Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/18F4FD76918111EC93DCA42AC4F9AE02.roa
File:                     18F4FD76918111EC93DCA42AC4F9AE02.roa (raw, json)
Hash identifier:          aZB+rnqYjRl4Uc+17dt2ByemLhQ+5bYKCdCl9y70GQM=
Subject key identifier:   B2:0B:51:40:8E:DC:7C:F8:BB:12:47:B0:BE:7B:C5:52:39:BF:76:D3
Certificate issuer:       /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial:       37F0
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/18F4FD76918111EC93DCA42AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:18:04 +0000
ROA not before:           Tue 30 Dec 2025 15:10:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38282
IP address blocks:        125.22.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
                          rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14320 (0x37f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
        Validity
            Not Before: Dec 30 15:10:44 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490ec-8147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:9a:81:ab:46:1b:3d:84:d5:d1:68:9a:09:
                    14:f4:81:60:e4:a1:97:81:d4:fa:c9:c6:b6:3f:97:
                    2b:d2:08:81:ea:08:f0:f0:4a:ff:51:96:04:f2:ad:
                    c8:58:cf:0f:bc:d2:23:64:55:e4:4d:bb:62:0e:87:
                    7b:55:77:0a:54:0e:8d:8b:f3:a9:dd:cb:1e:51:f7:
                    d4:54:8a:28:b6:93:18:24:1f:95:30:cb:77:4d:4b:
                    93:23:a7:ec:29:d5:cd:8f:71:89:fc:3e:7e:6f:2b:
                    8c:45:aa:9b:f6:86:ac:cd:d9:93:0a:aa:d8:f7:c9:
                    f8:fe:7b:37:ef:8c:94:76:f2:84:df:04:b0:2e:0d:
                    84:85:bb:1f:46:a4:e3:0c:fe:e0:29:37:7d:f3:f4:
                    70:c8:4e:50:8d:cc:52:37:b4:28:82:bc:aa:ac:16:
                    a3:80:6a:aa:35:b6:1f:69:c7:fb:86:46:fe:93:84:
                    a1:18:6d:d2:f1:66:4d:7b:e6:c9:06:ad:31:05:a0:
                    55:ab:83:99:fa:50:af:70:5f:8e:d5:a8:9c:d4:b9:
                    8c:13:43:2b:95:ad:ae:77:a3:0d:4a:70:d0:e9:9d:
                    43:72:18:c7:a0:8b:f0:5a:ff:fe:2d:88:49:cf:6b:
                    74:c1:7f:e5:73:af:9d:ab:47:2c:1e:e3:7d:8d:19:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0B:51:40:8E:DC:7C:F8:BB:12:47:B0:BE:7B:C5:52:39:BF:76:D3
            X509v3 Authority Key Identifier:
                keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/18F4FD76918111EC93DCA42AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.22.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c0:53:2d:67:16:ff:e0:f3:43:70:1f:1c:e5:1d:87:3f:10:
         92:e6:89:d2:d4:85:c2:0c:56:21:78:47:87:f4:ee:b7:0d:fc:
         a3:a7:39:9e:4a:a1:3a:b9:a5:01:93:aa:75:75:0c:24:2a:04:
         d6:f1:eb:f1:3f:2e:83:ec:e5:f5:0f:09:b1:89:16:f1:15:4e:
         8d:f5:c6:e2:67:0e:df:9e:6c:b4:95:16:cd:5a:90:68:17:12:
         c7:b4:b3:e0:49:16:b5:24:b8:32:a3:f9:f5:e2:a0:9e:91:aa:
         94:bf:d6:17:75:55:da:61:80:da:e0:c4:1e:e0:5c:92:0e:ba:
         a2:7a:5a:29:96:2d:4e:eb:97:16:a1:07:56:5b:c4:d6:45:16:
         f0:1e:ea:ac:71:fb:82:36:69:ef:a2:25:8b:4a:92:d0:2f:45:
         99:fa:a5:7a:7b:73:6a:cf:2b:a8:4b:6b:75:4b:cd:65:f1:a4:
         4d:b4:e8:7c:ac:62:98:a9:e9:14:84:41:1b:c5:e2:85:d3:cb:
         ea:20:d5:64:01:2a:16:31:06:9c:25:7d:64:8d:b2:a7:fa:17:
         3b:d1:cf:a0:f9:8a:71:75:d5:b5:c1:7c:1c:54:5d:67:b9:e5:
         f7:38:cf:ae:b1:d4:a7:f2:2e:8b:12:1b:c5:53:a8:29:e8:3c:
         bb:18:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:16:47 2026 by rpki-client