Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/5BE6AFEE822811F0A0F1A878C4F9AE02.roa
File:                     5BE6AFEE822811F0A0F1A878C4F9AE02.roa (raw, json)
Hash identifier:          rPV3i9FeQoUsZ4ybcMBy5/g05TdfBAYBALGWdr44YE0=
Subject key identifier:   AD:D8:55:D1:8F:A1:C6:86:EB:4A:23:2F:32:99:71:78:C9:D7:E3:AC
Certificate issuer:       /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial:       02EF
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/5BE6AFEE822811F0A0F1A878C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:28:28 +0000
ROA not before:           Tue 26 Aug 2025 02:57:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153671
IP address blocks:        160.202.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
                          rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
        Validity
            Not Before: Aug 26 02:57:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a44d0c-ecce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:4e:ff:6a:f8:a2:a4:2a:5c:9b:76:03:80:
                    4d:fb:3e:24:14:5d:dd:6c:b1:e7:37:15:3e:0f:41:
                    9d:db:6d:0d:cf:65:d2:2e:0a:5a:36:4a:48:5d:70:
                    60:b5:c1:5d:37:49:33:9a:ff:ec:53:e7:3b:92:41:
                    0d:35:59:16:a2:8c:4f:b3:82:a3:e3:a2:ce:17:56:
                    d4:2e:a4:29:bf:64:82:18:f3:43:8c:12:3e:7e:24:
                    f8:b5:7c:d3:06:3d:93:4a:b5:1e:1b:74:c1:53:10:
                    5d:36:e0:5b:1c:38:4e:66:49:82:b5:71:ce:47:a1:
                    4b:9b:7e:b1:3c:9d:88:25:e1:f2:37:eb:e6:5a:29:
                    b6:d5:e6:da:29:51:43:3a:bb:76:58:81:f3:dd:72:
                    42:fc:e1:91:f9:e4:37:34:18:24:5d:03:d8:af:9c:
                    3e:98:6a:b5:34:0b:b5:12:4c:3c:b9:36:22:57:d5:
                    fc:16:3f:d1:a7:b7:7c:8e:20:a8:7d:ba:09:64:5c:
                    3f:a5:b8:2d:ad:e3:6f:06:67:7d:9f:fb:0d:27:ec:
                    5e:ea:d1:e0:a5:7d:64:52:b6:b2:29:b6:1d:99:6a:
                    06:d3:4a:28:10:d3:ce:ce:52:56:e9:97:07:08:62:
                    34:16:94:b5:cf:94:93:0f:98:0a:d5:70:fe:d8:8b:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D8:55:D1:8F:A1:C6:86:EB:4A:23:2F:32:99:71:78:C9:D7:E3:AC
            X509v3 Authority Key Identifier:
                keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/5BE6AFEE822811F0A0F1A878C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a8:02:9a:5f:2a:03:e4:8e:63:b5:63:c3:61:93:8e:32:7a:
         a0:d8:d9:c1:80:47:98:92:6b:a3:2c:56:0e:c5:d9:03:7f:f5:
         96:d5:a9:b4:6c:92:ad:0b:44:77:c5:81:b1:fb:b1:eb:b2:d5:
         d9:66:2d:72:b2:07:85:ed:e2:f9:95:df:b6:bb:a1:7a:49:13:
         bd:9e:8e:8d:58:93:2c:1d:e0:44:31:a7:eb:97:1b:42:3d:3f:
         e7:ec:c6:25:60:a0:54:7c:cd:2e:0d:d0:9d:73:26:f4:26:b6:
         5f:34:c5:e3:5c:3a:74:30:6f:ac:96:26:42:48:e1:88:15:0b:
         18:11:aa:f0:33:ce:51:a4:cc:c7:ba:4d:01:11:04:4d:63:d2:
         ff:df:1e:d3:af:7b:59:69:cd:db:e5:c4:b6:44:ed:ca:d9:8b:
         95:8c:68:38:7b:6b:2b:85:e9:d0:69:ed:15:e2:89:3a:f5:f5:
         33:88:e9:34:43:18:52:fe:f4:2d:a6:6b:df:b6:9a:86:44:58:
         78:17:78:bf:80:cb:8e:69:dc:53:2a:e9:ed:0c:27:21:56:bb:
         98:7d:4d:b1:e3:f4:1d:23:3f:ca:f7:56:18:2e:81:30:b5:06:
         58:43:20:1c:d4:99:07:5a:a7:d8:c2:34:fd:5b:88:ac:47:21:
         de:ed:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:57 2026 by rpki-client