Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/0C8AD31664AA11F189ECB4C08F47A888.roa
File:                     0C8AD31664AA11F189ECB4C08F47A888.roa (raw, json)
Hash identifier:          /Wy2qPTE6WfGUPhUYPbYqfCwL9kdQFHUmC0zRjD/GhI=
Subject key identifier:   10:31:3D:9F:BF:87:2C:5F:C2:61:73:24:75:FA:20:91:85:E4:2B:74
Certificate issuer:       /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial:       354C
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/0C8AD31664AA11F189ECB4C08F47A888.roa
Signing time:             Wed 10 Jun 2026 08:54:54 +0000
ROA not before:           Wed 10 Jun 2026 08:54:54 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     136158
IP address blocks:        27.131.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 14:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13644 (0x354c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
        Validity
            Not Before: Jun 10 08:54:54 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a29265e-65d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:46:73:9d:53:9b:7f:cb:ac:2a:7d:4c:1e:fe:
                    4b:8c:7f:f8:f1:45:fc:fc:d9:35:33:54:bb:b7:a2:
                    17:80:e5:06:d0:41:e4:7d:88:26:0c:03:e7:d4:8e:
                    d5:11:c4:9f:74:41:25:61:07:35:60:22:97:34:13:
                    fc:0b:a0:56:91:17:68:0c:61:9c:96:f7:25:fe:1b:
                    17:82:0d:ac:52:94:82:5d:fd:c7:7c:16:dd:10:26:
                    98:79:6d:a1:5e:f3:1d:ad:60:d9:75:7d:00:4f:10:
                    a2:38:d4:1c:97:4d:40:c9:19:f6:f0:31:a9:0d:46:
                    1c:4c:4b:c7:42:be:05:96:22:07:61:5b:78:d8:01:
                    c6:c9:53:9d:02:51:d3:e6:c1:54:a4:a0:50:27:75:
                    de:d8:92:04:38:40:e5:65:35:c4:4a:90:50:79:c1:
                    5e:06:e8:e4:33:10:d9:7f:46:48:2a:96:38:66:49:
                    63:68:f2:83:98:0f:c6:e1:18:7c:2e:41:82:75:03:
                    af:4b:a1:ef:bc:86:47:fd:ee:3f:fe:31:e2:c3:30:
                    ff:1d:0d:e6:40:fc:e6:5d:1e:05:32:7e:87:9c:b9:
                    48:30:f5:a1:6e:53:2f:63:93:27:48:ba:e3:c6:b8:
                    04:ef:be:7d:d5:d5:7f:eb:27:29:41:67:8b:c3:30:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:31:3D:9F:BF:87:2C:5F:C2:61:73:24:75:FA:20:91:85:E4:2B:74
            X509v3 Authority Key Identifier:
                keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/0C8AD31664AA11F189ECB4C08F47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:24:d9:51:fc:17:2f:19:7e:aa:89:56:d4:5e:96:42:a9:
         f3:5b:e7:c2:53:9d:25:a0:de:35:03:43:06:1e:6e:4a:79:f0:
         d1:bd:0d:13:7f:ce:4c:ec:c8:54:31:b5:8b:5b:5f:60:b7:27:
         bf:29:db:e2:bf:19:82:08:81:b7:08:c4:39:3f:1a:33:c4:15:
         5d:1d:d1:e9:13:75:df:56:8f:14:ee:a2:66:8d:35:98:dd:22:
         7f:e2:59:39:6e:5a:82:bf:b5:36:61:9f:d4:ad:b0:b5:28:f2:
         5c:37:43:52:5a:f3:7f:d8:b3:52:8b:c9:25:43:7c:2c:94:fe:
         76:44:2f:ba:55:81:3f:36:bd:76:06:48:18:8a:c2:e8:5c:f4:
         d2:20:b1:ef:d3:0a:75:ac:64:20:36:7d:e6:ec:50:10:71:ca:
         bf:37:79:d8:db:9c:d9:25:53:34:dd:c3:83:47:e0:ea:0b:db:
         ec:16:88:d1:4e:25:2e:02:8b:ce:4a:f1:43:6a:18:e0:c5:83:
         e4:73:cd:96:0e:3b:8a:83:c2:1a:f5:35:33:43:18:64:fc:fc:
         8e:6c:34:91:87:7b:54:20:68:80:88:75:99:65:e1:6d:f3:14:
         fc:ec:89:58:60:4f:0f:06:47:ab:ca:90:9b:dc:15:1a:99:a4:
         41:b3:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:20 2026 by rpki-client