Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C531DD12226F11EF8D24AD63C4F9AE02.roa
File:                     C531DD12226F11EF8D24AD63C4F9AE02.roa (raw, json)
Hash identifier:          4apUkb/9OAkWGMu7J3h8tdbWlfEZR8ZKAMbBcPjKoaU=
Subject key identifier:   48:47:EC:9B:84:FA:83:6E:D8:83:D4:16:BF:BF:02:91:82:FB:DB:F9
Certificate issuer:       /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Certificate serial:       01D7
Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C531DD12226F11EF8D24AD63C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:06:16 +0000
ROA not before:           Mon 29 Dec 2025 03:22:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152149
IP address blocks:        210.79.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
                          rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
        Validity
            Not Before: Dec 29 03:22:57 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a51ac8-624a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3c:de:8c:2c:5c:be:db:d4:14:16:b9:a8:91:
                    4a:dc:85:8e:8f:47:60:36:3f:85:3a:77:a1:12:70:
                    18:06:46:03:e1:44:0d:ad:1b:e0:e7:cc:51:25:ea:
                    e4:81:28:a7:a9:96:56:ee:87:28:30:d2:41:d7:7a:
                    d4:8f:e7:5a:3d:60:c2:ef:2a:a8:65:37:a7:53:13:
                    92:f9:c8:63:af:68:33:e3:e1:b7:cc:a7:18:63:57:
                    ab:c8:f9:3c:5c:c6:58:ba:7a:4c:74:0e:e3:3c:09:
                    fa:5f:1e:f0:4e:50:0a:72:9c:89:ce:99:f3:3a:ee:
                    78:28:fe:4b:6d:26:34:82:ee:d2:3c:8e:9d:cd:1e:
                    81:0c:b2:96:09:e2:eb:93:a1:04:0f:a0:ff:3c:d5:
                    fc:6b:6e:a1:43:73:a7:30:f7:08:0f:0b:23:92:3e:
                    77:f6:ba:42:19:f6:01:ba:62:51:41:81:1b:a0:d9:
                    b6:dd:d8:bf:da:29:50:e3:5b:a0:cd:2c:6c:7c:ee:
                    b7:54:65:e4:78:2c:e8:ed:8e:29:e8:00:84:fb:3a:
                    22:2c:c0:a5:a0:43:6a:4d:9a:7d:4f:a4:2c:2d:87:
                    5f:3a:a4:ae:35:80:f7:d0:c4:8e:e3:b8:13:91:b8:
                    8c:e9:40:d1:5c:6d:18:c3:15:6a:68:f0:d4:89:5c:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:47:EC:9B:84:FA:83:6E:D8:83:D4:16:BF:BF:02:91:82:FB:DB:F9
            X509v3 Authority Key Identifier:
                keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C531DD12226F11EF8D24AD63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:7e:26:7b:95:ed:91:c1:cd:74:35:5c:93:75:47:05:14:5a:
         65:f4:29:ac:59:7c:9f:a0:0b:99:2a:eb:fa:8e:d8:6d:c6:a7:
         aa:45:e5:16:c3:51:62:d4:2e:3a:0c:49:1f:52:52:89:ad:91:
         de:2b:23:42:6b:25:08:f4:9f:b0:ba:94:49:23:a2:2f:51:8b:
         66:d8:eb:62:5e:de:a8:e8:3c:cb:22:4f:a6:3c:37:8f:cf:19:
         24:87:ea:c7:aa:f1:89:eb:9c:2b:7b:08:61:04:02:ae:82:80:
         48:78:c7:80:dc:de:01:b3:c2:32:ae:aa:79:9f:32:79:ad:cb:
         a1:6d:35:1d:9a:bc:fc:be:60:bc:27:35:6c:2b:c6:78:4f:62:
         7c:84:4a:7e:56:3c:3b:28:7c:a5:cb:3f:c6:dc:7b:01:35:64:
         8d:1c:8d:68:fb:cf:85:e9:5b:57:04:69:ef:b0:da:25:2e:cf:
         a6:eb:aa:36:98:24:2e:f2:93:0a:5e:38:55:e1:2d:87:d1:83:
         43:d7:85:a2:9a:77:79:14:3c:28:ed:81:db:11:84:7d:52:f4:
         54:7a:bf:36:8f:a4:7f:aa:19:77:5b:99:e1:94:db:79:e0:b5:
         4b:e2:c9:a5:d1:3d:6d:1c:2a:11:04:b6:d7:e8:3b:a0:d9:b0:
         6f:b2:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:10 2026 by rpki-client