Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/184CBE58768B11EFAF7A8C68C4F9AE02.roa
File:                     184CBE58768B11EFAF7A8C68C4F9AE02.roa (raw, json)
Hash identifier:          FxAkH14gN3qeGyp7CAwPM1GGueqiuEJR03b+75cT2Ys=
Subject key identifier:   32:83:86:6D:67:88:F8:76:FD:D5:57:7C:F0:CB:58:40:D8:28:E3:FF
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       36C6
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/184CBE58768B11EFAF7A8C68C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:45:43 +0000
ROA not before:           Tue 02 Sep 2025 15:01:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     35758
IP address blocks:        182.54.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 14:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14022 (0x36c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Sep  2 15:01:29 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48957-109c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:aa:42:92:c9:a3:51:0f:ed:59:d4:64:8b:
                    24:30:4f:b0:d2:6e:8b:e7:89:99:28:3b:89:a6:c6:
                    f4:68:ab:89:12:03:2f:dc:9d:be:0f:23:23:31:fc:
                    06:a4:9f:ae:90:4b:1d:e3:e4:c1:6c:65:1b:5b:33:
                    e5:c3:6a:6b:10:75:67:61:eb:23:46:1a:b7:ee:04:
                    da:98:cf:e2:29:9f:18:7f:c1:4c:aa:21:ab:5a:34:
                    96:38:9c:82:7f:eb:9d:f7:11:6b:4a:dd:4d:ca:7a:
                    e1:11:92:86:49:e0:fd:12:ea:39:9c:d3:78:ed:bb:
                    40:6a:0f:69:46:b1:2e:c7:17:75:ce:7c:73:e4:38:
                    2f:28:83:5b:2b:8d:61:e5:f5:4a:22:6e:f1:38:de:
                    1f:b9:ef:df:bb:7c:ae:09:99:52:06:53:f9:e9:18:
                    a5:01:3a:6a:be:09:2e:0b:5a:08:24:77:a7:f7:6e:
                    cb:ca:af:9d:10:f6:0a:41:4a:f3:5c:cb:6c:6d:10:
                    d0:ab:9a:11:b1:62:55:93:49:9c:d5:2c:f1:ab:1d:
                    10:b4:8a:c7:aa:2c:90:b7:59:2d:af:07:38:76:ef:
                    33:37:38:0f:17:2a:f1:5f:0d:cc:63:c4:5b:ac:75:
                    0d:72:4c:ae:38:b3:01:6f:81:de:21:59:3b:de:37:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:83:86:6D:67:88:F8:76:FD:D5:57:7C:F0:CB:58:40:D8:28:E3:FF
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/184CBE58768B11EFAF7A8C68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:50:b1:df:e4:e5:22:c9:f3:51:d5:6d:ce:39:9e:ae:b0:a6:
         4f:2f:77:db:62:3d:35:ab:68:99:5a:1a:12:d6:37:e0:35:4e:
         22:53:8f:d5:2f:07:9a:73:4e:62:cb:26:d8:31:39:a3:58:12:
         33:7d:fb:80:91:a3:51:97:a6:df:17:dd:c3:0c:ab:0b:ef:9c:
         ce:81:bf:dc:68:8e:10:90:18:ed:4a:05:46:b2:55:3a:22:4f:
         6d:59:35:e3:70:ed:01:2f:28:54:ef:49:39:9c:29:f4:8d:cf:
         4e:12:bd:94:89:b9:c3:07:c1:ae:61:63:b8:de:b7:cc:ed:0f:
         c1:86:93:a2:71:e6:52:31:59:02:40:3d:a2:99:09:dd:3d:4e:
         19:bc:a8:ee:e0:45:ca:39:88:54:dd:6b:50:64:2e:bf:07:e7:
         fe:4d:77:01:02:48:71:57:1a:30:9f:1f:17:81:e0:3d:91:57:
         3c:80:d6:17:e1:d4:1f:8c:15:ff:6d:68:6a:cf:2f:02:8f:ad:
         bf:2b:7f:85:74:91:de:9a:ce:8b:18:c3:6f:17:3d:1d:bc:97:
         e9:d0:05:d3:fd:fb:8a:db:8a:da:76:c0:3f:1b:67:8b:b0:eb:
         63:cd:a2:2e:e4:c0:3f:00:f4:ae:b4:08:99:5c:89:53:f2:40:
         8b:6a:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 01:28:22 2026 by rpki-client