Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/9180262C1B6111F08E120D13C4F9AE02.roa
File:                     9180262C1B6111F08E120D13C4F9AE02.roa (raw, json)
Hash identifier:          FOBBPgEC+YHfhd2uklBBC4CPHfXNXDX6Jk6WOnhFR6Q=
Subject key identifier:   3A:E7:67:CC:79:3C:77:5F:E5:47:7E:BB:66:E4:C8:DD:28:6D:C5:7C
Certificate issuer:       /CN=A9158F8D/serialNumber=4C8D7BEA24CAFCC57A53E8E774872D3D8B2EB45D
Certificate serial:       C0
Authority key identifier: 4C:8D:7B:EA:24:CA:FC:C5:7A:53:E8:E7:74:87:2D:3D:8B:2E:B4:5D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/9180262C1B6111F08E120D13C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:54:43 +0000
ROA not before:           Sat 11 Oct 2025 09:03:30 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138199
IP address blocks:        185.24.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.crl
                          rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 04:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F8D, serialNumber=4C8D7BEA24CAFCC57A53E8E774872D3D8B2EB45D
        Validity
            Not Before: Oct 11 09:03:30 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a596a2-03c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:59:52:40:14:5d:63:ee:08:50:3f:0b:c7:
                    7e:e6:99:d1:72:17:29:be:f2:c5:da:7e:72:23:4a:
                    98:0b:5b:40:ce:b4:e1:56:a6:23:3f:d4:94:7c:33:
                    80:ed:1d:32:32:ec:72:39:11:f6:89:e7:6b:0f:27:
                    6b:01:6a:b1:9d:50:c2:c5:a8:e2:c1:f6:22:ae:ef:
                    b4:a2:01:70:17:d7:f2:09:3a:5b:c1:51:f1:ca:f0:
                    2e:e5:f4:67:ba:c3:c2:0d:9d:14:e6:a0:0c:42:04:
                    7a:7c:06:0e:f9:a4:e5:4f:96:9b:c9:9f:37:75:75:
                    e8:82:ad:bf:6a:e9:47:e9:1b:83:d4:16:20:e5:0a:
                    83:06:10:b3:63:61:43:24:45:48:44:d2:a3:2c:50:
                    f5:88:17:1e:3b:a2:b4:98:47:d2:22:13:68:76:76:
                    3d:52:34:d7:57:02:ff:5f:c0:46:38:2a:d9:fc:3b:
                    a2:af:b7:61:4c:15:ec:0b:90:3e:2a:0c:fe:8d:a8:
                    18:28:fd:45:1f:f5:af:55:6c:0a:aa:90:78:41:9f:
                    24:06:70:ae:45:23:02:e5:39:4d:39:56:6f:15:6d:
                    77:9a:f2:65:6b:e9:2d:a9:be:ac:28:c6:0d:b3:bc:
                    d4:54:74:2f:ec:aa:5c:f2:bc:2f:7b:8c:78:be:6a:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E7:67:CC:79:3C:77:5F:E5:47:7E:BB:66:E4:C8:DD:28:6D:C5:7C
            X509v3 Authority Key Identifier:
                keyid:4C:8D:7B:EA:24:CA:FC:C5:7A:53:E8:E7:74:87:2D:3D:8B:2E:B4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/9180262C1B6111F08E120D13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.24.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:ae:44:cc:0d:12:d1:1c:23:7b:f1:c5:49:3f:fd:e8:9a:
         43:b1:df:9e:0e:00:74:5a:bf:1f:02:98:ac:60:2d:ce:65:37:
         e7:eb:cc:4d:ca:1b:17:f8:21:7b:90:42:8e:85:28:2d:db:4c:
         79:7f:a4:60:c0:70:a1:0c:c6:59:cc:bc:78:93:90:08:6b:24:
         41:10:1f:6e:02:e1:38:38:40:ef:4e:83:a5:44:64:ec:64:14:
         84:86:46:ad:fc:1f:25:47:64:73:5f:49:97:ba:3e:73:25:58:
         85:84:31:39:b6:05:85:34:8e:76:13:e8:f4:16:fe:38:d0:ad:
         24:d0:53:ad:e0:e8:fb:08:4b:79:e2:d8:5a:e3:6e:40:cc:00:
         04:41:dc:02:49:d8:68:87:fb:dd:4f:8b:84:38:87:62:8d:7d:
         68:7d:06:96:45:95:18:f7:f0:4e:95:ba:b2:58:9a:e8:be:58:
         4b:47:ed:5b:2d:57:16:3d:2f:ac:b9:ad:de:8f:f4:e2:67:47:
         2a:d3:a0:23:07:7b:b1:f7:b9:53:8e:d9:96:b4:e2:37:fd:30:
         81:43:42:2f:bc:70:ac:d5:f2:37:a4:30:8e:65:ee:14:59:d4:
         31:ed:13:af:8e:e4:80:e4:67:f7:03:d7:c4:fc:36:04:ec:5d:
         52:84:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:14:33 2026 by rpki-client