Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/9CAF31CA5D8111F0A04DD550C4F9AE02.roa
File:                     9CAF31CA5D8111F0A04DD550C4F9AE02.roa (raw, json)
Hash identifier:          eX2tn1QIuokhr40tRhM6FAH4/iDlJ6AsfUDI7tg8Vpk=
Subject key identifier:   9A:D5:D6:B3:9F:4B:23:BF:44:41:D1:8D:F1:70:EA:1B:F7:FE:C8:B4
Certificate issuer:       /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Certificate serial:       7B
Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/9CAF31CA5D8111F0A04DD550C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:12:08 +0000
ROA not before:           Thu 10 Jul 2025 11:32:51 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149486
IP address blocks:        160.30.16.0/24 maxlen: 24
                          160.30.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
                          rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
        Validity
            Not Before: Jul 10 11:32:51 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3f4d7-12f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:92:33:84:a2:05:cd:c9:da:1f:e0:a8:f7:
                    ae:4f:f4:2d:47:5a:50:e4:ab:c9:7c:43:c4:40:58:
                    ca:4c:a1:63:50:2d:a7:90:1a:32:d2:b7:ce:fc:fc:
                    cf:f5:f2:b9:cd:93:78:10:9a:c7:df:9d:de:71:9b:
                    91:63:75:ac:b9:6d:e8:71:9c:65:ca:d5:05:da:94:
                    40:2d:7a:cd:47:87:ea:01:34:3d:b0:e8:bd:07:a2:
                    41:55:95:cb:44:3a:8b:59:fd:b5:0e:aa:d6:5e:2f:
                    40:53:af:41:fe:1b:3a:69:ca:91:5a:6e:3c:62:a8:
                    13:47:ab:9d:35:4b:35:e2:26:f0:00:49:fb:52:b1:
                    80:be:2d:5b:88:af:15:25:9d:9d:40:2f:5f:00:0f:
                    a4:5f:8c:62:1f:0f:1f:64:27:3b:b3:1f:e9:4a:de:
                    fc:2b:51:38:ff:7e:18:9c:ab:f0:40:3e:de:85:32:
                    68:33:f2:cf:6a:6f:6f:e8:ef:63:22:f7:8a:0d:ef:
                    a1:66:2c:3a:80:d8:18:fe:ca:67:56:d7:52:5a:4a:
                    7c:69:ed:d2:05:bd:a9:f8:99:dd:17:21:19:55:9c:
                    32:ea:8f:13:26:a4:ec:df:9d:b5:05:23:d2:7d:e1:
                    f2:34:60:c9:e5:89:2c:ed:b1:cb:2f:ca:2d:73:bc:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D5:D6:B3:9F:4B:23:BF:44:41:D1:8D:F1:70:EA:1B:F7:FE:C8:B4
            X509v3 Authority Key Identifier:
                keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/9CAF31CA5D8111F0A04DD550C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:61:ac:ff:11:a9:79:50:7b:26:64:e2:af:59:11:86:68:fd:
         fe:a6:c3:e2:76:8f:5d:51:50:d2:0d:50:d1:c8:17:ce:37:9d:
         9e:76:8c:3c:d5:c0:b8:0a:b1:cb:e6:5a:94:2c:df:fb:09:ef:
         70:20:6c:10:40:eb:bf:21:34:06:02:3c:1c:36:b0:3f:d1:46:
         21:5b:c7:d6:df:35:a1:81:7c:04:f3:3f:b6:30:19:75:ff:f1:
         84:20:ac:bc:f3:4c:e8:2f:f0:0c:31:94:b8:b3:5b:06:7a:24:
         37:c4:26:99:e6:28:04:f5:32:eb:73:cd:73:08:f4:13:49:90:
         6a:5f:36:8c:fb:0a:ff:a6:24:4b:cf:b5:ea:e2:20:95:e7:79:
         aa:47:1b:1b:04:6f:40:22:ed:2b:14:42:03:dc:d9:ef:28:8b:
         47:e8:a2:e8:05:b9:e7:b3:34:11:ef:21:ca:21:7a:77:a0:7d:
         6b:17:97:e9:cd:36:2c:54:2e:61:8e:4a:b8:f8:c8:4a:bb:eb:
         32:19:5c:e4:fb:b0:f3:16:6c:00:48:b1:25:75:55:32:7b:ac:
         e8:eb:bc:d3:8d:36:c1:f3:fb:a6:53:30:5c:e3:81:5a:86:9d:
         f6:84:6c:34:78:81:b3:59:a8:20:cb:27:7b:69:b6:60:58:f1:
         06:35:54:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:47 2026 by rpki-client