Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa
File:                     AF75682A101911F09363D44DC4F9AE02.roa (raw, json)
Hash identifier:          zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=
Subject key identifier:   CE:B5:C3:F0:C9:8D:C4:9D:74:84:FA:6C:BC:75:95:4C:B8:95:67:50
Certificate issuer:       /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial:       AD
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:06:44 +0000
ROA not before:           Tue 29 Jul 2025 08:15:16 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139645
IP address blocks:        160.187.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
        Validity
            Not Before: Jul 29 08:15:16 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3f394-584f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:d9:5f:6c:2d:3a:4a:b0:17:e7:a9:26:61:
                    84:4d:e4:02:4b:16:31:0b:0a:a5:2d:a6:94:3b:ea:
                    ce:5f:be:76:17:10:85:a1:ee:5c:b9:de:72:38:a9:
                    ca:e6:50:33:bc:89:17:0e:75:79:10:ff:5f:82:7f:
                    dd:dd:b3:6f:d5:bc:57:68:f3:00:6a:0c:bb:ae:80:
                    3c:9a:29:57:62:ad:66:ba:b3:df:03:9a:a8:e8:3c:
                    c5:38:ed:ae:9a:2c:66:95:03:93:6f:02:65:53:48:
                    c3:17:0e:5e:ed:17:af:3f:29:74:24:fb:46:dd:1f:
                    73:4d:16:9f:4b:a4:fe:06:57:fe:b1:cd:4d:df:a5:
                    38:fc:70:60:8c:75:01:8b:b3:2c:b4:2c:02:7a:a5:
                    b3:0b:2a:73:ed:48:99:8a:5d:fc:43:c5:5f:43:40:
                    2a:0a:47:74:33:f1:48:7b:94:40:bd:a5:b7:7b:29:
                    cf:2c:25:5b:17:4d:5b:16:07:91:f1:0a:ea:69:af:
                    2a:fe:04:db:e9:7c:6b:ac:1d:18:0c:d8:1d:ff:66:
                    c2:c1:29:6c:17:c6:07:65:ad:4a:36:5e:41:c8:ea:
                    a4:2d:31:d1:36:f0:fb:cc:39:29:bc:c0:01:73:4b:
                    b0:7b:81:f0:86:f2:b1:df:3e:d7:45:33:39:8e:23:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B5:C3:F0:C9:8D:C4:9D:74:84:FA:6C:BC:75:95:4C:B8:95:67:50
            X509v3 Authority Key Identifier:
                keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:d1:a0:6e:77:80:45:61:82:c3:fc:44:75:83:a1:de:53:04:
         b4:52:09:5f:c1:34:65:1e:fa:a2:2a:59:c7:85:c5:87:a4:db:
         07:dd:d4:af:7f:f2:54:ee:84:70:6e:e3:61:bd:52:51:71:30:
         bb:78:d5:8f:0d:be:5b:5c:91:69:c8:b2:21:77:71:51:d8:04:
         ce:65:d0:28:ce:a6:ed:76:5c:d8:ce:ff:fa:32:37:f9:c8:97:
         6b:f5:93:20:05:65:57:1f:f2:1b:cb:ba:f8:c4:13:c4:01:eb:
         ae:64:2a:2a:4a:df:c2:7d:59:6c:fa:1f:2e:f5:52:8a:3d:2e:
         90:b7:e3:b2:fe:28:68:0d:c8:cc:f7:99:10:04:1e:80:43:8e:
         7f:73:4b:1c:d9:68:c5:a5:d6:33:60:6d:6d:89:3c:f4:aa:39:
         d6:d8:59:03:4e:00:43:bc:e1:5e:bb:e7:4d:ee:5c:e0:05:df:
         b7:2a:34:b1:2e:c7:ad:6b:d8:69:b6:63:40:58:c3:bf:1c:69:
         4b:86:d3:a0:fc:2a:4f:98:4c:47:3b:e8:27:3c:b6:6d:36:0b:
         aa:42:41:02:22:9f:06:a0:84:99:3a:19:7d:46:5b:68:4d:5c:
         ff:4c:8c:d1:23:31:57:3f:66:73:19:a5:8b:4d:8d:48:9c:56:
         d2:cd:0c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:08 2026 by rpki-client