Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/38161248A26911EFBF6D0319C4F9AE02.roa
File:                     38161248A26911EFBF6D0319C4F9AE02.roa (raw, json)
Hash identifier:          AVpmO1XfQqx7osD3xv12YLKG1Ejq79RCs8GNCY34Q2o=
Subject key identifier:   DE:14:C5:AA:3D:35:25:2F:F3:F4:AE:AC:46:0B:97:2C:81:32:41:14
Certificate issuer:       /CN=A9152329/serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
Certificate serial:       FD
Authority key identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/38161248A26911EFBF6D0319C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:48:06 +0000
ROA not before:           Sat 15 Nov 2025 03:51:21 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153354
IP address blocks:        160.187.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl
                          rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152329, serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
        Validity
            Not Before: Nov 15 03:51:21 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a5a325-496a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:be:4f:bb:90:40:21:2e:1b:3d:94:f3:53:
                    35:95:96:d8:cf:36:31:37:ad:d0:80:37:c3:b4:a7:
                    64:99:c2:51:db:ad:fd:3a:97:e9:0b:7e:3e:10:12:
                    11:34:8b:26:5e:0e:d3:d4:e9:99:f6:ce:fd:60:1d:
                    45:1e:8a:fe:61:b3:47:7f:45:1e:c5:f1:34:b6:a4:
                    84:07:a2:9e:b9:81:01:d8:39:6a:af:bc:9d:72:26:
                    7d:09:7b:05:49:11:bd:70:6a:54:df:c1:19:eb:bc:
                    bd:d1:4a:81:08:e2:63:da:b1:d1:4a:b8:f8:31:9b:
                    43:11:61:8e:4a:e2:21:60:99:ec:65:0a:a5:98:3f:
                    24:bb:a0:11:13:7d:b2:23:81:39:ed:a1:4b:eb:2c:
                    e8:cc:20:40:3b:73:13:d3:a2:c8:bf:cb:e4:c2:c1:
                    1a:70:2a:28:ed:49:d2:54:dc:c5:5d:80:51:d8:af:
                    57:24:f8:0e:85:e5:50:08:ef:57:be:4d:7c:61:50:
                    45:70:2f:19:71:f3:e6:7a:26:5e:24:71:d0:06:88:
                    9f:52:55:2a:e6:c9:7c:86:2b:2b:0e:73:e4:8d:83:
                    bf:8e:b0:59:17:4f:c8:73:96:8e:aa:e0:16:13:64:
                    e7:d5:61:44:a3:61:c6:80:55:1e:a2:54:54:de:a3:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:14:C5:AA:3D:35:25:2F:F3:F4:AE:AC:46:0B:97:2C:81:32:41:14
            X509v3 Authority Key Identifier:
                keyid:29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/38161248A26911EFBF6D0319C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:ba:6a:84:94:44:53:c3:7f:30:42:b0:7f:d8:e0:6f:a0:75:
         ae:2b:47:14:b7:59:7b:3e:50:7d:28:cf:5d:c3:84:42:50:45:
         74:90:67:12:87:ce:22:69:cf:19:ff:c9:ee:5a:b0:f0:c1:38:
         b2:93:34:8f:e6:5a:35:59:2e:57:67:25:b0:cc:66:98:99:2c:
         f6:2f:f0:32:15:ba:77:c9:a7:22:fa:f5:bc:fb:02:fb:c8:4f:
         95:06:42:51:bd:25:f4:fd:32:a5:53:cd:b6:c6:4d:a4:13:3b:
         3d:0d:f5:42:a3:5c:8b:b1:94:a8:fe:48:b4:c5:d5:0a:d6:1d:
         51:02:28:8a:b0:1c:4d:2b:7b:5c:c3:36:ae:b3:5b:3e:a0:41:
         78:de:93:da:b3:b9:9f:39:15:44:1a:03:fd:3c:97:96:8d:92:
         62:40:4d:2d:61:4e:81:bd:b1:07:0d:3a:bb:52:e7:2c:f1:b2:
         3a:2b:24:1e:70:03:35:c3:f2:54:9f:c8:cb:65:ea:f8:9b:fa:
         28:a0:65:5a:dc:7d:93:e4:a3:bf:a1:56:4c:7d:68:67:76:b4:
         72:95:3e:aa:10:41:79:62:4e:9e:1a:69:1a:a3:5b:46:11:b3:
         09:7d:e4:46:97:31:e8:28:32:b0:99:45:29:9a:47:ff:e3:a0:
         73:bf:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:25 2026 by rpki-client