Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/1738E8A8932F11F1ABABBC783C11F970.roa
File:                     1738E8A8932F11F1ABABBC783C11F970.roa (raw, json)
Hash identifier:          HGdBrPP2ECBqX72o/GXBpNLwCLFggA+06XmOaQsUJKI=
Subject key identifier:   B6:8E:43:AF:6C:58:5B:0D:0D:38:E0:31:33:02:C0:A0:96:8E:A4:9D
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       234E
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/1738E8A8932F11F1ABABBC783C11F970.roa
Signing time:             Sat 08 Aug 2026 13:43:09 +0000
ROA not before:           Sat 08 Aug 2026 13:43:09 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     219105
IP address blocks:        180.210.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 15:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9038 (0x234e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Aug  8 13:43:09 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a77326d-4e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0d:af:b1:05:e4:e1:da:c9:42:cd:c7:04:86:
                    2e:c5:ee:7e:c1:01:a6:32:5d:b1:e3:47:16:ca:3d:
                    56:f8:12:22:20:b2:64:99:da:f5:5a:ef:f3:1a:50:
                    f6:e1:3a:41:37:0d:cd:8d:3b:d5:db:d9:78:47:cd:
                    ba:c2:52:49:cc:9b:1d:e1:ea:81:bf:ae:a4:94:19:
                    d2:32:c3:72:75:de:fe:00:59:69:6e:c0:99:f2:09:
                    42:22:d2:c8:f6:10:da:27:cc:13:84:c1:2a:05:c6:
                    32:cc:84:c9:4b:26:a9:fa:7b:99:8e:48:06:c1:ba:
                    5f:a9:50:e5:fb:46:9d:55:b1:f2:13:6b:f9:6b:45:
                    8c:36:b3:8a:ff:bc:ed:e8:0f:28:da:bd:0c:2f:84:
                    8b:06:a5:19:55:99:8d:2d:c3:c0:b9:48:dd:24:da:
                    16:ce:56:c9:f7:76:4c:b7:56:58:cd:df:a9:4a:d0:
                    ef:28:cb:7c:c8:43:e7:c0:ae:66:d9:a9:f9:52:38:
                    0b:51:8b:73:6c:ce:24:3e:10:00:cb:3d:45:8d:c9:
                    89:8b:bd:5a:09:36:ce:cf:79:20:be:a8:24:35:2e:
                    02:c0:88:e0:c4:d2:c4:6a:aa:d3:1e:01:78:ae:fa:
                    c3:2e:6b:ed:dd:62:60:28:ad:ea:a3:98:d7:81:57:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8E:43:AF:6C:58:5B:0D:0D:38:E0:31:33:02:C0:A0:96:8E:A4:9D
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/1738E8A8932F11F1ABABBC783C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:e1:a7:ab:1e:80:78:ce:7a:4d:f1:cd:ae:9d:fd:98:e6:
         a1:67:22:1c:11:ff:e0:c6:4c:c8:a7:eb:5d:24:91:81:43:7c:
         dc:91:07:00:f7:df:73:fc:69:35:ea:6a:25:b1:da:02:33:90:
         6e:78:63:9f:55:94:21:0f:e0:65:7a:5c:dc:05:45:61:22:5f:
         e7:94:e0:1b:97:b3:f4:cc:3b:b6:b6:df:c7:79:9b:04:84:dc:
         c4:08:7d:d3:6a:05:0a:cc:15:06:ca:e2:12:9d:64:1f:c5:6c:
         24:36:bc:ca:c4:f3:eb:c4:5c:32:19:24:9c:e5:7c:db:f6:1a:
         d8:e4:3d:de:f7:25:7d:c8:c9:4e:3d:f4:69:f0:5c:83:c4:e7:
         cd:ed:47:67:eb:a1:94:2f:cd:4e:08:73:3f:ef:93:56:8e:64:
         0f:65:8a:c2:ee:11:90:19:2c:07:12:cc:fe:e5:8b:f1:d5:65:
         20:ad:02:be:25:bf:3c:36:41:0c:a3:fe:1c:4a:59:1e:64:67:
         05:21:14:64:7f:4d:65:a4:45:57:43:27:a5:af:67:bc:83:62:
         cf:8b:e9:34:cc:61:e1:e7:16:2f:c7:75:25:eb:89:a9:3c:f6:
         01:39:29:6f:a0:b8:9e:72:9c:d6:73:46:f8:e9:86:3a:94:87:
         45:93:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:18:37 2026 by rpki-client