Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa
File:                     C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (raw, json)
Hash identifier:          QsghawO4aYI/tRCC8XaX48xeNh6NMLZfkXMfCLwX9S0=
Subject key identifier:   97:C4:5B:D2:7F:96:EA:FF:27:18:CE:AA:08:08:AC:4C:64:A2:C5:7C
Certificate issuer:       /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial:       018B
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa
Signing time:             Mon 21 Sep 2026 04:56:15 +0000
ROA not before:           Mon 21 Sep 2026 04:56:15 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     132372
IP address blocks:        160.187.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
                          rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
        Validity
            Not Before: Sep 21 04:56:15 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab0b8ee-77d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:65:c8:54:b6:b3:8f:7d:e5:4a:84:e7:42:
                    cc:c5:03:fc:05:17:af:42:a0:c3:0b:7c:a0:5b:f8:
                    b7:a6:84:e2:6b:5a:4c:c9:29:e0:f8:3e:8a:b3:80:
                    58:58:bb:1d:cb:91:86:f3:f2:d9:89:bc:f0:60:e9:
                    f1:14:aa:9d:59:29:f5:df:90:af:73:fe:d1:e5:17:
                    bd:a5:59:8e:9d:66:d1:d9:03:a7:c6:60:e8:78:53:
                    c3:98:23:73:01:23:02:18:66:0d:8e:18:36:7b:40:
                    28:f2:b7:07:b0:78:76:55:7a:9d:ac:c4:78:ef:23:
                    8d:64:bc:34:03:a3:22:2e:8b:c5:b9:30:69:45:2c:
                    b0:44:d2:00:06:26:92:35:26:ae:af:2a:52:a0:8e:
                    97:77:dc:60:b3:06:e4:c6:ba:ae:89:fb:14:c5:6a:
                    ed:c5:03:7e:f8:64:3f:c9:ac:ae:6b:26:fa:03:ea:
                    08:40:1a:12:98:55:a1:4a:a4:c9:0a:55:f0:78:43:
                    85:44:4a:8c:b7:34:22:ac:77:b7:fa:9d:75:e1:28:
                    18:da:f7:b2:18:e7:a0:bb:ae:4d:00:e6:29:2f:d8:
                    a8:27:72:12:be:0a:11:7a:d2:3c:66:ee:e0:33:93:
                    3b:05:44:61:c9:c3:bb:89:77:64:db:7b:dd:61:90:
                    da:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C4:5B:D2:7F:96:EA:FF:27:18:CE:AA:08:08:AC:4C:64:A2:C5:7C
            X509v3 Authority Key Identifier:
                keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:04:24:af:1a:39:98:19:31:7b:1d:94:3f:cb:15:38:e9:9b:
         4a:b7:af:24:dc:e6:b2:f9:b3:3d:e5:74:b9:2b:2f:ed:96:8d:
         af:b5:e4:f5:8a:97:3b:30:eb:a5:7a:0a:7b:b9:65:a6:06:05:
         13:ea:38:15:c2:6a:49:77:e0:12:9b:24:e6:87:f2:c9:37:ec:
         98:a2:06:48:1b:9f:8f:fd:b3:13:57:16:0e:b2:07:9f:13:6f:
         5b:62:91:be:e1:ba:e7:17:b5:27:c8:66:ca:1c:7c:9e:d3:dd:
         15:b1:54:24:a7:c7:91:ec:9d:15:9a:1f:06:f4:ca:69:b0:56:
         2b:14:9f:b1:a4:ce:da:7e:74:32:21:fe:3c:ef:30:22:a2:ae:
         91:dd:d8:75:b3:fb:59:fd:ca:01:46:7f:f5:6d:e6:60:77:f3:
         bc:98:e0:5e:66:07:54:e4:0a:36:a4:f9:8c:a5:2b:da:ff:50:
         34:1c:20:11:29:88:54:de:a0:39:99:3c:a9:0b:51:02:f9:4f:
         fe:c4:b2:dd:2e:ec:09:83:6c:9b:ff:07:02:76:b4:fe:98:78:
         2e:62:23:4b:a6:fe:e3:fa:d1:af:ac:af:18:8d:ca:6e:97:c2:
         62:dd:a0:64:fb:f3:87:11:b3:73:bf:e8:5d:d8:a7:ab:06:03:
         da:72:59:f3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF
RTc5NzVCMEIwHhcNMjYwOTIxMDQ1NjE1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIwYjhlZS03N2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshplyFS2s4995UqE50LMxQP8BRevQqDDC3ygW/i3poTia1pMySng+D6Ks4BY
WLsdy5GG8/LZibzwYOnxFKqdWSn135Cvc/7R5Re9pVmOnWbR2QOnxmDoeFPDmCNz
ASMCGGYNjhg2e0Ao8rcHsHh2VXqdrMR47yONZLw0A6MiLovFuTBpRSywRNIABiaS
NSaurypSoI6Xd9xgswbkxrquifsUxWrtxQN++GQ/yayuayb6A+oIQBoSmFWhSqTJ
ClXweEOFREqMtzQirHe3+p114SgY2veyGOegu65NAOYpL9ioJ3ISvgoRetI8Zu7g
M5M7BURhycO7iXdk23vdYZDaDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJfEW9J/
lur/JxjOqggIrExkosV8MB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC
RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjVBNTgvRDZGMTA1MjI3QkZEMTFFRkE3QjhFQjVDQzRGOUFFMDIvQzFCQzVDNUU3
QkZGMTFFRkEyRkNFNzc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoLthMA0GCSqGSIb3DQEBCwUAA4IBAQBzBCSvGjmYGTF7HZQ/yxU4
6ZtKt68k3Oay+bM95XS5Ky/tlo2vteT1ipc7MOulegp7uWWmBgUT6jgVwmpJd+AS
myTmh/LJN+yYogZIG5+P/bMTVxYOsgefE29bYpG+4brnF7UnyGbKHHye090VsVQk
p8eR7J0Vmh8G9MppsFYrFJ+xpM7afnQyIf487zAioq6R3dh1s/tZ/coBRn/1beZg
d/O8mOBeZgdU5Ao2pPmMpSva/1A0HCARKYhU3qA5mTypC1EC+U/+xLLdLuwJg2yb
/wcCdrT+mHguYiNLpv7j+tGvrK8Yjcpul8Ji3aBk+/OHEbNzv+hd2KerBgPaclnz
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:23:18 2026 by rpki-client