Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/781AAD02C65F11F0AF552452C4F9AE02.roa
File:                     781AAD02C65F11F0AF552452C4F9AE02.roa (raw, json)
Hash identifier:          SYyRnwi9gG0wbt339tea0M2bT7b3kKyjksRQAfNEzAA=
Subject key identifier:   06:7E:0C:2B:2B:F6:9E:7E:C9:B7:58:FA:3F:FE:4C:A9:08:3C:A0:3D
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0549
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/781AAD02C65F11F0AF552452C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 20:06:35 +0000
ROA not before:           Thu 01 Jan 2026 10:23:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58369
IP address blocks:        218.33.80.0/22 maxlen: 24
                          218.33.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Jan  1 10:23:29 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a49c4b-ce7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ad:18:77:3e:65:ca:bd:a4:95:12:30:b0:dc:
                    f6:e7:14:20:35:ea:dd:41:6c:83:0c:9d:cb:15:5c:
                    a2:6f:b6:aa:11:ed:8d:29:b7:b0:75:df:a3:8c:37:
                    c4:49:b5:76:06:79:25:ef:1a:9b:64:20:17:79:d8:
                    95:16:b6:5c:bc:b7:3e:04:d1:7d:2f:1d:9b:33:22:
                    51:6d:64:4e:3d:cc:e3:3d:90:67:75:0c:ae:f9:de:
                    e3:de:a2:56:4f:5b:fd:e0:fb:18:28:cd:3f:d0:9d:
                    55:22:19:e5:45:3c:35:51:a5:30:29:84:12:df:50:
                    59:e7:67:84:f8:b0:b7:59:fb:74:4d:af:d8:86:8f:
                    33:7a:22:3e:ab:db:4e:08:86:8d:e5:12:7a:b1:e4:
                    1a:51:6a:a2:ad:a2:23:f4:70:99:be:ed:e5:ad:60:
                    1b:51:fd:9b:12:2b:0b:51:90:ce:94:b1:bd:6f:70:
                    4f:9f:08:61:c9:51:a2:18:de:08:c3:ea:f3:eb:53:
                    5b:c3:f5:eb:b4:82:87:3a:b7:ea:ff:b4:af:e9:90:
                    79:e4:0f:9c:8f:99:02:18:0c:a3:dc:f3:94:89:3b:
                    01:91:91:81:d7:ae:55:eb:5a:e1:eb:01:0f:79:27:
                    a5:3c:d3:5c:c5:5c:87:af:64:76:3a:bf:f4:2c:2d:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7E:0C:2B:2B:F6:9E:7E:C9:B7:58:FA:3F:FE:4C:A9:08:3C:A0:3D
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/781AAD02C65F11F0AF552452C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.80.0/22
                  218.33.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:f3:34:f6:0d:db:9c:16:90:c1:78:94:d8:44:36:c1:58:c9:
         80:8e:16:3d:69:c2:bc:a8:2a:41:b6:21:0e:98:b4:62:24:a9:
         24:44:b6:3f:8e:d7:74:5a:3f:27:ae:c0:33:fb:8a:0d:ce:6a:
         04:e7:34:45:55:9f:59:8b:1b:cd:03:39:f7:bd:1e:9f:e1:ef:
         d0:ff:b2:f3:07:66:c5:08:c1:b2:3c:00:f6:09:a7:27:3d:fc:
         11:98:09:00:d1:d3:47:3c:b8:6a:cc:9b:8c:7c:20:36:db:1e:
         58:5c:8d:54:58:d4:af:8d:be:b7:3c:74:c1:77:44:01:ec:1b:
         95:7d:70:49:9c:93:29:e9:c9:d6:05:61:96:83:36:68:b1:d5:
         59:87:9a:81:38:9b:0c:ed:34:f0:94:dc:b9:26:b1:94:3c:c2:
         32:0d:21:f4:df:62:87:4d:fe:0b:e7:03:3f:66:72:9b:93:be:
         a1:31:89:09:af:c7:94:75:ee:bd:4d:b2:20:23:69:4e:7a:04:
         ab:61:ac:64:53:c1:e2:0b:62:a8:f9:f7:cf:b9:3a:46:0c:55:
         af:9b:d3:0a:c3:ed:ba:de:c8:fe:be:af:e1:53:e6:12:a1:97:
         f2:4e:bd:92:62:e3:46:84:eb:d5:29:26:e9:0b:8f:30:a1:32:
         e6:cc:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 19:13:56 2026 by rpki-client