Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/37778C1E130A11F18BFDFDDD163D8C67.roa
File:                     37778C1E130A11F18BFDFDDD163D8C67.roa (raw, json)
Hash identifier:          Hx4jtOuJzXTTc5VHMURxCz4V4clqTWRLtCDPvPlgRLQ=
Subject key identifier:   E9:DB:8A:80:6B:A8:49:73:D7:12:A6:BA:9E:2A:1A:72:AE:ED:5F:45
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0C87
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/37778C1E130A11F18BFDFDDD163D8C67.roa
Signing time:             Thu 26 Feb 2026 11:56:43 +0000
ROA not before:           Thu 26 Feb 2026 11:56:43 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     131471
IP address blocks:        180.178.130.0/24 maxlen: 24
                          180.178.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
                          rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 19:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3207 (0xc87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Feb 26 11:56:43 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a034fa-e95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:23:b1:b1:ce:3c:06:94:b0:20:5c:3a:51:
                    ff:20:f2:52:cb:5e:90:89:98:7f:93:ca:92:fb:e9:
                    21:23:f5:54:de:c7:3a:0f:4a:c2:f4:3c:a0:5c:90:
                    e8:c3:e6:65:19:a6:a7:3f:f1:cb:0c:41:71:33:ca:
                    3a:23:93:27:8d:13:00:01:3b:50:dc:28:05:9d:e9:
                    76:ea:ed:e2:a1:b1:40:23:89:14:dc:17:90:3d:2b:
                    ae:0e:1d:cd:80:4d:4c:30:0e:bc:77:04:32:7e:fe:
                    f5:a0:45:e0:df:78:c3:19:f9:b7:c8:65:82:53:0f:
                    e4:ed:e1:85:91:49:24:a0:3a:41:b3:9c:dc:43:99:
                    c9:c3:4b:ab:d9:4e:09:86:9e:c2:57:e7:de:17:8d:
                    91:0b:27:04:7c:4a:c9:5b:fc:8f:b2:5f:df:53:b0:
                    01:5b:c5:a3:73:2f:43:e1:1d:1a:a5:86:1a:0b:5d:
                    1d:2c:dd:33:c2:09:13:00:6b:9e:be:c4:86:b7:59:
                    be:c8:a2:e0:a6:23:c9:b5:f7:89:ff:0e:c2:9d:ca:
                    df:08:eb:c8:ea:cd:6c:d8:ca:37:e4:90:37:a1:b8:
                    9a:14:ee:7d:1a:31:4f:4f:ea:fa:27:8a:60:da:35:
                    e5:43:eb:95:1e:23:af:a9:65:7a:f0:9f:1d:41:df:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DB:8A:80:6B:A8:49:73:D7:12:A6:BA:9E:2A:1A:72:AE:ED:5F:45
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/37778C1E130A11F18BFDFDDD163D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:66:f4:a0:1d:56:22:22:c0:64:50:b0:9d:bb:1d:87:00:67:
         2c:3c:94:96:1d:18:e0:84:34:42:ca:39:a7:36:9e:e4:e3:a9:
         78:b3:1b:1b:05:48:b9:cd:d9:b6:d7:05:5b:5d:77:2b:d3:3a:
         1c:43:88:e7:36:9a:59:31:d6:ac:d9:71:07:70:a2:56:41:5b:
         91:0f:ce:e4:ff:0f:0d:44:17:81:e0:0a:89:43:61:d8:4e:35:
         ea:6b:7c:d7:eb:a1:56:9f:cb:cf:dc:a9:78:91:67:ea:a8:2f:
         43:6c:7a:2f:13:09:71:82:74:e9:2f:c6:a3:d2:b8:96:24:69:
         2a:e8:ef:29:50:67:00:3d:29:c2:54:1b:5b:fd:18:13:62:57:
         d0:2a:69:b7:6c:2a:1c:63:7e:13:6f:20:2d:86:86:34:b6:95:
         f0:f5:85:1f:5e:74:1a:2d:44:27:df:66:df:b1:ec:3c:94:01:
         56:42:49:f1:ab:e1:1e:93:3a:d7:14:60:b4:e7:05:f0:b5:a5:
         ff:33:43:7f:ef:12:77:98:c6:e1:ae:67:15:57:9c:cb:60:b3:
         1d:38:1a:4d:c0:96:64:da:37:fa:04:a3:90:bf:7c:63:6d:0a:
         e2:d6:d2:fa:bc:78:c5:d9:04:38:90:7f:89:42:43:4c:c6:ac:
         b8:d2:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:49:21 2026 by rpki-client