Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/37778C1E130A11F18BFDFDDD163D8C67.roa
File:                     37778C1E130A11F18BFDFDDD163D8C67.roa (raw, json)
Hash identifier:          l1zoV8YMkz182prac5V7xhNJKApd98lXHWiX3aITc0k=
Subject key identifier:   B4:6B:39:65:5D:63:DA:BA:FA:79:00:5A:08:47:44:C5:0A:03:DA:EA
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0D0E
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/37778C1E130A11F18BFDFDDD163D8C67.roa
Signing time:             Tue 08 Sep 2026 11:43:19 +0000
ROA not before:           Tue 08 Sep 2026 11:43:19 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     131471
IP address blocks:        180.178.130.0/24 maxlen: 24
                          180.178.131.0/24 maxlen: 24
                          180.178.136.0/24 maxlen: 24
                          180.178.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
                          rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3342 (0xd0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Sep  8 11:43:19 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a9ff4d7-bebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:7a:ec:6c:f8:d9:bc:7c:e8:47:e5:2d:fa:
                    a8:91:03:7e:7d:09:97:88:80:2e:02:b1:26:f4:36:
                    95:9b:1f:55:86:0c:0a:94:23:32:b7:87:cd:bf:61:
                    7d:f8:c1:d9:df:e2:3a:ad:e3:70:26:e8:31:69:de:
                    d2:fd:a8:2d:ce:d0:cd:f2:e9:99:6c:78:d4:d4:b5:
                    4d:54:d3:14:36:f6:43:46:aa:96:dd:3f:88:94:38:
                    50:2e:81:70:86:87:f5:bd:41:43:02:0c:a2:f5:cc:
                    ee:0a:98:0a:b5:b8:5f:aa:f9:ff:c5:6f:f7:24:c6:
                    9f:02:70:39:52:4f:6a:da:9e:7d:b4:a7:2a:ae:9a:
                    37:70:86:6e:cf:e5:0b:b1:5a:25:92:5a:7a:1a:55:
                    47:80:d1:c0:6e:f1:73:f1:18:21:4a:80:b2:83:00:
                    44:ec:b9:9f:15:54:bb:c6:37:1b:92:ab:83:1a:48:
                    b2:d5:7f:bd:40:a6:78:ca:af:43:0e:3e:6e:9e:e7:
                    41:51:8d:5f:b3:83:aa:d2:58:93:f7:fe:c0:78:fc:
                    67:cf:f1:0d:32:05:3b:50:74:1a:1a:b2:90:2b:db:
                    3f:8f:e7:7a:f4:19:55:61:ad:4e:9c:1c:b8:28:b0:
                    fd:44:70:ed:05:de:7d:35:43:2c:61:e6:1e:3c:a1:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6B:39:65:5D:63:DA:BA:FA:79:00:5A:08:47:44:C5:0A:03:DA:EA
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/37778C1E130A11F18BFDFDDD163D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.130.0/23
                  180.178.136.0/24
                  180.178.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:25:23:79:19:de:ce:1d:81:07:df:f6:d0:05:26:c6:02:c9:
         e7:d7:37:86:fa:29:ba:04:c8:da:ee:7d:46:18:c5:c9:1e:22:
         1f:c6:7c:81:a0:39:ab:0a:73:dc:8b:9e:69:c3:72:fd:b4:f5:
         f3:da:36:f9:a8:aa:15:95:f4:25:38:79:44:91:b8:db:34:d5:
         80:53:09:3e:ef:c1:c0:1f:ea:48:ef:bf:62:54:8e:23:a2:08:
         da:ac:79:63:08:e7:55:21:1e:ac:e6:ed:48:7c:de:ca:a1:c5:
         a7:c0:56:39:0c:60:0c:dc:41:c5:40:89:cd:d8:13:22:29:6e:
         9b:cf:a1:04:c0:bc:dd:31:72:02:85:86:ee:88:d9:b0:0e:d4:
         ce:a7:bb:d3:df:82:81:f5:a6:7b:03:38:eb:fd:4a:37:ec:54:
         dd:d1:eb:0e:ad:ad:7f:b4:f0:34:66:46:2b:57:88:33:b3:6e:
         d3:bf:1b:90:ed:86:e0:98:13:bc:01:fc:c0:fa:f9:6b:05:73:
         5a:d2:0b:41:d4:ef:cc:2f:18:45:ea:4b:b9:00:ee:86:4a:91:
         10:3c:b9:d6:c4:d0:0b:7d:aa:52:93:64:d3:8c:2d:59:58:eb:
         8e:44:00:f2:c1:51:55:8f:d5:43:e7:d5:5b:c1:1d:2d:7c:8d:
         94:dc:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:07:27 2026 by rpki-client