Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/FF3D553675B711EF83FAAE42C4F9AE02.roa
File:                     FF3D553675B711EF83FAAE42C4F9AE02.roa (raw, json)
Hash identifier:          7Hr19q9jXXrB/KrfOgS/kVyNAWzA2gMbqgtJhhgmqUA=
Subject key identifier:   69:E1:C0:2D:7E:8D:3B:C1:E3:E7:52:D1:04:68:58:11:E9:E3:FE:EF
Certificate issuer:       /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Certificate serial:       011D
Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/FF3D553675B711EF83FAAE42C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:37:43 +0000
ROA not before:           Sun 31 Aug 2025 06:53:59 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153324
IP address blocks:        160.187.18.0/24 maxlen: 24
                          160.187.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
                          rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
        Validity
            Not Before: Aug 31 06:53:59 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a592a7-2145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:98:a9:07:13:b2:61:77:0b:05:81:f2:34:
                    0b:ed:df:5e:b1:14:0d:15:94:4a:cd:70:bc:fb:93:
                    90:6b:06:05:6c:d5:b8:6c:8f:98:7f:4a:77:1a:04:
                    fb:f2:5b:ab:fc:7e:3f:98:56:c6:f2:6b:22:57:29:
                    3f:c7:3c:63:a2:e5:fc:02:ee:6a:78:3c:56:b3:d3:
                    5c:52:35:fa:26:d9:35:02:94:c5:5e:bf:2c:7c:56:
                    c2:6a:45:19:00:10:65:ad:1d:07:2a:01:91:c7:d4:
                    8a:08:d6:db:c9:7c:ae:7f:a9:86:fa:05:70:ff:37:
                    93:63:5b:bb:6f:df:6c:11:c0:27:68:1f:a4:7a:fe:
                    5e:31:5a:eb:9d:52:1e:28:45:3c:10:85:c5:2a:a6:
                    37:1f:ac:e3:0c:50:c1:15:3a:af:5a:09:9e:24:14:
                    a2:07:f9:a6:a3:ca:56:a4:e9:b4:52:3d:4d:14:f3:
                    b4:4f:ac:e1:5c:19:60:74:8a:8f:74:26:6c:6b:4c:
                    bb:5a:b6:df:56:8a:bc:6d:4e:6d:5f:50:9b:70:34:
                    58:50:3b:7c:fa:52:db:c7:47:e4:32:67:d3:11:08:
                    51:8c:e1:0d:7f:3c:5e:36:57:69:e5:1d:f9:43:ef:
                    e4:9f:88:7b:3f:43:f6:4f:6a:3b:87:8e:24:2b:8f:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E1:C0:2D:7E:8D:3B:C1:E3:E7:52:D1:04:68:58:11:E9:E3:FE:EF
            X509v3 Authority Key Identifier:
                keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/FF3D553675B711EF83FAAE42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:9c:f4:ec:55:17:5f:8a:f2:59:25:e7:3d:a2:1f:b2:68:1c:
         7f:8e:be:6d:83:40:ea:26:a3:27:1c:b1:0c:07:51:e9:69:d0:
         6b:6f:af:e7:bb:51:f3:2d:9e:4c:eb:ec:b8:dc:47:92:78:b5:
         cf:62:3f:ff:99:37:8b:44:8c:f8:ed:6b:6a:26:da:79:8e:4a:
         df:1a:b9:22:6c:48:cb:34:ba:a6:0d:00:45:7d:02:73:47:fe:
         7f:92:a4:cf:66:3d:33:e9:5b:ac:94:c6:f0:b0:04:4c:b8:2d:
         4d:8e:b2:f5:2c:a5:7b:f1:71:db:23:b9:a8:0b:2d:18:9c:29:
         76:81:10:93:10:ca:7d:3a:1d:db:54:02:00:6e:b0:86:7e:ba:
         cb:5b:df:3a:cc:bd:f6:3d:db:65:03:a9:9f:f5:4c:5d:49:fc:
         a5:7c:9c:51:6d:0a:94:4d:84:2c:ac:96:c2:6e:54:96:65:b6:
         8b:00:78:ca:5c:b7:ce:d2:3c:73:7b:a2:f4:b2:18:aa:87:eb:
         2f:01:17:99:e6:ce:1a:94:61:ef:88:12:17:dc:2a:57:a1:d1:
         bf:da:32:fb:24:9b:fe:f5:c4:56:c3:5c:3d:62:87:b8:41:09:
         c9:ff:80:c9:80:79:05:48:86:2a:60:75:b2:31:3b:73:c0:cd:
         ad:d1:90:de
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc3QjkxMTAvBgNVBAUTKDhERDQxNDQ4NTkxN0NENEM4MDE2N0JEQTE5RDcyNDk2
NDZCMDY3MjUwHhcNMjUwODMxMDY1MzU5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTJhNy0yMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsI6YqQcTsmF3CwWB8jQL7d9esRQNFZRKzXC8+5OQawYFbNW4bI+Yf0p3GgT7
8lur/H4/mFbG8msiVyk/xzxjouX8Au5qeDxWs9NcUjX6Jtk1ApTFXr8sfFbCakUZ
ABBlrR0HKgGRx9SKCNbbyXyuf6mG+gVw/zeTY1u7b99sEcAnaB+kev5eMVrrnVIe
KEU8EIXFKqY3H6zjDFDBFTqvWgmeJBSiB/mmo8pWpOm0Uj1NFPO0T6zhXBlgdIqP
dCZsa0y7WrbfVoq8bU5tX1CbcDRYUDt8+lLbx0fkMmfTEQhRjOENfzxeNldp5R35
Q+/kn4h7P0P2T2o7h44kK492pwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGnhwC1+
jTvB4+dS0QRoWBHp4/7vMB8GA1UdIwQYMBaAFI3UFEhZF81MgBZ72hnXJJZGsGcl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EMjdDOTE1Qzc1
QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpVeUFGbnZhR2Rja2xrYXda
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2pkUVVTRmtYelV5QUZudmFHZGNrbGthd1p5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzc3QjkvRDI3QzkxNUM3NUI2MTFFRkI4RTIxNTE0QzRGOUFFMDIvRkYzRDU1MzY3
NUI3MTFFRjgzRkFBRTQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLsSMA0GCSqGSIb3DQEBCwUAA4IBAQClnPTsVRdfivJZJec9oh+y
aBx/jr5tg0DqJqMnHLEMB1HpadBrb6/nu1HzLZ5M6+y43EeSeLXPYj//mTeLRIz4
7WtqJtp5jkrfGrkibEjLNLqmDQBFfQJzR/5/kqTPZj0z6VuslMbwsARMuC1NjrL1
LKV78XHbI7moCy0YnCl2gRCTEMp9Oh3bVAIAbrCGfrrLW986zL32PdtlA6mf9Uxd
SfylfJxRbQqUTYQsrJbCblSWZbaLAHjKXLfO0jxze6L0shiqh+svAReZ5s4alGHv
iBIX3CpXodG/2jL7JJv+9cRWw1w9Yoe4QQnJ/4DJgHkFSIYqYHWyMTtzwM2t0ZDe
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:22 2026 by rpki-client