Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/95CB7E0E6B5611EFA00DA92FC4F9AE02.roa
File:                     95CB7E0E6B5611EFA00DA92FC4F9AE02.roa (raw, json)
Hash identifier:          0Y6nrXD1yTgj9TeWPkyPjOk2F5nw6OqjEimuYJKmZS4=
Subject key identifier:   32:F9:0A:EB:E1:B3:67:15:98:43:A0:6B:5C:ED:09:F9:8F:63:47:D3
Certificate issuer:       /CN=A912756D/serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3
Certificate serial:       0185
Authority key identifier: C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/95CB7E0E6B5611EFA00DA92FC4F9AE02.roa
Signing time:             Wed 09 Sep 2026 05:55:51 +0000
ROA not before:           Wed 09 Sep 2026 05:55:51 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     140362
IP address blocks:        160.30.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl
                          rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912756D, serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3
        Validity
            Not Before: Sep  9 05:55:51 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0f4e7-3a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:99:db:56:f4:4f:88:0d:26:55:2d:48:ca:
                    73:db:0e:da:61:d4:f0:f6:c9:b4:22:07:14:bb:7e:
                    e2:b9:8f:49:f2:13:f0:07:09:33:08:5f:72:61:fa:
                    10:d0:4d:5a:13:6d:f6:20:c8:cc:87:73:8a:a9:82:
                    0d:23:25:9b:6b:27:2f:80:b0:f0:bd:11:1c:8a:5a:
                    68:b5:84:ce:ac:88:8f:54:26:2a:4b:25:86:cf:f0:
                    c2:43:86:49:54:62:5d:ff:e0:17:9f:b3:85:1e:82:
                    ea:08:bd:8d:45:f0:7d:8a:98:63:63:74:88:1a:11:
                    6f:84:f6:d3:f5:1a:24:19:77:82:84:7f:a6:2b:d2:
                    00:0b:53:33:2a:4a:45:24:ee:d1:f8:e8:af:55:f8:
                    24:72:66:66:0b:c9:81:b1:7b:12:38:c7:ed:a9:1f:
                    4e:4c:2c:74:51:3f:f2:b2:da:84:f3:6a:bb:b7:87:
                    9e:0c:9e:3f:f9:e0:44:f9:96:2f:40:31:ef:cf:e6:
                    18:c7:dc:19:a5:6f:22:67:f9:97:15:57:0d:3b:ed:
                    08:50:4f:18:52:9c:3e:ab:15:ad:99:83:76:46:0f:
                    ad:38:f1:e1:ab:68:70:a2:25:9e:62:44:39:e7:4a:
                    e7:8b:d0:d3:c8:ac:89:7c:cc:5f:44:ad:c5:65:d3:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F9:0A:EB:E1:B3:67:15:98:43:A0:6B:5C:ED:09:F9:8F:63:47:D3
            X509v3 Authority Key Identifier:
                keyid:C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/95CB7E0E6B5611EFA00DA92FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:4d:d0:60:1d:ba:13:aa:3c:8f:7d:15:4a:b3:8f:88:88:d7:
         3f:66:92:4f:76:eb:14:bb:b0:2e:e9:03:41:a4:03:df:9f:67:
         b2:18:1c:e5:be:56:f9:8a:51:64:61:72:14:43:89:c1:7d:ce:
         9b:3c:5a:b1:19:28:1e:16:00:b6:eb:bd:31:48:69:88:ce:95:
         38:58:76:a5:35:0d:98:c5:bc:7b:33:d4:46:bd:d1:91:ce:73:
         c8:8c:9f:19:4b:a2:52:d1:22:5e:d9:81:ef:30:4d:05:c1:36:
         7b:70:16:3a:d7:ea:4c:46:09:f3:3f:ef:b7:a2:76:4c:10:85:
         00:96:1a:0c:3e:80:eb:f2:82:8d:05:11:41:20:3b:6e:9a:84:
         22:79:67:7c:ef:be:b2:6d:03:5a:94:29:16:55:65:fa:1d:00:
         5e:67:79:ed:2e:fb:20:ba:27:39:0a:f7:02:95:82:d2:12:f6:
         39:8c:4f:03:e3:28:d9:4a:77:b7:af:d0:72:b5:49:db:dc:b1:
         c8:1c:50:63:05:d4:cf:80:f3:f6:a1:24:db:19:95:96:88:6a:
         64:f9:13:bb:cd:c3:8f:33:0f:ba:1c:a8:d7:40:58:79:f1:67:
         17:55:21:19:30:02:c6:ee:dc:96:a6:73:2d:1c:34:de:82:58:
         2c:e5:c4:7a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1NkQxMTAvBgNVBAUTKEMzN0VGN0M4QzM0NEQzMTg1ODI5QkMyQ0I5OTZDODk0
QUFBODBFRjMwHhcNMjYwOTA5MDU1NTUxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwZjRlNy0zYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsqKZ21b0T4gNJlUtSMpz2w7aYdTw9sm0IgcUu37iuY9J8hPwBwkzCF9yYfoQ
0E1aE232IMjMh3OKqYINIyWbaycvgLDwvREcilpotYTOrIiPVCYqSyWGz/DCQ4ZJ
VGJd/+AXn7OFHoLqCL2NRfB9iphjY3SIGhFvhPbT9RokGXeChH+mK9IAC1MzKkpF
JO7R+OivVfgkcmZmC8mBsXsSOMftqR9OTCx0UT/ystqE82q7t4eeDJ4/+eBE+ZYv
QDHvz+YYx9wZpW8iZ/mXFVcNO+0IUE8YUpw+qxWtmYN2Rg+tOPHhq2hwoiWeYkQ5
50rni9DTyKyJfMxfRK3FZdN8XwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDL5Cuvh
s2cVmEOga1ztCfmPY0fTMB8GA1UdIwQYMBaAFMN+98jDRNMYWCm8LLmWyJSqqA7z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84NDIyMDZENDZC
NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi93MzczeU1ORTB4aFlLYndzdVpiSWxLcW9E
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3czNzN5TU5FMHhoWUtid3N1WmJJbEtxb0R2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1NkQvODQyMjA2RDQ2QjU0MTFFRkI4QThBNjFBQzRGOUFFMDIvOTVDQjdFMEU2
QjU2MTFFRkEwMERBOTJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB54MA0GCSqGSIb3DQEBCwUAA4IBAQCnTdBgHboTqjyPfRVKs4+I
iNc/ZpJPdusUu7Au6QNBpAPfn2eyGBzlvlb5ilFkYXIUQ4nBfc6bPFqxGSgeFgC2
670xSGmIzpU4WHalNQ2Yxbx7M9RGvdGRznPIjJ8ZS6JS0SJe2YHvME0FwTZ7cBY6
1+pMRgnzP++3onZMEIUAlhoMPoDr8oKNBRFBIDtumoQieWd8776ybQNalCkWVWX6
HQBeZ3ntLvsguic5CvcClYLSEvY5jE8D4yjZSne3r9BytUnb3LHIHFBjBdTPgPP2
oSTbGZWWiGpk+RO7zcOPMw+6HKjXQFh58WcXVSEZMALG7tyWpnMtHDTeglgs5cR6
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:16:40 2026 by rpki-client