Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/0C544A5EEAD811F0B5BDA80D656F56BC.roa
File:                     0C544A5EEAD811F0B5BDA80D656F56BC.roa (raw, json)
Hash identifier:          CiRm4DIYsmYYVk9ph7+Qrr/TAwJAj6FY/60x7MRfKDY=
Subject key identifier:   A4:FC:0F:0A:89:25:DE:C1:C8:5E:D1:28:1F:72:7F:9A:3E:BC:32:5A
Certificate issuer:       /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
Certificate serial:       20
Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/0C544A5EEAD811F0B5BDA80D656F56BC.roa
Signing time:             Sun 01 Mar 2026 05:46:29 +0000
ROA not before:           Tue 06 Jan 2026 08:16:49 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     131310
IP address blocks:        160.30.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl
                          rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
        Validity
            Not Before: Jan  6 08:16:49 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3d2b5-f116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:66:d8:20:57:41:a8:bf:13:e7:6c:b8:b8:
                    0c:15:33:0d:94:a9:d6:00:d6:95:32:ed:01:03:9f:
                    17:15:b3:ab:aa:40:88:2e:5d:6a:d4:3a:04:00:f1:
                    e3:a2:f7:0b:22:21:7a:83:4f:a7:1e:40:0a:25:f2:
                    52:d9:96:4b:d3:95:b8:71:c2:d2:86:8f:a6:ab:d5:
                    11:9c:7b:f1:50:ed:46:45:b1:5f:e1:1c:38:52:f9:
                    12:12:92:a1:a9:c0:7c:8c:17:1d:65:3a:65:07:dc:
                    56:4d:42:74:14:a4:eb:c4:f9:3a:4e:22:a6:b6:cd:
                    b0:f3:52:ae:c8:0d:99:9c:09:39:b1:73:ab:86:0f:
                    ae:01:4f:93:db:e8:fa:49:4f:7a:f7:05:b1:6f:b1:
                    47:a2:40:25:e2:fe:9a:4c:ed:9f:29:a2:0d:79:d0:
                    c9:7e:de:b3:63:45:09:e2:e7:3d:7b:1b:20:55:42:
                    13:83:7c:b8:0c:98:f5:82:6d:da:ab:54:8a:69:58:
                    cd:d1:bd:a1:62:01:36:c4:f7:1f:c2:26:75:c8:df:
                    49:ea:b7:11:f6:aa:6e:7a:85:28:5b:97:47:47:a0:
                    94:5f:2b:0d:bb:4a:d4:28:f3:f9:60:b7:b5:66:48:
                    7f:75:67:7f:09:94:5c:cb:4c:5d:e5:6f:5c:6f:40:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FC:0F:0A:89:25:DE:C1:C8:5E:D1:28:1F:72:7F:9A:3E:BC:32:5A
            X509v3 Authority Key Identifier:
                keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/0C544A5EEAD811F0B5BDA80D656F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:6e:79:22:35:6a:27:5e:5d:15:9e:58:86:48:a5:e0:90:06:
         fc:91:72:56:62:2f:15:f3:ef:fe:65:16:32:6a:4c:7d:d8:7f:
         33:2e:96:f2:73:dd:bf:9f:ea:b3:51:9f:64:fd:3c:c9:41:fd:
         c9:2a:1f:79:b9:33:1d:99:b0:00:eb:3e:4d:f0:d9:33:90:c8:
         4d:7e:61:8a:7a:1d:f8:27:66:cd:96:4f:fd:24:5a:06:a6:57:
         29:22:8d:7a:be:4a:e0:9b:5a:c3:70:20:f6:6e:a5:72:51:24:
         3e:70:98:72:03:23:e1:01:da:1f:8f:5e:bd:ba:16:8c:f1:81:
         3d:ab:63:95:9c:47:e4:c6:73:81:16:51:b8:4f:0b:eb:98:20:
         fe:e7:a3:ee:ff:10:ad:cb:28:67:d4:08:c8:e1:f3:cb:4c:9b:
         f2:5a:87:5d:fd:6b:ea:0b:2d:2c:d8:dc:d1:7f:6f:f8:48:36:
         5a:07:f6:57:bf:93:66:2e:d5:5d:a5:4b:6b:c4:9a:f3:d1:b5:
         7b:0c:1c:a5:b1:21:17:e0:08:92:1a:52:75:49:5c:0e:1d:2e:
         44:16:c9:93:bc:2c:75:d0:c3:98:9d:3e:6a:69:29:80:fd:52:
         e6:d6:ac:14:67:96:ec:d7:96:38:21:bd:be:7f:88:6a:1b:a6:
         b8:9e:4c:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:25 2026 by rpki-client