Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/F9EB418CFEAB11F094E473AD656F56BC.roa
File:                     F9EB418CFEAB11F094E473AD656F56BC.roa (raw, json)
Hash identifier:          2I2kxtV9Go+yS4kEarl3OYdWVe9zcH7xNuKQWD2RGXU=
Subject key identifier:   F5:50:3C:F0:37:E4:D6:D3:6D:C0:71:FD:21:37:F9:E8:82:2E:51:A1
Certificate issuer:       /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial:       0117
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/F9EB418CFEAB11F094E473AD656F56BC.roa
Signing time:             Sun 01 Mar 2026 15:22:52 +0000
ROA not before:           Sat 31 Jan 2026 13:51:43 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153365
IP address blocks:        160.191.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
                          rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
        Validity
            Not Before: Jan 31 13:51:43 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a459cc-9c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:d5:5e:a4:07:7d:d8:10:48:48:76:50:34:
                    27:dc:b1:9c:6c:c0:4d:74:f6:85:38:10:2e:c7:b2:
                    76:72:79:a5:11:71:44:ec:cc:37:61:ce:0e:98:84:
                    bc:27:28:3b:12:29:bf:00:55:4d:3c:8c:e6:bd:a0:
                    01:13:12:b2:42:36:14:51:b8:40:e0:ad:02:c4:1e:
                    d7:a3:f2:49:d1:6a:ea:70:f0:88:44:33:45:ce:e8:
                    83:40:b6:4f:2a:cb:20:32:a7:5a:d9:bc:5d:58:8e:
                    ca:a4:fb:a4:2a:19:e1:06:ec:2e:5f:7a:50:7f:d8:
                    14:e5:86:fb:ef:42:25:0d:97:f5:4b:8c:02:83:c1:
                    62:d7:61:73:4e:36:ad:4d:ec:52:a5:78:d0:de:d4:
                    ee:b8:25:12:98:f3:5b:91:99:61:09:a4:6b:4e:fd:
                    f9:09:d5:55:57:36:1f:62:0b:82:95:b4:f1:7a:24:
                    78:6c:f0:a9:1f:4d:e8:b3:43:39:44:b9:df:68:1d:
                    66:30:17:e9:72:b5:ab:f0:ba:32:f1:e5:f3:c4:32:
                    7a:74:c1:76:bd:e8:1a:e2:df:1a:8d:a1:79:97:33:
                    57:59:6c:02:c5:ee:6c:39:65:1f:27:ec:fb:78:49:
                    64:95:f7:fb:be:11:83:09:44:93:16:16:20:78:6a:
                    65:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:50:3C:F0:37:E4:D6:D3:6D:C0:71:FD:21:37:F9:E8:82:2E:51:A1
            X509v3 Authority Key Identifier:
                keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/F9EB418CFEAB11F094E473AD656F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:ab:ef:bc:3b:60:f0:b2:48:6b:90:6c:86:b9:18:69:03:ba:
         32:87:a3:a0:f5:33:f1:a5:e7:88:af:8e:da:56:72:47:ec:a2:
         9e:6d:6b:1f:eb:c9:87:7f:6d:6e:63:17:a9:b3:f3:70:86:83:
         61:46:19:3e:ec:a9:05:3e:dc:70:a2:56:43:37:79:94:b8:14:
         aa:e2:58:58:5b:d8:a2:08:c3:b8:18:33:a7:59:21:13:5e:5a:
         d4:78:78:1f:dc:57:d9:a8:53:e3:2e:a6:68:84:d3:75:24:73:
         42:f1:5d:49:67:fb:2b:f5:5a:a2:39:4f:02:96:6e:f2:dd:a9:
         7f:3b:95:2c:49:63:18:2d:08:ee:98:45:ed:54:96:02:e6:5b:
         81:d8:48:fe:7b:5e:3c:ac:e7:b1:fb:f9:0d:eb:c8:c3:28:e4:
         b1:6e:3b:53:e4:74:4f:71:f7:28:60:aa:67:72:f2:64:ee:25:
         67:26:36:2c:fd:2a:3b:60:29:bc:df:a7:0b:af:ee:56:4e:4f:
         c8:ca:7d:22:3f:81:3d:9c:80:fe:e5:18:da:40:1e:df:d6:ff:
         91:31:b4:d8:7e:6d:a4:6e:91:40:02:2c:83:6d:34:12:71:f6:
         69:8e:78:16:08:d3:40:c6:09:44:4f:db:a5:e8:fe:3a:32:12:
         b7:41:f7:27
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE
MzAzNEUzOEQwHhcNMjYwMTMxMTM1MTQzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTljYy05Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAru7VXqQHfdgQSEh2UDQn3LGcbMBNdPaFOBAux7J2cnmlEXFE7Mw3Yc4OmIS8
Jyg7Eim/AFVNPIzmvaABExKyQjYUUbhA4K0CxB7Xo/JJ0WrqcPCIRDNFzuiDQLZP
KssgMqda2bxdWI7KpPukKhnhBuwuX3pQf9gU5Yb770IlDZf1S4wCg8Fi12FzTjat
TexSpXjQ3tTuuCUSmPNbkZlhCaRrTv35CdVVVzYfYguClbTxeiR4bPCpH03os0M5
RLnfaB1mMBfpcrWr8Loy8eXzxDJ6dMF2vega4t8ajaF5lzNXWWwCxe5sOWUfJ+z7
eElklff7vhGDCUSTFhYgeGplyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPVQPPA3
5NbTbcBx/SE3+eiCLlGhMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC
Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0
NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjBDOUUvNEVGRDE1QjY4QkNBMTFFRkFCRkMxQTM5QzRGOUFFMDIvRjlFQjQxOENG
RUFCMTFGMDk0RTQ3M0FENjU2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoL8UMA0GCSqGSIb3DQEBCwUAA4IBAQAmq++8O2DwskhrkGyGuRhp
A7oyh6Og9TPxpeeIr47aVnJH7KKebWsf68mHf21uYxeps/NwhoNhRhk+7KkFPtxw
olZDN3mUuBSq4lhYW9iiCMO4GDOnWSETXlrUeHgf3FfZqFPjLqZohNN1JHNC8V1J
Z/sr9VqiOU8Clm7y3al/O5UsSWMYLQjumEXtVJYC5luB2Ej+e148rOex+/kN68jD
KOSxbjtT5HRPcfcoYKpncvJk7iVnJjYs/So7YCm836cLr+5WTk/Iyn0iP4E9nID+
5RjaQB7f1v+RMbTYfm2kbpFAAiyDbTQScfZpjngWCNNAxglET9ul6P46MhK3Qfcn
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:24 2026 by rpki-client