Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/3EEBC4867BFF11EFA2839E45C4F9AE02.roa
File:                     3EEBC4867BFF11EFA2839E45C4F9AE02.roa (raw, json)
Hash identifier:          BNw54ourUE+j9qMXjxmgsD1rJcXCowGw6fh8YI3ahFs=
Subject key identifier:   20:FA:E1:DF:F0:BC:7C:C9:B6:16:BC:4E:0F:C0:07:C4:E2:CD:29:01
Certificate issuer:       /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial:       018C
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/3EEBC4867BFF11EFA2839E45C4F9AE02.roa
Signing time:             Mon 21 Sep 2026 04:56:17 +0000
ROA not before:           Mon 21 Sep 2026 04:56:17 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     153334
IP address blocks:        160.187.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
                          rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
        Validity
            Not Before: Sep 21 04:56:17 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab0b8f1-5773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:ee:ae:e7:11:3d:66:b9:84:7a:85:f9:36:
                    1c:96:1f:22:85:86:41:3d:c2:7b:f1:37:54:95:16:
                    f3:48:82:88:75:73:d0:1e:15:ae:33:6b:07:68:93:
                    d3:71:d2:de:91:dd:02:25:0d:b2:27:5e:c4:3c:4c:
                    d2:e3:41:28:78:3c:88:cd:5e:fd:be:7a:77:a8:12:
                    e0:33:3a:01:9e:f6:06:85:bc:31:d4:04:c5:fc:5c:
                    9a:f6:c3:33:85:96:b9:d8:ea:b1:20:b4:04:72:20:
                    2c:46:30:3d:4a:ec:14:f8:e9:39:16:47:37:0a:f6:
                    c7:f5:46:1c:a6:51:94:ef:5e:d9:10:10:9a:35:48:
                    ab:6a:0e:bc:bc:37:11:0a:c1:bf:a7:15:fa:f5:10:
                    e2:73:db:0f:a7:ec:34:3f:77:f8:9e:ee:10:a1:e8:
                    a8:33:8b:b5:ba:04:55:45:52:f0:a0:cb:b5:05:77:
                    77:25:fa:08:8f:e9:ff:08:5c:0c:0f:34:62:e1:b9:
                    0f:c9:4c:45:07:6e:35:5b:05:5d:02:23:d0:f0:b0:
                    ba:08:51:de:a9:e6:5d:e7:bd:a6:f8:de:66:b3:01:
                    53:f7:fd:29:21:aa:8d:91:cb:14:95:10:46:20:2c:
                    9c:7a:b0:9e:1a:74:ca:ce:25:de:4c:b6:c6:61:fb:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FA:E1:DF:F0:BC:7C:C9:B6:16:BC:4E:0F:C0:07:C4:E2:CD:29:01
            X509v3 Authority Key Identifier:
                keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/3EEBC4867BFF11EFA2839E45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:eb:b2:60:a9:a3:9a:f4:f8:ee:c4:41:df:c2:51:1a:9f:98:
         34:a4:fc:2d:5b:a4:f7:90:5f:26:4f:d7:ab:1c:3d:b4:eb:91:
         e2:e6:d4:88:3c:b3:37:ad:d1:be:6a:f9:ad:07:cd:8a:5e:d0:
         c4:3c:70:67:f4:07:75:5a:a9:48:ce:f4:bf:4e:40:b7:39:7a:
         64:2b:ed:ec:0e:d2:f5:0c:ce:72:66:6e:84:00:f9:21:3a:ad:
         df:4c:04:e0:da:05:8b:cc:ff:02:1c:24:47:e9:d9:14:b8:50:
         ae:52:32:85:b3:16:42:25:a5:de:1a:b9:91:29:6a:01:d3:73:
         e6:d0:7d:5a:13:3d:c8:0f:da:c9:a2:be:de:6a:c8:a2:50:a4:
         af:3d:c5:21:97:3d:6a:89:98:c9:c1:1d:09:54:54:21:b6:73:
         2d:32:89:35:71:e7:1a:df:24:41:b9:1e:df:92:c7:57:d9:ae:
         ee:1e:5f:cc:e3:6f:a6:ed:59:d5:a7:84:63:3c:58:d3:e1:3d:
         ea:c0:aa:8b:77:fb:41:bb:21:2b:cd:de:e4:09:98:a9:01:06:
         8e:22:ae:45:3c:a1:10:16:77:3b:36:8e:2f:ba:50:50:8e:6f:
         51:1f:b4:4a:ac:b8:a8:06:b0:fd:54:16:0e:7a:9b:7c:7d:8b:
         df:c4:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:34:39 2026 by rpki-client