Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/880F25226E5311EFB4671957C4F9AE02.roa
File:                     880F25226E5311EFB4671957C4F9AE02.roa (raw, json)
Hash identifier:          dtSxcZxOzJQEnPBNnUCjQqEgDanYjoo+1mcfrul1wgA=
Subject key identifier:   1C:20:47:16:AF:FD:FC:60:6D:29:43:B0:FE:1A:3F:FF:A4:E6:95:63
Certificate issuer:       /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Certificate serial:       011C
Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/880F25226E5311EFB4671957C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:21:56 +0000
ROA not before:           Wed 30 Apr 2025 14:50:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     133062
IP address blocks:        160.187.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
                          rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
        Validity
            Not Before: Apr 30 14:50:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a42154-d0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:af:49:e9:fc:23:c9:51:5b:58:0a:6e:b1:
                    10:84:c7:1c:ce:5d:15:fe:d2:7b:6f:20:77:0b:c2:
                    7b:32:33:2a:d7:30:3d:23:7a:3e:ea:9e:43:6b:a5:
                    48:78:13:79:f2:ce:f5:b6:82:a0:21:68:2f:2b:85:
                    31:49:26:3c:1e:f2:fa:a8:03:25:31:f7:38:3a:4a:
                    27:f4:60:85:3d:d0:53:5c:5b:01:10:32:a0:b7:b4:
                    0e:d5:7c:59:09:0f:0e:be:e3:eb:58:ca:5c:09:d5:
                    3e:dd:37:cd:cc:4c:d6:23:33:a2:f2:c3:67:f0:3e:
                    c2:7d:09:3e:c1:a5:44:03:eb:f3:fe:fc:8a:3b:60:
                    e8:d0:ad:d6:58:f9:c7:2d:6d:a0:6f:ee:1c:33:f0:
                    c1:d6:1c:ed:db:65:2b:24:0d:a4:f5:e4:b8:6e:6f:
                    0b:5b:24:11:ae:5a:0c:d4:d0:d6:f5:2c:74:13:0d:
                    e1:16:6a:5d:ca:15:ac:f6:27:3e:d5:7a:16:06:e9:
                    4b:26:8f:32:76:36:d9:56:b9:95:7d:9f:5b:d1:af:
                    27:52:18:da:5b:2f:5c:c3:c8:69:06:7d:44:37:e3:
                    b3:dc:19:05:1c:25:e8:2c:1b:c2:2d:3d:6b:75:8c:
                    6c:22:8a:c3:2a:97:79:ae:d3:2d:51:43:cd:65:e1:
                    33:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:20:47:16:AF:FD:FC:60:6D:29:43:B0:FE:1A:3F:FF:A4:E6:95:63
            X509v3 Authority Key Identifier:
                keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/880F25226E5311EFB4671957C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:a0:f6:62:24:12:7b:87:d7:d0:b6:8b:a5:39:8e:77:60:5f:
         7d:31:56:72:c2:3d:0a:9a:7e:11:81:72:55:e9:ba:79:f9:38:
         3e:8f:52:8d:62:36:9d:1a:c1:eb:02:ca:0e:83:6a:81:77:39:
         f1:1f:bb:cc:14:dd:c1:1b:2e:84:f8:4b:0d:97:6f:61:e4:07:
         16:98:fd:65:e7:88:5c:8a:80:d6:e5:6c:09:30:69:16:69:0f:
         c7:6a:cf:6f:39:4b:fe:d8:9e:17:d3:84:9a:81:18:63:51:ca:
         2d:3c:eb:6b:71:20:ce:1a:52:9d:8a:e5:aa:78:6a:e1:a1:07:
         d3:18:61:ea:5d:58:51:cf:1d:84:48:d3:e0:21:18:28:80:4b:
         c9:ef:b3:38:cc:3b:2b:a2:0f:4d:75:5f:38:16:ad:0c:ff:26:
         e3:74:2b:c1:ab:6a:d4:9d:be:59:66:b6:07:a7:6c:3a:b2:0f:
         48:23:a9:90:ad:58:08:2d:95:33:06:d9:1d:ca:e2:97:88:8f:
         12:13:3d:8a:d4:8b:65:c7:e7:39:55:90:59:1d:ee:7f:cb:6a:
         4c:c6:b5:b1:6c:65:21:64:17:fa:55:9a:9d:77:e5:2f:03:6a:
         c2:69:1d:42:8c:0c:e9:dd:13:44:d6:eb:04:48:26:f9:41:4b:
         c9:58:a6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:53 2026 by rpki-client