Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/10ABE9F0637211F188B7C4BB6347A888.roa
File:                     10ABE9F0637211F188B7C4BB6347A888.roa (raw, json)
Hash identifier:          rCFAtRQuPkE+DAMuofmYi/RNh0VRkoeDQsdoANmxTmE=
Subject key identifier:   D2:BB:20:B3:76:74:37:92:B6:88:4E:07:97:C1:43:A9:95:32:FC:B3
Certificate issuer:       /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial:       0146
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/10ABE9F0637211F188B7C4BB6347A888.roa
Signing time:             Mon 08 Jun 2026 19:41:39 +0000
ROA not before:           Mon 08 Jun 2026 19:41:39 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152698
IP address blocks:        160.191.128.0/23 maxlen: 23
                          160.191.128.0/24 maxlen: 24
                          160.191.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
        Validity
            Not Before: Jun  8 19:41:39 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a271af3-a88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:fd:9d:cd:33:a4:cb:88:6a:30:bc:86:fb:
                    17:f9:e5:8d:7d:be:65:44:ef:99:9c:84:b6:ee:fc:
                    3e:a8:81:30:da:86:ab:bf:3f:ca:9d:ec:17:5a:fc:
                    8f:13:f7:0d:c2:55:d5:c1:95:50:a8:0f:21:f9:88:
                    4a:73:6a:2e:c9:08:5d:59:a5:6f:76:4a:2c:ab:e9:
                    ba:00:a3:f7:0b:9f:d7:54:cc:29:aa:f6:b4:4a:fe:
                    f2:18:5d:6d:68:95:ce:e8:35:8a:48:88:8d:f2:17:
                    93:27:ed:b5:cf:f6:6f:3e:25:57:90:77:46:b5:18:
                    43:b3:a8:6b:f1:0a:e5:3a:2c:be:5b:c2:51:f8:02:
                    af:a1:6c:89:ad:50:27:a9:a0:04:e4:b1:a7:51:25:
                    6d:8c:40:36:0d:9f:8a:d9:88:6d:ff:38:fb:76:c6:
                    cb:a5:80:6f:03:ce:0a:24:0b:86:96:31:64:e7:7d:
                    02:e3:e6:c8:de:9f:6f:91:26:af:bf:f7:5d:5a:51:
                    96:74:95:6c:1b:01:da:bd:82:ee:ed:c7:ae:65:3b:
                    cf:1b:a5:73:fd:8f:85:7c:3a:8c:01:80:cf:aa:4d:
                    cb:60:5b:8f:e7:b4:5c:07:45:27:cd:33:ea:58:e2:
                    b1:dd:93:5a:99:09:31:72:6f:80:43:01:1e:d1:3e:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BB:20:B3:76:74:37:92:B6:88:4E:07:97:C1:43:A9:95:32:FC:B3
            X509v3 Authority Key Identifier:
                keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/10ABE9F0637211F188B7C4BB6347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:be:ca:d1:14:0e:61:ad:13:8d:a5:86:ab:db:86:f8:c3:
         04:6e:4c:ff:e4:93:3c:26:cd:f2:22:65:29:e1:0b:b4:78:5b:
         29:01:42:b1:e0:1d:11:41:18:b2:83:9e:ba:29:00:d8:33:c2:
         34:e7:e3:00:29:3b:e9:d0:46:cf:0e:3b:aa:3c:5a:2f:b7:f3:
         c4:68:41:4d:62:0a:c0:76:d7:27:73:10:e8:15:da:1a:0a:cb:
         6f:f2:f3:22:fa:5d:c9:8a:17:d0:76:36:51:19:8c:0b:30:cd:
         0e:4b:57:2f:1a:31:8d:4e:c2:10:d0:17:66:f9:c7:80:9b:41:
         e6:b5:2e:07:89:8d:28:a6:39:dc:c8:44:28:74:df:14:92:d2:
         4b:4d:a1:34:6f:03:69:a1:7d:21:86:e9:24:87:fc:f9:6b:13:
         f4:ae:d6:bb:19:90:dc:bb:28:cd:31:63:99:5c:47:8b:45:00:
         26:fa:0b:33:81:c1:a6:17:33:ab:5a:52:49:43:eb:68:c5:0f:
         50:34:24:e5:e8:c4:5e:b9:f3:fb:c6:92:8b:f1:b9:03:64:6d:
         0a:87:12:dd:15:45:68:98:49:17:21:ad:67:2f:86:22:c3:8e:
         10:9a:04:48:7a:c6:50:e4:c6:a8:37:91:ff:a0:55:d8:34:d7:
         bb:f3:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:46:29 2026 by rpki-client