Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa
File:                     1605F9B6169E11EC9D259855C4F9AE02.roa (raw, json)
Hash identifier:          utuJrvT7k0aAp1PIv4kJ0yTf9B0xorguSm8sns4EFRw=
Subject key identifier:   53:4A:76:78:22:DE:77:2E:9C:63:EC:C5:9A:5C:19:5C:C4:1B:B9:B6
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       0CBA
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:27:43 +0000
ROA not before:           Sat 16 Aug 2025 19:30:06 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     18382
IP address blocks:        202.167.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3258 (0xcba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Aug 16 19:30:06 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a5904f-299c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:b5:d0:84:51:93:88:e8:58:dc:5f:44:27:
                    14:f1:80:89:89:fa:61:1e:cc:86:af:3c:dd:de:88:
                    ce:b4:b3:bc:78:bd:19:dd:2b:9d:a9:fc:f9:5d:c8:
                    2e:45:d1:a6:2e:20:ce:86:4e:4d:97:ec:82:91:d1:
                    39:86:e9:ad:b2:9b:c8:85:6c:29:ba:d4:c8:77:e9:
                    17:e5:c3:c4:33:71:71:51:fd:08:c3:c2:05:c0:f4:
                    83:f5:64:63:e3:6e:fe:57:df:93:6a:d8:32:0e:0c:
                    b7:db:dd:48:db:cc:54:de:80:b7:03:19:cd:6f:96:
                    02:a5:eb:12:c5:97:c8:08:08:83:ef:32:4a:de:9c:
                    2e:81:75:b0:5a:d2:f9:08:66:b0:0d:e3:e1:95:29:
                    59:67:49:2f:70:57:91:3c:2f:67:bd:37:93:dd:cd:
                    9f:46:5c:d2:47:3a:38:f4:de:ae:7b:e2:5b:16:24:
                    3f:82:80:dd:c5:5a:cd:a5:f8:03:5c:51:48:7e:5e:
                    35:4b:3b:c5:63:35:0c:3b:b5:89:41:5a:ef:75:a2:
                    bc:02:06:68:86:16:86:ec:4d:0e:31:58:f3:61:f8:
                    7d:d5:55:09:d2:32:aa:68:07:31:ad:7a:6f:0c:22:
                    08:e4:7a:19:57:c7:d8:57:45:f1:70:ac:14:92:05:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4A:76:78:22:DE:77:2E:9C:63:EC:C5:9A:5C:19:5C:C4:1B:B9:B6
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.167.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:81:61:c8:29:f9:66:29:59:c3:2e:d7:c8:9d:60:96:79:
         1d:33:ca:28:54:31:d2:bb:00:d1:4b:b7:b0:77:c9:49:99:d1:
         f6:f8:c4:41:c8:5a:2b:8f:a9:99:1a:9f:25:42:46:ac:7e:10:
         d4:44:26:f0:16:6d:96:c3:06:62:2c:50:63:e7:5a:6e:1e:b5:
         46:ee:6d:1d:3a:3d:9c:85:29:59:9c:9b:53:03:84:c2:31:19:
         c7:1a:12:e1:be:57:f5:91:9a:55:75:5a:0f:0f:53:27:a3:c8:
         dd:18:6c:ba:c7:92:43:22:96:7d:51:04:b9:83:03:df:4f:7c:
         b2:46:0e:c5:87:28:4b:f1:21:9f:4a:48:74:c0:cf:3a:e2:71:
         60:2f:2e:7e:66:b9:8d:2b:d2:7f:60:19:dc:d2:e5:28:60:2d:
         c9:e4:e7:a0:f2:dc:55:0f:0f:d7:fc:84:cd:ed:d0:df:f2:01:
         5f:35:3b:26:ed:c8:23:31:35:1f:25:f3:fc:43:50:f3:25:b3:
         d1:61:aa:13:99:fe:6b:4b:a8:99:09:25:6e:c1:4c:41:df:04:
         cb:5c:6a:a7:c8:28:ff:23:9c:81:ca:15:4d:a6:05:5e:02:89:
         42:d5:d7:ff:2d:84:e3:05:36:66:ce:62:72:b9:6e:e8:f1:a2:
         d2:f5:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:50 2026 by rpki-client