Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/5F18EB127A7E11EF932E0B3EC4F9AE02.roa
File:                     5F18EB127A7E11EF932E0B3EC4F9AE02.roa (raw, json)
Hash identifier:          BsUN/x3WheMuDM+8ji5PasFXfHjRNRnwP8p4d3XtEUI=
Subject key identifier:   F1:0B:8D:16:0D:5B:D4:3D:68:19:FF:EF:7C:A5:9D:61:24:E7:0C:EF
Certificate issuer:       /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial:       011E
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/5F18EB127A7E11EF932E0B3EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:38:58 +0000
ROA not before:           Fri 31 Oct 2025 05:49:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137097
IP address blocks:        160.187.66.0/24 maxlen: 24
                          160.187.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
                          rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 12:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
        Validity
            Not Before: Oct 31 05:49:42 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a584e2-f0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:5b:c1:24:f9:ae:62:7a:a2:0c:e5:d5:28:
                    92:94:d4:b2:b5:2a:59:de:6b:fc:39:91:fa:fa:38:
                    ef:d0:26:27:95:3c:cc:8f:a7:14:0f:5a:16:31:2e:
                    37:a6:01:a7:d9:3e:c0:09:ae:75:9c:af:24:d2:8a:
                    02:27:fa:be:da:d0:b2:1f:e0:0f:0e:7e:3d:62:72:
                    d4:b6:ce:a6:6f:2f:69:a1:f3:c8:fd:80:5a:c7:1b:
                    20:5d:af:85:80:a1:39:c5:24:88:42:87:54:38:06:
                    bc:7b:0e:91:31:03:97:99:e2:4c:e0:23:9e:c4:0e:
                    e7:df:5a:b4:11:1e:17:16:02:77:2d:cf:8a:61:47:
                    39:a2:9d:6f:de:9d:c2:2a:a5:3b:30:7b:90:38:5f:
                    13:43:86:54:07:89:6c:5c:c2:4f:4c:19:e9:c2:99:
                    b2:47:ab:c0:47:3a:20:5a:0a:54:a9:c7:55:44:1e:
                    1b:4c:c4:22:da:da:d9:14:28:18:33:05:c9:7e:84:
                    8a:8f:b9:56:32:53:e6:f2:f3:ed:6f:e2:96:aa:6a:
                    ce:90:29:b2:22:4c:84:5c:4b:01:7c:35:36:bb:9b:
                    ee:43:85:5a:33:22:ae:6e:66:a3:04:98:43:69:cf:
                    94:e0:07:ef:16:de:fe:c1:3c:8a:c9:3a:4b:74:64:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0B:8D:16:0D:5B:D4:3D:68:19:FF:EF:7C:A5:9D:61:24:E7:0C:EF
            X509v3 Authority Key Identifier:
                keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/5F18EB127A7E11EF932E0B3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:94:3c:37:07:fa:47:18:df:4c:7b:9e:3d:c1:5b:83:c6:54:
         19:6f:a5:e7:b4:5a:17:7a:08:1f:27:fc:b1:49:33:34:08:ee:
         27:52:02:49:0b:fb:60:55:93:ed:65:9c:e1:47:07:ec:30:c5:
         c5:1e:f9:6e:24:80:b4:1b:bb:9c:d6:1a:04:7f:f3:90:05:7f:
         f8:38:82:23:71:df:cc:1f:49:b9:75:ee:78:70:b4:70:16:3f:
         f2:24:fc:06:05:bc:9e:0d:37:dd:40:d6:fb:1e:14:51:59:06:
         ed:0d:db:1a:cb:6a:89:b7:f8:b1:76:c6:f6:5c:ab:ff:78:0b:
         50:57:10:9a:37:92:8b:32:62:a7:a8:ed:cf:4b:eb:80:6b:98:
         78:8c:53:64:3e:04:81:6f:f4:1e:86:8e:b1:f7:bc:41:c9:63:
         4c:51:40:9f:e5:22:9f:c0:35:7a:d3:ba:a9:a1:8d:79:ac:7d:
         c0:fb:37:92:67:3c:69:c2:3b:dd:65:56:7b:bb:dc:cf:f9:2f:
         87:d6:71:e3:15:a7:97:3e:cd:16:67:56:92:a0:e9:35:12:12:
         ca:28:23:b0:bd:c9:64:3a:fa:b4:1b:51:33:da:f4:54:97:18:
         df:f9:ab:f7:19:c0:bc:c4:fd:70:da:e9:3d:0e:9e:62:92:85:
         38:e2:fd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:23 2026 by rpki-client