Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
File:                     4E9597086B5C11EFABB11F60C4F9AE02.roa (raw, json)
Hash identifier:          xaj9ev9gObxEarMjWAx7hyuUavQ9BGr2NQce4XrNjSg=
Subject key identifier:   14:85:76:5B:31:C1:F3:C7:1D:7F:78:38:CD:2B:08:35:5C:9E:00:8B
Certificate issuer:       /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial:       0124
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:23:24 +0000
ROA not before:           Tue 19 Aug 2025 06:44:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     152475
IP address blocks:        160.30.128.0/24 maxlen: 24
                          160.30.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
        Validity
            Not Before: Aug 19 06:44:28 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3f77c-4bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:40:c3:c1:3b:d9:f3:f2:ab:56:79:1d:8d:
                    f6:60:8f:6e:21:5a:93:57:53:6c:18:f6:26:f1:5a:
                    e4:55:e4:19:c5:42:62:4f:03:e1:7f:19:e1:7b:21:
                    42:1d:c8:37:f1:d0:e4:5b:f1:be:54:28:52:ba:15:
                    8b:ec:ec:9f:82:93:f2:61:97:cd:ed:4f:a2:21:5a:
                    92:af:aa:eb:89:13:1f:20:9e:dc:cd:2e:60:a3:5b:
                    29:a9:8e:97:f9:2b:5e:25:1b:87:48:36:54:ce:d4:
                    cd:01:26:19:64:4a:86:a9:c5:24:6c:2f:d5:2d:5a:
                    7a:43:5e:38:75:50:ac:09:a2:2e:4e:16:9a:fa:29:
                    e5:f0:0d:33:eb:75:40:e8:81:f0:cc:11:64:78:bf:
                    83:65:7a:88:7c:39:dd:bf:ce:b5:5c:d0:e5:30:0a:
                    e4:1e:83:c6:7c:c7:22:72:66:c3:c6:33:33:34:2c:
                    99:f1:e3:67:2f:33:92:63:4b:a2:21:5f:06:95:4b:
                    ed:c7:88:e3:9e:68:c9:aa:f1:c8:a7:fd:b4:bf:72:
                    d3:aa:9b:d4:99:9b:db:72:61:4a:bf:82:c0:51:9e:
                    5f:3a:4d:82:3c:2b:a9:c6:59:ed:50:8e:63:59:bb:
                    5e:b4:0a:18:59:4e:c8:29:dc:68:0f:9b:0c:12:80:
                    7b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:85:76:5B:31:C1:F3:C7:1D:7F:78:38:CD:2B:08:35:5C:9E:00:8B
            X509v3 Authority Key Identifier:
                keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:43:ad:16:5f:d9:95:5d:5f:54:e7:cc:10:f7:59:50:6e:5a:
         b5:fe:31:df:26:1f:3f:04:93:2e:8f:1b:5b:c5:09:ac:53:4a:
         f9:62:25:d0:1e:f2:d8:c1:f0:35:42:5b:fd:fa:e6:73:37:bc:
         91:71:ed:26:da:f8:cf:3f:d2:0e:01:2e:26:bf:0b:a4:06:42:
         f0:a0:5a:a3:11:8f:7c:07:55:72:56:2c:63:2c:e3:8e:24:02:
         d3:49:e2:7e:cc:e3:33:35:5f:6b:84:2a:2f:06:60:ce:ba:03:
         06:62:d8:8f:31:d0:c5:74:af:20:c1:23:d3:08:f4:6d:63:9a:
         a7:0d:63:a2:6b:f9:69:cf:7a:3f:ac:95:99:5d:29:65:e5:d0:
         e6:eb:34:6a:f3:7e:06:c7:02:3f:08:ab:32:08:d8:f6:7d:73:
         83:3a:ef:5b:85:ac:97:52:6e:81:dd:d7:a5:50:a7:b4:83:51:
         61:e1:ee:8a:a5:dd:1e:77:76:80:e1:42:a5:8d:04:57:76:2d:
         80:ef:e7:1c:ad:50:17:89:22:d2:32:9f:c7:a6:4c:34:c7:7d:
         ce:ec:d5:d8:90:d8:85:46:a2:bc:eb:8c:6d:d6:76:1d:69:10:
         2b:f8:d5:34:fb:56:7c:b9:c4:3a:d9:44:77:f8:b1:1d:36:c4:
         90:b4:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:39 2026 by rpki-client