Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/3263B6905E7311EB8B143F3BC4F9AE02.roa
File:                     3263B6905E7311EB8B143F3BC4F9AE02.roa (raw, json)
Hash identifier:          8Bf2rdYfYL741zuMOv5KtG3C9cn1bSgEVEELLNz/YH8=
Subject key identifier:   9E:DE:D0:33:D4:94:24:0B:C1:CA:1F:B4:17:F7:D0:C5:09:D1:5F:06
Certificate issuer:       /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial:       0766
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/3263B6905E7311EB8B143F3BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:47:16 +0000
ROA not before:           Sat 12 Jul 2025 22:33:16 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136523
IP address blocks:        43.254.133.0/24 maxlen: 24
                          43.254.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
                          rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
        Validity
            Not Before: Jul 12 22:33:16 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46d94-e9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:7c:5f:87:0c:b9:52:37:24:54:0d:ef:bb:
                    6b:e5:9f:20:f6:9a:e6:02:6c:24:74:89:39:a9:d3:
                    c1:d9:78:d2:95:6b:aa:c7:a6:31:75:25:2b:c8:8c:
                    55:ce:b3:06:f3:b3:54:9c:cf:b9:6f:94:44:2e:3a:
                    5c:08:99:08:3d:ec:f7:41:9d:61:d2:fa:b9:9b:7c:
                    7e:17:cc:0c:60:9d:3a:16:a5:d5:92:52:75:41:35:
                    b2:fe:bc:fd:aa:1c:d5:06:93:41:8e:b2:2b:20:9b:
                    d2:d3:f3:c9:ec:54:54:1d:bb:3f:48:de:3b:03:e6:
                    bd:e9:0f:b2:5d:7d:c3:ac:57:c6:fa:80:02:14:7f:
                    cf:5d:d4:fa:60:31:7a:37:f5:73:0e:bf:b3:90:b4:
                    56:3b:f6:cb:54:03:56:cb:03:f4:7a:bf:e0:17:c5:
                    22:7e:53:f9:97:d8:1c:a2:fd:ea:15:69:0c:8c:60:
                    b7:3a:65:db:5a:c1:8f:35:7e:73:88:0b:22:e9:87:
                    cd:36:4b:ef:5c:f8:0b:8b:fb:da:df:2d:8d:60:83:
                    62:ae:9d:7d:fb:cf:7b:ef:26:91:c1:95:92:f5:60:
                    3b:19:0d:f8:52:11:b3:45:e0:cf:a2:d0:31:d7:97:
                    e3:1e:49:a4:9f:99:50:22:ef:a9:60:89:f9:c4:97:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DE:D0:33:D4:94:24:0B:C1:CA:1F:B4:17:F7:D0:C5:09:D1:5F:06
            X509v3 Authority Key Identifier:
                keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/3263B6905E7311EB8B143F3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.133.0/24
                  43.254.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:64:07:12:be:ea:8a:5c:b3:42:96:54:f5:72:dd:f9:9f:dd:
         82:86:d5:a6:34:f1:d1:89:35:84:0b:f3:d7:3a:08:df:f9:9c:
         42:47:8e:24:d1:cb:bf:fc:c9:e4:cb:8c:28:34:d1:84:47:c8:
         d5:fd:8f:06:26:e4:a2:6e:39:fa:28:6d:af:91:2a:4a:8f:ea:
         66:c0:23:77:d3:6f:e6:c9:b6:44:21:e0:26:28:f0:a5:db:f9:
         c1:1f:a3:7f:88:ab:d9:13:c0:55:16:0e:39:08:10:3b:f2:70:
         0c:e9:9b:6a:4a:f6:06:17:9d:61:de:b5:c2:ff:72:b9:0c:fb:
         4b:36:1a:91:5f:54:3d:ab:f2:8f:0f:67:a8:5e:3b:74:b7:78:
         0d:4d:86:89:d0:cb:36:81:48:8b:12:ea:56:d0:07:bd:63:8c:
         07:f5:7d:02:cd:e3:f3:c1:73:31:d8:8a:30:fe:33:28:1f:13:
         fd:5f:b5:82:94:5f:1a:39:a9:58:bd:ff:8d:f1:7b:9e:e6:7e:
         6f:87:85:d4:a8:84:13:4d:71:a0:ce:26:b8:bb:5f:4b:f8:80:
         90:63:25:92:f2:47:10:a6:df:91:97:77:47:cd:f2:f4:33:72:
         16:65:11:2a:2f:88:fd:93:c0:a2:5e:28:54:14:ae:d2:b2:95:
         95:63:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:42 2026 by rpki-client