Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E3FFB7282B1F11F09AACBB33C4F9AE02.roa
File:                     E3FFB7282B1F11F09AACBB33C4F9AE02.roa (raw, json)
Hash identifier:          wwzSOw3ZEaJ3AF3s0l5wYIYlBRTdtxw4kfKh73RV5Rg=
Subject key identifier:   90:70:0D:A1:2A:43:EE:6D:9F:17:E3:DE:D9:09:96:31:7D:3F:29:4A
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       20FC
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E3FFB7282B1F11F09AACBB33C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:30:48 +0000
ROA not before:           Wed 30 Sep 2026 16:30:48 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     134756
IP address blocks:        180.96.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 16:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8444 (0x20fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Sep 30 16:30:48 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd3938-2f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:54:c6:49:86:ad:49:52:9e:f4:6c:59:c4:
                    f3:04:a1:8e:0e:f5:f5:12:d5:c3:2a:fe:62:2c:a9:
                    dd:47:be:54:8a:af:3f:ea:79:cd:79:d2:d4:c5:6e:
                    43:2c:3e:49:42:e9:e7:6f:09:e4:e2:b7:8b:e6:c4:
                    f2:87:84:95:d3:1b:75:9e:05:df:d4:c1:79:83:25:
                    50:bc:14:ba:19:cc:05:bf:c0:2d:b3:c3:e6:6f:4e:
                    5a:63:c0:51:91:4d:a9:d5:69:3e:a9:91:c9:5a:6d:
                    91:7a:9d:a9:a7:bd:af:9c:5d:d0:0d:6f:11:f1:23:
                    9e:ca:10:10:7a:26:02:80:65:1c:e9:19:99:09:d0:
                    b2:e8:7c:1f:76:6d:12:94:fc:1c:5a:6d:ae:d5:30:
                    f7:bb:8b:1f:fd:83:54:7b:36:8e:c6:c0:59:ad:a2:
                    64:c4:5f:42:a9:de:a5:8a:42:35:09:9c:54:99:87:
                    8a:9b:f1:fd:6f:c5:2c:4a:98:03:08:d3:b2:9a:22:
                    46:76:4f:96:56:54:b2:c4:fd:d2:ef:8d:8d:d3:fd:
                    c9:a6:8e:2d:21:d5:6f:af:46:f3:23:49:0c:b7:7e:
                    3e:6d:bf:71:d0:1d:cd:b7:8c:c9:8d:12:ad:11:96:
                    89:ef:95:3e:46:b1:77:98:bf:dc:f1:ae:b7:a0:95:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:70:0D:A1:2A:43:EE:6D:9F:17:E3:DE:D9:09:96:31:7D:3F:29:4A
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E3FFB7282B1F11F09AACBB33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.96.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f5:7d:bc:0d:d0:2c:6b:77:00:cc:bb:86:c9:d8:69:5b:31:
         5d:7c:0f:00:5e:44:bc:35:1d:5f:2e:f9:4b:48:09:93:01:d1:
         c3:4b:7e:94:6b:4a:20:59:91:3b:e9:0b:65:71:5f:91:cb:72:
         8f:de:24:cf:be:85:ba:aa:5c:e4:d5:fc:c1:1e:17:fb:ac:9c:
         86:90:a3:b0:fe:cb:89:2b:17:39:09:5a:e7:ed:14:00:d8:e0:
         5f:df:b5:ec:96:e0:bd:d9:b1:81:29:8b:14:22:38:a9:4f:f4:
         c0:38:fc:d4:a6:93:f5:e6:b5:92:d8:88:cc:31:e5:75:8b:13:
         0d:6c:ec:50:65:04:b6:e6:6d:42:fe:62:c5:9c:95:42:70:21:
         de:f0:ce:0f:9b:64:a3:ce:92:58:11:64:14:92:49:0f:91:7c:
         ca:b6:84:37:e1:ae:ac:b6:b0:eb:5e:87:24:37:a7:29:b9:cf:
         57:68:61:21:32:54:5b:88:0e:3d:36:55:e9:c0:4c:41:f4:21:
         ed:7c:e2:04:f9:b1:05:df:c5:0c:ae:79:df:72:14:f2:55:ba:
         ae:c9:a0:97:83:5f:11:75:8c:06:4e:75:97:66:d6:ee:91:51:
         2c:19:79:31:8e:db:72:ba:fb:3f:23:a5:23:01:2f:7e:3f:44:
         7b:1c:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:42:47 2026 by rpki-client