Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/E8819018178811EC876F5F50C4F9AE02.roa
File:                     E8819018178811EC876F5F50C4F9AE02.roa (raw, json)
Hash identifier:          k8RYTUE2R9W0lvCqWeEJGJcaj3xzsyGqjLk5FFAGEEQ=
Subject key identifier:   CD:2A:4E:B5:9C:F5:C6:8A:CC:CF:78:AB:D2:E4:18:44:93:A9:67:05
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       0D21
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/E8819018178811EC876F5F50C4F9AE02.roa
Signing time:             Fri 14 Aug 2026 19:38:44 +0000
ROA not before:           Fri 14 Aug 2026 19:38:44 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45682
IP address blocks:        180.189.10.0/24 maxlen: 24
                          2407:b000:4011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3361 (0xd21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Aug 14 19:38:44 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7f6ec4-893d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:2f:e8:d6:7f:ef:bc:4b:07:1c:6e:5f:5a:
                    ac:8b:d1:e9:27:87:e9:90:d9:0d:b2:45:d5:71:62:
                    17:ba:99:a4:97:7c:b3:fd:c3:cd:8c:5c:b7:a9:71:
                    b7:3c:1b:ac:f0:a8:b5:8f:8d:51:f0:e3:31:6c:01:
                    d3:07:98:2b:20:75:79:62:39:f1:40:49:d8:b9:1f:
                    87:57:14:8e:7a:3b:be:4e:3a:e4:43:22:35:f5:08:
                    e9:c3:90:ff:f5:8b:69:e9:0a:af:3c:18:30:d0:d2:
                    24:1e:9d:9a:9f:20:7a:bb:32:f7:1d:e0:8a:06:d2:
                    fa:b3:dd:01:ca:82:e6:33:21:a5:75:0d:29:17:3d:
                    0b:ca:d5:7b:dd:76:a9:a1:46:9c:c7:63:4c:ff:b5:
                    a6:14:6f:9a:ba:1f:e7:cf:dc:f5:a8:ad:cc:1e:53:
                    e5:bc:4c:89:17:e0:b3:7e:74:7e:16:cc:09:83:cb:
                    40:b7:d3:a5:de:7e:22:dc:5e:40:19:a9:47:24:99:
                    58:73:47:a9:1e:c6:f3:f9:82:a4:d9:8b:d1:4d:c8:
                    ee:45:7c:89:ca:ef:a0:7d:2d:a8:6e:85:91:ae:8a:
                    06:78:24:2d:38:5c:c5:fe:e9:1d:8e:56:51:1a:0f:
                    b2:4e:f4:aa:3e:dc:98:76:05:58:52:e5:85:8c:47:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2A:4E:B5:9C:F5:C6:8A:CC:CF:78:AB:D2:E4:18:44:93:A9:67:05
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/E8819018178811EC876F5F50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.189.10.0/24
                IPv6:
                  2407:b000:4011::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:1e:15:ad:df:c9:a5:2c:0f:b0:0c:28:01:b5:71:f1:80:58:
         dc:10:a1:f4:09:a4:d1:d3:49:50:7f:f3:b9:c5:10:36:ce:b9:
         cf:71:34:76:6c:d1:95:f4:68:a9:e5:1b:87:c2:22:64:37:7a:
         9b:02:31:3c:e1:53:e9:54:3a:6f:a4:d3:df:1c:59:7a:9f:d6:
         52:db:59:ee:d3:84:cf:c9:08:31:10:22:1e:86:fa:cf:9d:20:
         6c:f8:b8:63:40:87:20:94:0f:b4:67:56:e1:54:2e:b2:8e:1c:
         33:a1:85:66:15:0a:ad:0b:04:31:8a:2f:eb:aa:06:cb:63:2e:
         8c:dc:44:35:49:30:15:bc:65:6b:45:8e:80:43:cd:c0:c4:87:
         50:e8:76:03:f4:c8:6f:27:67:4c:9b:83:ed:c5:69:aa:1d:39:
         69:7f:a3:e9:b3:b4:f1:01:32:02:14:43:71:d0:25:13:6a:d7:
         13:29:8b:ea:93:d3:6c:0a:b7:d7:8b:cd:15:6f:18:71:80:3c:
         88:46:3a:1a:c8:6f:b3:eb:ca:a1:af:d2:90:a7:79:b9:0e:da:
         54:bb:b2:bc:49:83:ce:b7:c1:65:df:b1:b9:34:87:78:88:89:
         a8:b3:31:06:c9:18:6a:9f:8b:17:5d:c0:fc:28:cb:7c:ce:c6:
         c1:3c:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:48 2026 by rpki-client