Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/88A6DB9086E211EF82ACA725C4F9AE02.roa
File:                     88A6DB9086E211EF82ACA725C4F9AE02.roa (raw, json)
Hash identifier:          cV0epGQTem/GEv7IIKubFOnRwGYNIWNxG9bk0ie+Eac=
Subject key identifier:   A4:6C:46:14:F0:E1:40:F8:E2:3D:47:5E:DC:CB:9F:E8:D4:7D:14:A8
Certificate issuer:       /CN=A913647F/serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
Certificate serial:       0118
Authority key identifier: 46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/88A6DB9086E211EF82ACA725C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:01:29 +0000
ROA not before:           Sat 31 May 2025 06:58:23 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     133453
IP address blocks:        160.22.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl
                          rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913647F, serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
        Validity
            Not Before: May 31 06:58:23 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a649-25f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:3c:f3:ea:8a:f5:3b:81:6c:2c:83:71:74:
                    3f:72:66:55:0c:3d:a5:c5:b6:4e:8f:3b:1e:70:3d:
                    0e:ca:b0:11:71:0a:7b:16:6a:72:85:0c:55:b0:2d:
                    60:77:d7:90:ca:a8:82:0e:ef:e2:0c:b9:9e:15:e3:
                    9a:25:ee:00:64:d7:9e:ec:0e:f8:36:8a:fd:29:ed:
                    06:42:cf:84:71:c7:a3:05:db:e3:76:cb:c6:2f:be:
                    9a:55:05:c3:d3:2d:19:fa:1c:57:bd:c5:68:6f:f2:
                    af:37:d0:8d:63:ed:7a:68:3a:9f:1d:ed:78:b1:f5:
                    e9:e2:30:49:9d:32:a3:8f:fb:be:7e:58:f3:31:ed:
                    a9:5e:09:c6:ed:2d:37:cf:60:8f:06:3b:2a:ee:54:
                    c4:85:94:a4:7d:da:3a:fa:40:7d:25:a9:4e:36:5b:
                    5f:91:97:68:83:32:7a:65:bf:e5:72:54:dd:d5:28:
                    ca:3e:b6:e2:5c:fa:61:8f:a2:a8:8c:82:41:35:c5:
                    e7:17:d4:30:e5:30:e4:33:42:77:7d:f6:e0:89:8b:
                    5d:78:ac:e9:fa:0d:e3:7d:26:95:6c:42:c4:29:4d:
                    e8:62:7d:c0:fc:a5:b5:88:61:19:c3:8d:70:0e:3a:
                    fe:4c:0b:02:55:bf:c0:e2:d0:4e:e8:93:51:50:72:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6C:46:14:F0:E1:40:F8:E2:3D:47:5E:DC:CB:9F:E8:D4:7D:14:A8
            X509v3 Authority Key Identifier:
                keyid:46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/88A6DB9086E211EF82ACA725C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:be:be:6a:0e:9a:0c:d1:f7:45:c2:6b:5f:d7:7c:18:53:fc:
         43:40:95:c2:d0:48:75:83:03:1d:ff:ca:d5:7f:df:8e:f5:64:
         29:89:42:94:1b:37:e8:da:35:73:23:11:f7:de:55:c7:d5:e1:
         07:cd:9b:d0:df:87:cf:fb:1d:ff:04:bc:0a:53:5c:7c:83:26:
         40:a4:92:07:f1:0a:77:bc:cc:ff:d2:32:50:b2:32:f3:dc:d3:
         be:24:b4:fa:8f:71:72:c1:f2:b6:1b:cc:5b:7d:88:d6:dd:ea:
         b5:37:46:dc:bf:40:30:c0:7f:be:8f:d6:24:01:da:2a:0b:ba:
         28:a8:0e:99:a1:95:c8:1d:79:95:78:33:4c:e3:20:c3:71:f3:
         b5:d4:60:88:8c:b0:a8:61:d3:99:3c:23:7b:a2:67:0a:f5:fd:
         e7:ef:5b:95:12:21:7a:3f:69:35:1a:ec:d3:bd:35:71:b2:db:
         99:16:f5:ba:44:58:a6:48:55:1d:dd:62:19:ee:92:91:1b:ec:
         48:63:19:e6:57:17:15:97:0d:39:a8:a0:31:7b:aa:48:e1:11:
         d3:67:8f:cf:7a:ef:4a:49:93:48:4e:01:03:0d:26:32:f4:6e:
         9a:f8:a3:0f:5f:6c:55:d3:bf:59:97:1c:4a:59:cb:38:b2:3d:
         b5:cf:86:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:59 2026 by rpki-client