Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3E5CDF8CAC4A11F199EB65634211F970.roa
File:                     3E5CDF8CAC4A11F199EB65634211F970.roa (raw, json)
Hash identifier:          euLOWcKgKWGURDYxgn0BH7WUOGhmBm81XkTnvH0nRaw=
Subject key identifier:   13:3B:BE:63:05:CB:15:BA:08:2C:AC:4D:91:A9:CE:65:71:90:1F:34
Certificate issuer:       /CN=A9110DC8/serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20
Certificate serial:       13
Authority key identifier: DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3E5CDF8CAC4A11F199EB65634211F970.roa
Signing time:             Wed 09 Sep 2026 12:30:30 +0000
ROA not before:           Wed 09 Sep 2026 12:30:30 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     142244
IP address blocks:        160.236.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl
                          rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110DC8, serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20
        Validity
            Not Before: Sep  9 12:30:30 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa15166-feac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:81:e6:da:8c:bb:21:1f:93:6f:fa:31:32:
                    88:50:10:cd:11:65:f8:01:dc:82:c4:56:96:ad:4e:
                    52:64:08:2e:76:df:02:89:d9:5e:5f:1e:ae:5f:96:
                    1d:1b:44:89:2e:4e:d5:08:1e:98:a0:c4:e8:a4:04:
                    cd:b8:ea:07:99:53:b9:7e:0f:52:e1:2c:ef:af:09:
                    1a:1b:fc:aa:f9:53:9f:51:79:a9:57:d7:a8:51:38:
                    eb:47:03:74:11:81:8e:51:54:cb:12:f2:51:dc:90:
                    60:84:4d:52:af:8d:0a:f2:9d:88:53:7f:7b:91:b1:
                    cf:20:7a:2e:b9:43:a7:70:b6:a9:8f:44:5c:5f:58:
                    da:9c:79:a5:a3:0a:cd:df:c6:dd:7d:d0:a6:1d:5b:
                    0b:4d:e0:e3:02:36:aa:e2:2e:aa:f4:ca:d6:ba:d0:
                    d4:c2:dd:d1:9b:3d:42:1f:9c:49:5e:36:f1:dd:23:
                    23:02:38:04:82:4d:35:00:87:00:29:52:78:b6:56:
                    01:a5:1b:c4:fa:a0:12:f0:ce:27:9c:03:b8:6f:84:
                    be:97:71:a9:3c:39:35:79:b1:b2:ad:cf:3a:b4:da:
                    64:a7:dc:a8:e6:73:86:92:1b:26:93:9b:4e:d6:12:
                    70:d3:05:4e:7c:34:c9:32:5a:45:63:aa:ef:d2:e6:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3B:BE:63:05:CB:15:BA:08:2C:AC:4D:91:A9:CE:65:71:90:1F:34
            X509v3 Authority Key Identifier:
                keyid:DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3E5CDF8CAC4A11F199EB65634211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:56:5d:ca:4b:a1:08:ae:5a:1d:7e:2b:64:59:b4:32:87:39:
         b6:91:9c:40:cb:0b:11:0b:15:6f:30:ac:53:0d:f0:85:7b:7e:
         0c:61:61:dd:e0:a6:c8:64:c6:64:f9:18:36:ec:03:2d:66:96:
         bc:2e:5a:ec:b7:11:a5:cf:75:19:50:31:4e:bc:f0:c2:ea:9b:
         7c:7f:fd:80:f4:16:ae:70:7d:37:35:7d:59:22:30:45:1f:49:
         91:f2:d9:5e:18:04:3e:36:00:87:4d:0d:45:c3:87:5b:83:31:
         f4:eb:19:e0:d9:3e:49:e8:41:e5:4b:13:d0:50:50:c5:3d:3b:
         ac:d4:83:3b:44:14:29:a2:6b:c6:9c:59:82:3a:e3:06:75:7e:
         63:1e:9f:f1:28:21:7c:50:3d:48:b1:c6:78:ce:2b:4a:21:8b:
         6e:b1:b5:14:9d:68:ee:c1:7d:0c:d0:5f:b9:d8:76:97:68:14:
         13:77:83:58:b5:5e:c9:cb:88:07:1e:57:e7:b2:18:be:65:b2:
         4d:25:8b:ad:b8:69:a7:c3:18:9d:cb:05:5e:d7:ea:e3:b6:33:
         cf:8a:85:28:eb:33:66:84:ed:bf:c3:98:54:e4:b6:fd:4a:34:
         e3:56:57:54:3a:ec:9e:c0:fc:3b:7d:63:1d:eb:20:4d:ca:4c:
         74:b8:06:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:16 2026 by rpki-client