Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/859871F2215D11EE963E9A52C4F9AE02.roa
File:                     859871F2215D11EE963E9A52C4F9AE02.roa (raw, json)
Hash identifier:          n7Fz9ZkVHJhIS1eH8H4ehTMpYhP6NdstejYtPc2zdL0=
Subject key identifier:   31:B4:36:4E:36:C2:9C:E8:7A:83:4B:51:5A:1E:A9:47:48:3C:6A:B3
Certificate issuer:       /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
Certificate serial:       025F
Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/859871F2215D11EE963E9A52C4F9AE02.roa
Signing time:             Thu 17 Sep 2026 02:52:54 +0000
ROA not before:           Thu 17 Sep 2026 02:52:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45906
IP address blocks:        180.131.148.0/22 maxlen: 22
                          2402:8c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl
                          rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113217, serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
        Validity
            Not Before: Sep 17 02:52:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aab5606-353b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ca:ff:9f:f2:fe:20:23:43:93:e6:7f:e5:3d:
                    f1:1d:22:f5:da:69:ac:7c:5b:bf:d9:89:21:7d:87:
                    76:2a:47:40:ee:26:c2:2b:d9:7a:d9:16:93:e1:1e:
                    bb:e5:d1:74:3b:a8:85:bc:91:5b:4b:51:49:08:ec:
                    c4:aa:03:e1:8b:28:37:db:c7:35:1f:6e:b5:6c:ad:
                    30:89:c7:9a:4c:37:c5:76:00:6d:9a:df:39:76:b8:
                    1a:5e:7d:bc:17:26:9b:41:2d:44:29:61:99:50:a1:
                    77:f1:8a:b8:95:59:7e:aa:29:8c:2a:bb:01:e7:57:
                    27:95:06:39:b2:39:24:f7:6f:90:eb:03:1d:10:eb:
                    28:3c:6e:1e:8a:e0:b2:50:7c:c7:3c:6b:79:2c:52:
                    d8:1c:b9:4a:58:c4:3d:04:98:59:10:06:49:f2:5c:
                    8c:ca:a2:e7:31:0b:d1:d5:f9:e9:ac:50:58:95:27:
                    9e:d7:c2:01:d6:35:45:7a:2f:47:26:17:36:73:be:
                    ef:22:f1:14:71:58:bc:99:41:2d:c2:be:ed:53:d2:
                    b3:66:7e:48:16:50:19:7e:4a:23:51:2b:31:4c:f6:
                    48:1b:76:f7:9a:3d:7e:7e:e1:6a:8d:d5:db:ed:3c:
                    0b:5e:c7:26:54:7c:f6:19:f1:1a:be:51:b3:0f:38:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B4:36:4E:36:C2:9C:E8:7A:83:4B:51:5A:1E:A9:47:48:3C:6A:B3
            X509v3 Authority Key Identifier:
                keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/859871F2215D11EE963E9A52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.148.0/22
                IPv6:
                  2402:8c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:0b:5e:6a:c9:af:79:69:50:48:a0:70:d5:d6:d9:c3:a3:
         64:ae:cd:11:32:2a:10:f7:61:bd:17:b5:cb:0d:19:df:84:d6:
         55:5b:3f:0c:17:d6:53:3d:9f:7a:12:0a:a1:f7:8a:3c:20:a6:
         2b:d7:31:c8:08:51:0a:96:b4:33:0b:85:22:54:6a:c5:ed:ba:
         d4:a2:a1:ae:8d:6f:fc:00:e5:e4:79:12:b2:8e:3c:15:e2:06:
         a4:58:7c:8b:d7:fb:7b:c9:93:6b:fb:36:e7:28:d7:ff:43:71:
         a5:2d:00:53:0c:28:fd:4d:ac:6d:b4:73:00:dd:3f:1d:e7:a2:
         dc:a5:33:6d:3f:51:45:17:2f:0b:82:2c:19:6b:5a:c9:39:b7:
         3e:43:0f:33:57:a0:4d:54:4d:06:fd:17:66:82:1e:d4:db:11:
         71:47:1e:62:b8:e3:86:55:b2:dc:f8:0d:e7:22:75:98:37:b7:
         0f:ef:99:f1:2f:9c:70:43:0b:71:49:e9:c6:a2:6f:7f:8e:bc:
         09:77:71:f8:e6:28:22:5f:41:41:d2:17:74:7e:70:5c:d4:1f:
         06:05:19:80:bb:37:8a:82:07:bd:b8:12:45:c6:40:e9:2d:93:
         3f:46:d7:8b:41:d0:80:7a:31:1c:dd:c1:5e:7f:b3:c8:49:d5:
         84:97:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 10:56:36 2026 by rpki-client