Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/245F176CA81311F0A8A82B85C4F9AE02.roa
File:                     245F176CA81311F0A8A82B85C4F9AE02.roa (raw, json)
Hash identifier:          ebzMyTtJaZgd5qEdDD8H3gUyuweRz4YwhdGqKlk2YpI=
Subject key identifier:   EF:2A:16:26:D0:CC:AB:EC:A4:67:6D:47:9E:59:22:74:F3:F3:69:75
Certificate issuer:       /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1
Certificate serial:       A9
Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/245F176CA81311F0A8A82B85C4F9AE02.roa
Signing time:             Mon 13 Oct 2025 09:01:02 +0000
ROA not before:           Mon 13 Oct 2025 09:01:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18186
IP address blocks:        45.158.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1
        Validity
            Not Before: Oct 13 09:01:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68ecbfcd-9830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:31:31:1d:e4:d6:b9:25:8d:9b:0b:cd:64:
                    ff:ea:c2:3b:f4:82:c0:71:18:48:b6:fb:92:3c:7b:
                    fd:7d:b7:54:60:18:d5:4b:48:5b:85:91:42:b2:39:
                    23:67:6b:9a:b5:63:f3:6d:bf:cb:cf:90:da:07:f7:
                    69:43:a0:aa:b4:78:f5:e2:8c:94:c8:f8:05:26:d9:
                    4b:ad:2e:93:c4:0f:bc:3f:c7:d4:b0:fe:03:80:c3:
                    49:5f:93:37:28:3e:da:64:fe:7b:ba:3a:2e:3b:5a:
                    b6:f1:2c:82:d3:a4:31:31:64:35:a0:a6:ad:52:dc:
                    7d:98:e2:8f:2e:34:17:0c:f2:0a:c4:d7:5a:fe:49:
                    9a:e0:14:53:b6:7e:e4:52:63:ed:c8:41:10:e1:ec:
                    0a:4c:a0:3c:67:62:10:80:09:30:0e:b3:88:af:cb:
                    97:14:6c:c1:72:b7:dd:83:5a:20:72:06:c7:f0:8d:
                    85:7b:d0:d6:ea:e2:13:f8:14:91:66:44:19:4d:b1:
                    72:36:23:48:f0:b4:97:af:af:bc:33:9b:47:df:d5:
                    55:3c:a2:87:aa:38:25:dd:a2:df:d1:0f:59:cd:3f:
                    4f:6c:df:e4:f1:ea:95:e1:29:c3:0a:cd:e4:31:e6:
                    55:54:9f:22:65:ce:d2:25:b1:41:71:39:33:ca:8e:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2A:16:26:D0:CC:AB:EC:A4:67:6D:47:9E:59:22:74:F3:F3:69:75
            X509v3 Authority Key Identifier:
                keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/245F176CA81311F0A8A82B85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:77:68:12:4c:5c:ec:b7:86:ec:0c:b1:18:ce:30:60:00:f7:
         fc:dd:34:35:4c:cd:86:d3:8b:98:d5:51:b4:e3:43:a8:c5:15:
         78:cc:b9:59:79:97:5c:b2:d2:91:6e:6a:60:95:a7:5a:55:3e:
         87:74:a1:31:90:8e:05:50:7e:fd:26:5f:2d:f1:73:63:de:bf:
         0b:4c:3b:89:ad:29:57:0a:4e:ab:e8:d5:83:87:a5:2c:57:07:
         b5:f5:30:50:57:47:94:52:f0:11:64:01:c8:60:f1:9a:07:b1:
         b3:8b:5e:84:f1:9d:ec:f9:a1:88:28:92:7c:bb:f6:61:6f:bb:
         fd:ca:d6:ce:e7:6c:49:71:5d:c6:ea:69:6a:d4:b4:80:78:e0:
         be:0a:f6:e6:96:1b:7e:29:8e:a7:23:65:be:48:ff:66:34:27:
         99:07:26:09:a5:7e:37:6c:47:87:8e:40:cd:86:22:79:9d:78:
         ea:50:76:44:a3:b3:35:fc:25:5f:ac:30:ca:de:a7:73:0f:70:
         b8:aa:d7:04:eb:52:a1:91:89:27:32:17:37:68:36:62:a7:34:
         9b:64:1d:45:24:26:be:30:3a:71:86:f7:19:99:78:a1:c3:5f:
         58:9e:03:ed:4b:ac:e8:b7:1a:c5:82:95:ea:ed:30:2a:7e:21:
         dd:2f:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:30 2025 by rpki-client