Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/A54CA35E853B11EFB513D149C4F9AE02.roa
File:                     A54CA35E853B11EFB513D149C4F9AE02.roa (raw, json)
Hash identifier:          /vNUIQMQmo/+bpr7T8qr5NTsbD+Gg65QmwR+l9u79do=
Subject key identifier:   06:84:F5:B1:C9:FD:67:4C:69:9C:58:26:93:D6:B5:03:6E:85:9F:0E
Certificate issuer:       /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial:       011C
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/A54CA35E853B11EFB513D149C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:18:19 +0000
ROA not before:           Fri 05 Dec 2025 03:44:06 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     150154
IP address blocks:        160.187.184.0/23 maxlen: 23
                          160.187.184.0/24 maxlen: 24
                          160.187.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
                          rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170EED, serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
        Validity
            Not Before: Dec  5 03:44:06 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a59c2b-d546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:df:0c:26:80:d3:f9:0e:ae:bb:27:5a:31:a0:
                    eb:26:b3:bb:fc:a8:77:5f:b9:c6:e6:65:84:84:a6:
                    ef:04:c1:fa:73:ba:23:b2:6f:33:88:da:c8:16:de:
                    94:84:c8:11:2e:30:7a:79:6b:db:70:fd:4d:7b:cb:
                    3c:15:98:d4:6d:aa:76:04:0c:eb:79:aa:30:02:74:
                    f1:d1:3e:31:46:ff:a9:8d:b3:8d:f2:86:4e:15:ad:
                    f8:da:f7:18:d9:f1:28:14:2b:db:c1:a0:23:eb:27:
                    15:3a:af:6a:86:63:15:76:43:9c:91:60:d4:88:8f:
                    03:4b:79:b2:db:b1:e9:ca:cf:a0:12:90:ff:9c:30:
                    a3:a8:22:d4:c1:19:0a:cc:20:d3:4c:0f:df:2b:da:
                    51:ab:27:8c:3e:76:b2:20:59:a7:0f:66:91:00:28:
                    39:91:b4:3c:f4:23:a9:50:fb:25:ff:f2:a5:80:6d:
                    1a:c9:6f:ad:3b:56:55:69:01:3a:2f:fc:f2:50:c5:
                    51:46:e6:54:5b:ab:de:cd:6b:63:1c:13:a4:7e:54:
                    72:48:5f:5c:76:cc:b7:f0:56:5e:8f:3b:b4:73:5d:
                    60:3a:16:35:3e:e6:9b:5b:f4:6a:ed:b7:d5:5e:3b:
                    52:16:58:af:cf:e2:d4:cc:4f:10:75:ca:49:ab:4e:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:84:F5:B1:C9:FD:67:4C:69:9C:58:26:93:D6:B5:03:6E:85:9F:0E
            X509v3 Authority Key Identifier:
                keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/A54CA35E853B11EFB513D149C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:3a:63:c8:ce:dd:d4:64:3b:cf:c7:f4:a6:b8:33:b1:d8:6a:
         c1:45:25:a8:4e:3c:0e:26:a2:a5:ad:3a:8e:66:49:52:a3:07:
         3d:97:a6:e1:15:53:cb:94:3e:94:57:3a:08:1c:ec:ec:38:cf:
         2d:51:db:ab:bd:e1:87:f4:f2:4e:e1:80:17:d3:01:e9:3f:e2:
         91:72:00:7f:0f:ca:3e:7b:fd:c1:32:d5:7b:60:03:d0:f3:ae:
         1e:f4:ea:ce:cb:6b:b7:66:30:0c:5c:3d:3f:02:05:66:24:64:
         fb:b0:a5:b3:ed:66:4d:21:38:31:5b:6e:02:28:42:87:24:6d:
         76:7d:c7:ca:a6:22:60:91:d5:f5:9a:91:03:47:af:2c:bd:df:
         2b:9f:a7:0c:d0:9c:cb:1b:ed:4a:69:77:4c:5c:a4:52:b2:bb:
         e3:37:cc:ac:85:c1:d7:bc:06:ff:ef:4b:f5:69:78:d5:3d:32:
         51:8c:ce:56:e7:ff:93:6b:8b:2d:7b:6e:35:43:d8:86:1d:6f:
         f0:a9:ad:03:61:1e:54:db:0a:a2:4d:ef:a9:05:a7:44:4e:d7:
         ba:43:b4:fe:52:81:68:30:e3:2e:d3:51:69:a1:d0:00:7b:67:
         f0:62:f8:78:4d:01:dc:b4:2c:f7:d5:5d:2f:64:26:16:ce:48:
         dc:9c:ea:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:49:58 2026 by rpki-client