Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
File:                     31745126CD1811EC917CB819C4F9AE02.roa (raw, json)
Hash identifier:          we2qvgf2vxZ4ZPjgEZi4dnNDvsLxezsmqMuBAL4C+Nw=
Subject key identifier:   73:98:B5:BD:EA:BB:EB:0E:F6:2C:2C:0C:61:CB:D3:38:70:6C:D6:11
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       3559
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
Signing time:             Thu 30 Oct 2025 15:00:46 +0000
ROA not before:           Thu 30 Oct 2025 15:00:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     38187
IP address blocks:        182.54.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 14:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13657 (0x3559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: Oct 30 15:00:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69037d9e-f5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:2a:5f:8d:16:96:34:84:03:80:84:50:54:
                    3a:3a:12:8d:2b:44:0c:2e:31:66:ed:1c:7f:3f:29:
                    af:eb:f1:2b:f1:78:d0:f7:6c:3b:8d:42:5c:ff:da:
                    ec:37:74:d3:e6:8c:9f:b4:ae:a5:f7:29:a4:dd:3a:
                    1c:6f:9d:ea:99:13:f3:64:6f:90:a3:f3:06:d0:57:
                    b5:6b:04:1f:fd:e0:91:0d:6e:68:90:a9:23:81:88:
                    9a:97:5a:55:b1:0f:c5:eb:08:ed:df:c7:59:f1:c2:
                    c3:33:31:7d:eb:a3:ee:ed:b4:00:fd:7c:c2:28:c1:
                    00:d2:96:bc:a0:e8:a9:30:c0:ec:ed:ed:33:a8:fb:
                    0a:1c:b2:21:59:89:9c:35:de:5c:31:ce:ce:e2:9f:
                    5a:3a:3a:e7:70:1d:12:e8:93:49:c6:8f:1c:99:5e:
                    ea:a5:8c:83:8b:37:26:fd:f1:07:87:45:49:36:52:
                    a5:15:9e:46:a7:2c:a7:2c:cf:45:48:d0:80:f4:4a:
                    58:79:44:c7:68:36:93:72:09:e6:97:59:25:9c:c6:
                    e8:81:3f:02:25:0b:e5:a1:3d:b4:7b:e3:dc:ca:3c:
                    31:74:f9:ed:23:d6:9d:b5:ff:88:58:5f:3a:55:d1:
                    21:56:e8:f6:21:f0:33:02:96:12:46:c2:53:67:4e:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:98:B5:BD:EA:BB:EB:0E:F6:2C:2C:0C:61:CB:D3:38:70:6C:D6:11
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:4c:b9:d0:82:40:e5:86:eb:c7:99:f4:18:0f:ac:f1:04:b5:
         10:43:0a:1b:9a:73:0d:32:52:92:02:a7:39:8e:18:89:8f:5c:
         4f:45:ae:a0:f0:cc:8d:27:0d:da:55:25:da:54:57:12:55:fb:
         e9:75:eb:54:8f:37:8e:dc:da:59:23:7f:a6:1d:dd:d9:ec:9d:
         83:b9:6e:f7:53:ac:b6:7d:74:71:05:c2:36:bc:0b:04:4d:ad:
         d7:34:4e:63:a8:0a:c9:0f:b1:58:45:7d:89:4b:57:d3:3b:a7:
         6f:92:82:13:32:df:d4:b6:b5:6b:12:24:aa:95:07:01:d2:73:
         c8:67:38:b7:f1:87:bb:aa:7d:01:27:08:46:e9:65:35:83:0c:
         b3:e4:5f:71:3f:6a:db:f3:ac:8d:a3:ce:9e:67:7f:0a:41:df:
         bf:bc:25:21:ed:21:c2:c8:41:ff:59:c0:20:11:fe:e5:85:46:
         2c:2d:72:83:d1:67:63:11:85:7c:5a:f5:24:92:85:ef:c7:90:
         1c:7b:1d:9f:fe:fc:8d:59:d1:12:81:95:fb:f0:4e:b7:62:13:
         ea:9c:91:48:41:fb:70:cc:f8:e6:d4:fc:45:07:13:fa:65:57:
         e4:7e:ad:ed:02:12:85:e9:f8:b2:a5:2b:44:17:4f:95:17:55:
         1e:12:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:46:24 2025 by rpki-client