Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
File:                     2F02BC96718D11EE97E3E022C4F9AE02.roa (raw, json)
Hash identifier:          6V7NNVVZTxyCh5Txl3hNUmiHovCgfv7Ahs54pF9ckGI=
Subject key identifier:   11:33:7D:E8:79:86:D0:03:8F:2A:4A:CE:C0:B8:1C:7F:17:6A:61:22
Certificate issuer:       /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial:       021D
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:00:14 +0000
ROA not before:           Tue 03 Feb 2026 02:23:06 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        157.120.160.0/23 maxlen: 24
                          157.120.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
        Validity
            Not Before: Feb  3 02:23:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4385e-e36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:6c:57:a6:6a:6b:53:37:07:d2:26:8b:48:
                    0b:c6:96:45:26:73:9f:56:45:36:71:5c:f5:25:e6:
                    1e:54:2a:a4:ab:b9:74:e8:5b:36:60:01:a4:f0:7e:
                    e7:3a:c3:f9:db:b9:97:63:11:ef:e4:31:46:00:26:
                    c8:93:82:fa:4e:9b:0d:4e:e8:91:43:87:8d:46:20:
                    c8:63:d5:09:c9:d0:36:dc:4d:90:5a:19:8b:19:e6:
                    03:ab:86:cc:72:96:df:7c:18:b9:86:c1:8c:0c:4c:
                    9a:2a:da:aa:3c:ce:00:6f:78:5e:23:66:7b:ca:b9:
                    63:f3:70:02:1d:a8:4f:1b:ac:a2:66:96:fc:f2:2c:
                    22:8e:f8:92:e8:2b:f5:0a:eb:a5:c8:94:ee:e5:9e:
                    b6:35:99:c1:cd:5a:05:3b:b3:9f:56:42:35:a1:cc:
                    f4:5c:fc:af:12:f9:f5:c0:91:6f:b7:00:37:fc:43:
                    a8:aa:0e:4b:76:84:b7:bb:f9:55:5a:b2:3f:78:a1:
                    51:b9:44:73:97:fe:be:cf:ca:dc:e2:58:e7:3a:b9:
                    82:d3:00:22:8b:1c:b5:37:07:e9:9b:73:18:90:47:
                    4d:65:86:c5:2a:4a:69:84:5c:7d:a5:80:8d:c8:95:
                    7f:1a:bc:65:74:9d:72:c5:a2:e0:5e:0d:40:1b:e9:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:33:7D:E8:79:86:D0:03:8F:2A:4A:CE:C0:B8:1C:7F:17:6A:61:22
            X509v3 Authority Key Identifier:
                keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.160.0-157.120.162.255

    Signature Algorithm: sha256WithRSAEncryption
         a1:07:17:36:2b:3f:56:4e:cf:bd:df:18:06:29:4e:08:8e:41:
         ce:97:ba:4e:62:b0:e1:59:13:88:5c:a3:33:56:dc:c4:37:f2:
         98:89:0d:ed:52:eb:fd:82:90:e7:e4:0c:96:52:79:c3:18:b4:
         53:18:c9:d8:4e:57:ba:46:88:72:d6:70:33:a3:45:06:17:5f:
         88:a3:66:6f:2e:24:cf:80:d8:32:bb:1a:86:45:42:bb:ab:ea:
         62:34:86:e4:93:ed:1f:47:cd:4b:a0:2e:1c:01:44:04:50:ce:
         a2:8a:ce:43:f7:12:8f:d5:d4:9c:e5:ec:09:58:70:86:ad:fe:
         6f:3d:4b:34:f8:3a:bc:fd:f2:dd:2c:84:b3:2f:6d:23:7b:7a:
         36:a4:ec:00:b5:b4:54:7a:69:91:d9:4e:51:4b:db:62:65:62:
         e6:2a:ed:9a:1a:bd:aa:3c:62:3a:f0:57:2a:97:fa:8f:81:57:
         a4:47:59:53:3c:d2:6f:45:7b:ed:9b:ad:45:e7:24:d0:7c:40:
         b3:d8:96:a9:bd:48:89:20:b7:df:ed:56:1e:7d:08:3d:e0:76:
         3b:29:0a:e1:a7:45:b9:0e:73:25:14:cd:90:80:99:03:3d:e8:
         f6:5b:90:1b:63:9c:31:02:c0:a4:c2:52:82:79:48:63:aa:e7:
         c1:18:81:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:26 2026 by rpki-client