Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/E181BAA059DD11EF9C39750CC4F9AE02.roa
File:                     E181BAA059DD11EF9C39750CC4F9AE02.roa (raw, json)
Hash identifier:          wNwawcsHbM0YHaF0zdZbSvwLiLwGJzedMyT2pC2bOpg=
Subject key identifier:   E9:B5:66:0C:FF:B7:48:56:45:B6:1C:D7:EC:B9:52:2D:95:F3:12:4B
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       07D5
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/E181BAA059DD11EF9C39750CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:00:58 +0000
ROA not before:           Sun 04 Jan 2026 21:17:32 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149457
IP address blocks:        203.76.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
                          rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2005 (0x7d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Jan  4 21:17:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47eda-8f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:20:e4:5c:b0:20:8c:c1:b6:d5:fc:8f:71:
                    61:c2:9b:f2:d3:af:8b:c4:0e:ad:1c:73:de:80:11:
                    79:c9:9f:a9:a7:0b:a7:5c:84:2b:75:6d:0d:f8:00:
                    d9:18:15:69:22:d1:d0:16:b4:a0:f8:04:a9:8d:70:
                    85:2f:4a:39:fe:91:9c:02:80:2b:4c:f2:a0:34:49:
                    b3:b1:a8:74:a7:2d:70:0f:fa:a2:6d:cc:37:20:db:
                    bc:bb:8c:9a:7a:a0:1f:a6:75:51:61:f2:5b:a5:af:
                    a1:a8:6b:af:bc:df:b0:a6:ca:ac:7a:53:e7:63:37:
                    b2:83:7a:6c:f7:36:1f:20:6a:91:ad:4d:f0:56:f8:
                    bc:68:35:49:c7:ec:d9:a7:a2:b0:42:d3:4d:c0:85:
                    56:0f:f3:6e:de:bc:7b:f9:e2:10:1e:d4:ca:9f:4b:
                    2f:8b:65:14:f0:82:b7:01:e6:a0:b1:75:cc:00:fb:
                    78:8b:c2:59:36:05:46:7b:b1:2e:0a:9e:a7:a9:6f:
                    b0:97:3e:b9:3e:3c:52:f3:75:51:00:1f:80:7d:b3:
                    68:bd:3a:84:16:6a:ff:b9:08:d5:45:f5:b2:9f:ae:
                    9c:d7:83:68:58:f0:bb:e1:79:b2:dd:bd:e5:26:40:
                    d3:14:1b:c8:2a:5b:2f:db:89:58:38:15:e1:cb:2a:
                    eb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B5:66:0C:FF:B7:48:56:45:B6:1C:D7:EC:B9:52:2D:95:F3:12:4B
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/E181BAA059DD11EF9C39750CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.76.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:23:59:38:89:89:23:b6:8c:aa:64:46:22:63:e2:86:fb:50:
         83:91:42:74:d4:57:e8:3c:c9:32:f5:d2:61:ed:d4:8d:7d:f6:
         c1:a5:d9:82:07:ab:5f:22:11:3d:af:a2:a7:14:f1:21:71:57:
         77:f7:03:8f:5a:57:13:ba:10:51:51:fc:0d:42:36:5c:4c:89:
         7b:38:31:75:e8:20:d8:10:f3:8e:e6:12:be:0e:d9:f8:7f:49:
         aa:03:bd:d8:a1:99:d1:5c:13:c5:ae:a6:9c:b4:5c:fb:c2:6a:
         c1:63:d0:35:20:b6:0a:5c:e7:19:90:17:dd:fa:7c:d2:d3:0a:
         d5:e5:b2:81:44:5d:f3:96:05:2d:3b:36:6a:ff:e1:18:68:28:
         30:f0:0e:1e:90:01:e5:2b:a6:c9:27:d7:6a:bd:c6:9d:d0:a7:
         47:39:3f:75:04:a5:92:09:f6:a3:15:36:91:dc:61:24:d2:6f:
         61:12:4b:bd:55:31:16:5a:a2:d7:fa:64:fd:9a:21:6b:44:3b:
         7e:67:93:55:de:07:1f:16:23:67:d2:43:e0:05:48:c8:50:20:
         6f:c5:8f:ab:79:c4:11:88:f6:58:49:21:12:06:e8:c5:e1:a5:
         93:b2:a0:7a:77:32:cc:34:02:e8:d7:57:94:f4:8a:52:69:0c:
         f1:be:37:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:05:35 2026 by rpki-client