Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/9E48E9821FB011EAAD480012C4F9AE02.roa
File:                     9E48E9821FB011EAAD480012C4F9AE02.roa (raw, json)
Hash identifier:          CiIVzaaGxAcD5BM1OsAt93oi29d8NtQDTou8+HjsCM4=
Subject key identifier:   F8:FE:51:BC:C0:16:51:4A:11:02:64:E5:29:2F:DB:F1:B3:0E:BE:54
Certificate issuer:       /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
Certificate serial:       0CD2
Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/9E48E9821FB011EAAD480012C4F9AE02.roa
Signing time:             Sat 24 Oct 2026 18:35:35 +0000
ROA not before:           Sat 24 Oct 2026 18:35:35 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     45938
IP address blocks:        180.222.128.0/21 maxlen: 21
                          180.222.128.0/24 maxlen: 24
                          180.222.129.0/24 maxlen: 24
                          180.222.130.0/24 maxlen: 24
                          180.222.131.0/24 maxlen: 24
                          180.222.132.0/24 maxlen: 24
                          180.222.133.0/24 maxlen: 24
                          180.222.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl
                          rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 16:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3282 (0xcd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
        Validity
            Not Before: Oct 24 18:35:35 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6adcfa77-cfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:3b:a6:70:c8:54:bc:94:a7:7f:f4:18:e9:
                    61:1a:ed:0e:36:d4:fc:73:d9:96:dd:a8:e2:7e:00:
                    4d:f3:25:a0:a8:86:6e:cc:6f:ed:ab:15:5e:ea:08:
                    e7:64:f0:c0:d5:ed:ac:4c:4e:a8:17:47:16:47:7c:
                    8f:2d:91:62:13:4c:a9:aa:74:0e:72:b0:ac:b8:77:
                    fd:4b:ea:d2:57:5e:4f:c0:75:40:b4:ea:3c:40:ed:
                    ca:81:54:cb:9e:c1:c9:80:d7:2b:bb:f0:5d:14:7b:
                    db:aa:81:90:6e:d7:7f:18:3b:98:67:0a:b3:d5:2a:
                    41:a8:06:e2:a2:5a:29:81:f6:b7:a3:fa:17:29:83:
                    e6:8c:13:cc:f0:33:83:b5:11:94:ef:99:00:fc:d7:
                    86:85:0b:6f:c0:84:f7:14:1b:87:fa:82:82:14:65:
                    70:58:9b:68:2f:24:25:66:83:28:eb:ba:13:1d:2c:
                    c9:93:d8:99:29:5e:13:43:24:d7:6f:02:32:de:0f:
                    cb:fb:e6:23:f2:cb:88:4f:f7:8d:2c:a6:f7:b3:39:
                    1e:53:f0:e4:89:1d:56:89:45:1a:f7:8b:48:4b:e0:
                    f4:02:a2:f2:b2:4a:a1:17:7e:a7:9e:40:ef:95:85:
                    05:95:13:bc:43:be:60:df:04:6a:db:f2:36:f4:22:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FE:51:BC:C0:16:51:4A:11:02:64:E5:29:2F:DB:F1:B3:0E:BE:54
            X509v3 Authority Key Identifier:
                keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/9E48E9821FB011EAAD480012C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.222.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:30:e7:36:df:f2:7e:8d:f2:e7:21:ef:ef:68:b4:82:3b:68:
         12:ef:4e:7b:53:2a:82:cc:9b:bc:fd:c0:16:ac:91:c0:72:c6:
         54:95:a4:bd:7d:00:e2:75:ef:09:6b:e4:49:24:b4:a3:ae:d4:
         04:3d:e3:97:c3:e5:37:6e:5a:ce:e4:a0:53:59:11:f0:8b:e4:
         30:f5:da:b4:d3:be:cd:35:ce:1b:0e:ac:21:9a:9c:4b:25:81:
         10:8e:61:cd:31:d1:e6:7d:06:28:cd:d2:96:e3:ca:95:e0:51:
         76:bb:d8:d2:48:17:e7:e7:b1:c5:8c:90:fb:1d:8b:e4:a5:16:
         10:99:42:30:7d:4a:b0:ca:27:00:ea:a2:b9:d0:3d:1c:15:35:
         33:f6:ac:95:bc:1a:91:41:a4:e4:80:4e:4a:7b:eb:28:d9:13:
         f0:64:93:5d:66:d6:30:a5:d2:d8:51:b2:5e:61:6e:3b:a7:2b:
         7c:ee:7e:c7:d4:86:13:2e:e5:76:35:63:68:e9:b1:bd:89:5c:
         f5:ff:e2:6e:67:ca:94:40:a3:2d:64:7f:ba:b3:8f:fe:05:69:
         6b:16:dc:44:0d:e6:a0:cf:19:20:f7:ab:44:45:3d:16:70:ca:
         91:c5:a6:25:5b:f8:e4:8d:bb:dd:75:7a:09:18:e1:2a:4b:c0:
         c3:b7:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:57:03 2026 by rpki-client