Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/F0DB98A21BA811F1919C26950A3D8C67.roa
File:                     F0DB98A21BA811F1919C26950A3D8C67.roa (raw, json)
Hash identifier:          W1SvR8VBpoaYboSXm9ZQu3OoFgTqug+theCclHE52hI=
Subject key identifier:   47:99:69:E7:A7:BE:82:41:60:8C:58:86:A1:22:D8:49:85:14:DF:B1
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0CFD
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/F0DB98A21BA811F1919C26950A3D8C67.roa
Signing time:             Fri 21 Aug 2026 06:01:07 +0000
ROA not before:           Mon 09 Mar 2026 11:13:03 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138453
IP address blocks:        180.178.140.0/24 maxlen: 24
                          180.178.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
                          rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3325 (0xcfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Mar  9 11:13:03 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a87e9a3-abcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:0a:6e:36:79:ee:81:a2:ba:5f:4a:ef:32:
                    0b:02:21:27:14:b8:d7:48:f7:ae:f7:f7:e4:bf:7f:
                    e6:1b:a0:11:5a:ca:5c:0f:32:3c:12:de:02:26:f3:
                    6c:9f:70:0c:fa:2c:eb:e9:53:09:a7:f4:31:d1:d9:
                    a0:a1:11:fe:59:95:d7:69:e5:31:23:1b:2d:d4:3f:
                    0d:61:3f:50:18:f7:99:82:ed:f8:0f:c4:70:71:e6:
                    30:51:a6:bd:33:68:88:d2:34:f2:e9:3f:d8:7a:83:
                    36:f7:12:d7:ff:6d:1b:37:a9:d2:35:63:6b:55:cc:
                    1b:8f:49:5c:c7:56:a7:8c:30:7e:d3:32:67:af:d1:
                    4d:de:5b:b6:83:d8:98:72:f1:b1:d4:97:54:63:48:
                    c9:30:49:d5:6e:ab:1e:07:8e:2a:6c:7e:a0:46:de:
                    61:38:4f:22:2f:b8:12:ac:06:45:64:cf:94:66:2e:
                    9e:f0:39:30:75:46:5b:e7:ce:e6:45:ec:1b:3f:0a:
                    a5:6a:f1:d9:9e:58:a5:eb:cd:9d:d9:bf:dd:01:88:
                    b6:6b:76:70:c9:b5:6f:a1:76:a3:8a:b0:60:8d:72:
                    52:5b:35:17:81:ba:46:75:fa:c7:dc:28:36:14:8f:
                    40:c8:bf:81:d6:d7:74:56:cf:41:1d:18:8c:bb:4c:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:99:69:E7:A7:BE:82:41:60:8C:58:86:A1:22:D8:49:85:14:DF:B1
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/F0DB98A21BA811F1919C26950A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:54:aa:b9:9f:be:f8:47:38:6f:14:4a:92:5c:2e:31:b7:81:
         4e:66:16:a8:b5:4e:87:31:4c:d3:dc:4d:11:47:5f:20:9a:6b:
         bb:d6:5b:8b:da:37:d8:63:18:eb:27:3c:4f:99:8d:12:9f:28:
         1a:f0:6a:24:5c:97:6c:c4:4d:99:fa:3c:c9:47:63:ae:6f:2b:
         f6:49:d7:45:2a:6c:e7:af:21:b1:63:6e:92:7c:0e:9b:ab:51:
         57:88:83:72:e2:32:ba:2a:75:b7:14:7f:9c:80:f0:5e:4d:12:
         34:e6:a3:a4:76:2b:f1:68:b0:5d:0c:9a:9b:9b:3d:c0:1b:69:
         1c:f9:af:80:13:6b:d1:e2:48:da:71:99:91:01:dc:e8:43:88:
         8a:9d:9c:12:6d:26:d3:8d:b4:db:35:cd:fb:bd:a8:17:f6:49:
         d2:15:15:fb:74:46:b0:38:85:54:1b:11:32:f3:3d:e8:01:f3:
         e2:63:e8:c9:32:87:fb:37:55:e5:f3:52:55:f3:38:bc:be:cf:
         5f:ce:2c:d9:ad:cc:3b:06:0e:c3:9a:94:3c:bc:20:6e:aa:d3:
         ae:71:fd:ed:06:dd:22:5e:49:38:2f:a2:3a:85:53:5a:cb:7a:
         cc:e3:0c:f3:88:e4:41:c6:fb:ba:91:18:a4:b4:db:e4:52:07:
         22:9c:61:b6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB
MURFRjcxOTAwHhcNMjYwMzA5MTExMzAzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3ZTlhMy1hYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzewKbjZ57oGiul9K7zILAiEnFLjXSPeu9/fkv3/mG6ARWspcDzI8Et4CJvNs
n3AM+izr6VMJp/Qx0dmgoRH+WZXXaeUxIxst1D8NYT9QGPeZgu34D8RwceYwUaa9
M2iI0jTy6T/YeoM29xLX/20bN6nSNWNrVcwbj0lcx1anjDB+0zJnr9FN3lu2g9iY
cvGx1JdUY0jJMEnVbqseB44qbH6gRt5hOE8iL7gSrAZFZM+UZi6e8DkwdUZb587m
RewbPwqlavHZnlil682d2b/dAYi2a3ZwybVvoXajirBgjXJSWzUXgbpGdfrH3Cg2
FI9AyL+B1td0Vs9BHRiMu0wEJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEeZaeen
voJBYIxYhqEi2EmFFN+xMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw
NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjY5RTcvNDZBQUQ2QjI5MDQwMTFFQUE2ODhCRTQ1QzRGOUFFMDIvRjBEQjk4QTIx
QkE4MTFGMTkxOUMyNjk1MEEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBtLKMMA0GCSqGSIb3DQEBCwUAA4IBAQA5VKq5n774RzhvFEqSXC4x
t4FOZhaotU6HMUzT3E0RR18gmmu71luL2jfYYxjrJzxPmY0Snyga8GokXJdsxE2Z
+jzJR2Oubyv2SddFKmznryGxY26SfA6bq1FXiINy4jK6KnW3FH+cgPBeTRI05qOk
divxaLBdDJqbmz3AG2kc+a+AE2vR4kjacZmRAdzoQ4iKnZwSbSbTjbTbNc37vagX
9knSFRX7dEawOIVUGxEy8z3oAfPiY+jJMof7N1Xl81JV8zi8vs9fzizZrcw7Bg7D
mpQ8vCBuqtOucf3tBt0iXkk4L6I6hVNay3rM4wzziORBxvu6kRiktNvkUgcinGG2
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:07:00 2026 by rpki-client