Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31D902165E7311EB8B143F3BC4F9AE02.roa
File:                     31D902165E7311EB8B143F3BC4F9AE02.roa (raw, json)
Hash identifier:          WVvSpMhKFxSN9i8JnDOZYNXQPB/pQobS+FdjnkNHrVI=
Subject key identifier:   05:23:E8:30:AB:69:98:38:71:E6:F0:58:39:4C:93:21:6C:E5:3D:C6
Certificate issuer:       /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial:       07BA
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31D902165E7311EB8B143F3BC4F9AE02.roa
Signing time:             Sun 26 Jul 2026 22:42:36 +0000
ROA not before:           Sun 26 Jul 2026 22:42:36 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135063
IP address blocks:        43.254.134.0/24 maxlen: 24
                          43.254.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
                          rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
        Validity
            Not Before: Jul 26 22:42:36 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a668d5b-de87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:99:b0:e5:7d:e6:2f:87:95:31:43:a6:f2:66:
                    d1:d1:d7:d4:2d:21:ca:c7:8f:52:d7:3d:25:e0:34:
                    5e:f7:7c:1a:e3:42:7c:9f:52:97:df:7b:70:05:8c:
                    4f:f4:e4:7e:3d:4e:62:cb:96:ee:b7:3f:f6:dc:d8:
                    5a:9a:e2:1b:9c:a2:de:6f:c2:84:be:91:12:41:98:
                    83:88:f6:d7:92:0d:8f:b5:ca:26:94:2c:00:ba:d6:
                    79:c1:d6:c6:96:29:0c:da:43:32:4a:04:bc:82:c5:
                    f9:2c:e4:d9:33:d1:32:46:1b:a3:8f:a2:d3:c3:8c:
                    82:ae:92:1a:31:03:a2:4d:08:ee:d1:ac:61:07:e4:
                    ad:a6:a2:59:e3:03:9c:54:e7:ff:79:fb:c2:e6:6c:
                    fe:95:77:b3:2a:87:0b:ca:32:cf:b4:47:99:76:0e:
                    53:46:97:73:f1:2c:c8:9d:0f:07:0d:39:2a:c4:eb:
                    8a:bc:c8:f3:9c:5d:19:d8:1d:23:09:7a:74:21:dd:
                    2c:9a:74:ad:60:e3:d7:52:37:39:9c:48:f7:94:ee:
                    ff:b1:22:48:de:c3:40:94:16:f6:5f:44:ed:d9:42:
                    67:7c:86:ca:ae:a2:b4:f6:57:66:34:07:09:46:8f:
                    61:02:b5:55:3f:1a:37:46:97:d4:47:85:a4:53:5d:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:23:E8:30:AB:69:98:38:71:E6:F0:58:39:4C:93:21:6C:E5:3D:C6
            X509v3 Authority Key Identifier:
                keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31D902165E7311EB8B143F3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:67:d8:27:57:9d:70:81:f2:dd:88:88:45:a7:87:ab:08:4b:
         93:55:24:1a:d1:db:b2:20:d2:52:5a:ce:29:75:ce:fc:ca:77:
         3c:52:4d:7b:ef:8f:9d:45:19:71:25:a2:66:1c:00:78:08:a4:
         a0:03:99:01:26:9f:2d:03:03:99:5d:30:d0:07:aa:54:8d:5e:
         ae:c1:e0:c3:f2:cf:26:5f:5b:06:af:10:8e:ca:54:70:a3:c3:
         51:41:2f:4b:03:d2:4d:ad:16:cb:b5:e5:c3:1a:48:e3:f6:1f:
         a5:97:24:ef:0c:c5:3a:40:e3:6c:9a:de:94:9f:a6:ea:42:b6:
         3b:73:ac:16:4c:fc:ff:92:77:55:fd:58:80:fe:42:12:e8:14:
         d0:a8:69:bb:98:69:71:5f:89:74:95:72:a7:93:c6:2c:8e:9b:
         89:a5:33:21:54:53:83:c0:ff:60:a4:0b:e8:31:7d:f3:65:61:
         dd:7a:d3:73:58:79:75:72:6e:f8:4b:26:0a:e3:62:76:32:eb:
         75:93:e3:fe:51:84:3f:8c:74:c5:4b:01:af:74:3c:9a:0e:87:
         76:e3:2e:a2:bc:f1:5a:5f:44:b6:08:d5:7e:23:cf:e5:b4:09:
         83:99:67:ed:61:4b:b4:2f:57:3e:05:a4:5f:72:e5:cd:6c:b8:
         04:87:b8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:43 2026 by rpki-client