Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/BC8ECC20F38811EF8AB19939C4F9AE02.roa
File:                     BC8ECC20F38811EF8AB19939C4F9AE02.roa (raw, json)
Hash identifier:          xM+k8JQJmpD4Ax0g8sE6JNmMBLQtiYg67IPffewNqIg=
Subject key identifier:   35:FF:3E:53:1A:4A:9A:C3:19:A2:2D:55:81:AF:E8:BB:98:13:54:B0
Certificate issuer:       /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial:       012D
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/BC8ECC20F38811EF8AB19939C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:18:28 +0000
ROA not before:           Thu 19 Feb 2026 05:31:16 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152176
IP address blocks:        160.187.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
                          rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
        Validity
            Not Before: Feb 19 05:31:16 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a466d4-1a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d2:08:d6:05:fd:4a:61:31:8a:de:f6:2a:21:
                    1f:e8:58:43:da:18:c5:5e:f4:aa:35:1d:58:35:a5:
                    50:a2:5b:5d:92:8c:22:79:6f:28:82:e5:2a:21:90:
                    88:dc:8d:33:17:ff:74:b3:65:56:93:41:18:9f:53:
                    cd:fc:e2:de:01:52:d2:8d:0c:41:fd:6e:3c:3c:1f:
                    a1:3a:86:91:ba:c5:9e:78:b9:c9:14:5f:bd:42:d1:
                    88:1b:08:54:2c:c9:54:34:ea:4a:9b:94:4f:80:27:
                    de:c4:ca:a8:de:86:2c:4a:dd:5c:4a:95:fb:49:77:
                    14:1c:33:d8:66:6a:e5:c4:da:11:36:5e:94:c2:05:
                    4d:78:12:02:98:5b:9b:1c:1f:4f:21:ba:24:6c:60:
                    79:cd:12:4d:b0:fb:fc:e4:80:c4:8e:64:bd:29:52:
                    6f:b1:b9:3c:36:0d:7c:3e:dd:2d:e9:21:df:08:f1:
                    7c:9b:b0:6c:fa:57:e4:52:20:59:b9:1a:97:d0:0e:
                    8d:46:f6:bb:28:bd:73:e1:ad:d9:7f:a5:ed:22:e3:
                    5c:f5:bd:fe:51:dc:0b:99:56:fe:2b:16:db:d8:f7:
                    37:39:d7:a5:96:8c:09:8e:76:14:05:28:38:63:af:
                    4f:4c:f6:79:fb:ad:1f:94:c6:06:c9:8f:39:c7:81:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FF:3E:53:1A:4A:9A:C3:19:A2:2D:55:81:AF:E8:BB:98:13:54:B0
            X509v3 Authority Key Identifier:
                keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/BC8ECC20F38811EF8AB19939C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:9a:72:5f:2d:e1:1d:1c:4e:33:98:91:7d:9f:fd:f1:90:99:
         be:be:ce:bf:94:9d:75:d3:c2:28:f8:56:3e:15:8d:b2:66:a9:
         41:48:ba:67:bf:96:63:d7:1a:11:f9:ca:3a:36:fc:72:e8:90:
         0a:b4:04:f1:09:5a:d2:46:1b:2a:7e:4c:59:32:f1:05:27:7b:
         0f:fb:9a:b8:75:99:2d:2f:39:b4:b5:8f:92:45:c9:08:60:fd:
         aa:d3:1b:c9:28:8c:d7:fe:0a:38:80:f2:3c:3a:70:56:01:ee:
         88:59:72:8f:44:24:d3:52:08:54:96:70:20:1c:9c:d8:0e:5a:
         3a:9f:63:06:9c:1e:35:1f:53:c2:30:e3:57:af:15:65:ad:12:
         34:42:9b:98:93:84:21:4a:bc:cc:df:25:3d:c7:7b:d7:1a:a8:
         ad:e0:cd:df:fa:88:17:16:7b:5f:5e:72:46:02:96:af:fa:bd:
         74:d5:92:4a:5d:08:e2:82:aa:fd:96:e3:f3:e8:43:72:68:b3:
         e1:f8:20:d3:84:e6:82:09:4e:cb:00:13:58:8d:1b:c1:4f:2d:
         bb:ed:c9:07:85:d0:b3:af:e2:fc:10:4e:a2:29:81:52:4d:f5:
         43:51:31:c3:97:77:fb:b7:10:00:d8:df:19:09:06:61:72:05:
         23:50:33:42
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw
MjI3QjkwODYwHhcNMjYwMjE5MDUzMTE2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjZkNC0xYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3dII1gX9SmExit72KiEf6FhD2hjFXvSqNR1YNaVQoltdkowieW8oguUqIZCI
3I0zF/90s2VWk0EYn1PN/OLeAVLSjQxB/W48PB+hOoaRusWeeLnJFF+9QtGIGwhU
LMlUNOpKm5RPgCfexMqo3oYsSt1cSpX7SXcUHDPYZmrlxNoRNl6UwgVNeBICmFub
HB9PIbokbGB5zRJNsPv85IDEjmS9KVJvsbk8Ng18Pt0t6SHfCPF8m7Bs+lfkUiBZ
uRqX0A6NRva7KL1z4a3Zf6XtIuNc9b3+UdwLmVb+Kxbb2Pc3OdellowJjnYUBSg4
Y69PTPZ5+60flMYGyY85x4GrWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDX/PlMa
SprDGaItVYGv6LuYE1SwMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2
RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzEyMEEvREFGODFDNDQ4NkY5MTFFRkIwOTY1MTBDQzRGOUFFMDIvQkM4RUNDMjBG
Mzg4MTFFRjhBQjE5OTM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoLvuMA0GCSqGSIb3DQEBCwUAA4IBAQB8mnJfLeEdHE4zmJF9n/3x
kJm+vs6/lJ1108Io+FY+FY2yZqlBSLpnv5Zj1xoR+co6Nvxy6JAKtATxCVrSRhsq
fkxZMvEFJ3sP+5q4dZktLzm0tY+SRckIYP2q0xvJKIzX/go4gPI8OnBWAe6IWXKP
RCTTUghUlnAgHJzYDlo6n2MGnB41H1PCMONXrxVlrRI0QpuYk4QhSrzM3yU9x3vX
Gqit4M3f+ogXFntfXnJGApav+r101ZJKXQjigqr9luPz6ENyaLPh+CDThOaCCU7L
ABNYjRvBTy277ckHhdCzr+L8EE6iKYFSTfVDUTHDl3f7txAA2N8ZCQZhcgUjUDNC
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:26 2026 by rpki-client