
                    27:1b:78:b7:ea:d9:8c:a1:27:e6:db:8f:32:bf:99:
                    5f:0b:98:fc:df:c0:b2:fa:7a:73:ba:3d:67:17:c9:
                    fd:e5:d8:1c:44:0c:09:f7:c7:4f:8f:12:5e:ad:56:
                    b9:92:1a:57:45:46:f2:e8:f0:83:30:93:19:30:1f:
                    12:41:88:a0:d9:b4:55:f0:90:57:60:a6:a6:da:fd:
                    f7:40:37:1f:0b:0b:40:cb:19:38:29:46:1f:a4:3d:
                    c3:b9:02:4d:0c:d5:5c:de:83:ff:18:fe:c1:f5:72:
                    26:9b:85:7b:83:97:69:a1:85:ee:31:91:a3:01:c0:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:53:CF:47:81:1D:AE:51:B6:6C:68:5C:16:3F:E4:F6:41:54:EA
            X509v3 Authority Key Identifier:
                keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/004E48CA008611EEA0F2B440C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.87.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c1:ad:30:9b:c8:21:0b:c0:75:47:a0:a6:c1:04:95:de:4f:
         90:4a:3c:e9:58:7e:7c:2b:5d:d3:34:13:4f:8e:c1:ce:f8:ba:
         6a:9a:f1:f9:44:38:86:40:be:72:ea:7c:3c:74:db:c7:50:c7:
         8a:08:8b:3e:96:b3:d5:0e:c9:0a:61:d8:10:e1:9f:40:48:36:
         67:5a:90:f7:0e:48:15:81:aa:4d:6d:ee:70:1c:33:e9:01:ff:
         b1:e7:fb:5f:fa:85:d6:7e:d1:04:35:78:77:b0:64:4b:aa:f9:
         41:d9:72:f3:88:a2:a8:55:53:2a:23:88:eb:bb:c8:4a:28:29:
         97:d9:6f:de:7c:82:8f:0c:89:c7:fc:b1:5f:57:f9:5f:d0:1d:
         f6:a0:e7:ce:31:3e:2f:20:b0:b9:31:e0:1b:d0:62:ff:77:64:
         7f:16:73:00:2c:8f:c7:09:f4:44:1e:b0:2a:23:f0:e0:d6:a7:
         76:00:30:0c:b1:75:5d:b5:a2:fe:05:e4:78:19:e8:cf:28:d3:
         28:8b:e8:7b:8d:97:30:97:b9:ad:46:32:a2:74:4a:12:5b:23:
         b9:12:ce:23:dd:f1:4e:e9:07:db:6c:3f:18:1e:2a:af:9f:71:
         0a:05:5e:b3:7e:49:1f:54:e9:0c:08:0b:a8:8a:7a:45:99:9a:
         a2:3a:71:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:27 2026 by rpki-client