Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa
File:                     B21985725F3711EFA108CA0CC4F9AE02.roa (raw, json)
Hash identifier:          ynSgl+qDFctPpLQpUDpO6c7qHmQkyXIZinhvMDk0vnc=
Subject key identifier:   E1:75:89:A6:49:41:D4:E8:55:42:3A:89:86:4F:3D:3A:86:8F:F2:37
Certificate issuer:       /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Certificate serial:       0190
Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa
Signing time:             Sat 19 Sep 2026 04:54:14 +0000
ROA not before:           Sat 19 Sep 2026 04:54:14 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     135559
IP address blocks:        160.30.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
        Validity
            Not Before: Sep 19 04:54:14 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aae1575-eb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:d8:f2:38:e3:25:ef:a6:a5:1d:e6:d0:48:
                    13:fc:39:4c:eb:86:dd:e4:f5:63:e2:39:d7:16:29:
                    c2:45:6a:21:ae:e6:22:4c:1b:ef:10:f2:93:20:8d:
                    e7:7c:51:6c:e2:c0:fd:b0:12:54:85:76:8a:90:b6:
                    ce:3c:1c:e3:e5:ae:fb:1c:04:f4:6f:da:32:7d:e7:
                    0b:b5:c6:ef:77:02:f0:61:16:2c:52:89:72:86:63:
                    8d:96:fe:98:13:33:72:ae:d4:8c:10:bf:dd:45:33:
                    d7:0a:15:b5:e8:1d:c2:36:44:b2:02:cd:40:43:cd:
                    c0:0f:4e:55:89:5d:02:84:66:be:c1:97:c8:d0:ee:
                    dc:59:33:27:5d:09:e4:d9:79:ca:23:37:76:5f:35:
                    80:a6:6a:74:4b:4f:8f:21:d6:3c:de:8a:a3:ad:0e:
                    7c:f7:62:d0:50:a6:0d:17:f8:95:10:ca:f8:a7:18:
                    9b:10:d8:90:46:22:1e:cc:d7:d3:7d:cb:b6:d9:f6:
                    5e:1b:11:dd:f4:80:45:8d:93:c3:ea:80:70:d3:f1:
                    0b:41:66:00:b7:ba:1d:76:9e:13:0a:40:20:37:05:
                    81:50:8d:ad:af:f2:09:e7:15:2c:a0:cb:01:81:7e:
                    0d:83:d3:48:fc:63:80:d2:e3:82:00:22:78:80:52:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:75:89:A6:49:41:D4:E8:55:42:3A:89:86:4F:3D:3A:86:8F:F2:37
            X509v3 Authority Key Identifier:
                keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:aa:91:fa:05:3a:7b:b4:d1:df:b1:45:c7:08:b0:87:93:06:
         d2:26:8b:de:72:0f:75:d9:b9:89:7d:95:db:3b:91:2c:95:c3:
         c9:49:ae:cd:fa:d7:d9:5c:78:b2:5f:2a:19:93:ec:ac:e9:22:
         bd:d1:63:76:a4:44:3c:bc:00:fd:6c:f9:18:e3:ba:c3:37:0b:
         73:2e:51:18:3b:79:0a:a9:f3:74:ab:8f:e2:1e:f2:77:91:60:
         a7:5c:eb:5c:ff:3e:a7:b2:8f:08:1d:14:c1:89:37:10:42:cd:
         fa:20:6e:e4:ff:12:5c:81:a3:fe:f0:61:f8:00:a4:b1:35:5c:
         a7:af:ba:54:e0:34:dc:25:b5:07:2d:34:b2:7b:d3:98:17:a0:
         12:73:d5:bc:6c:e5:7c:9a:b3:9f:6d:38:00:ca:69:75:2b:ed:
         cc:e1:ae:01:c2:db:b0:ff:b7:1d:4a:13:68:8f:ee:3b:2e:cf:
         a7:16:b2:eb:1a:07:9f:da:08:2a:93:b7:7c:e0:78:8a:60:e6:
         b0:04:f8:9d:7c:72:d6:68:4c:8b:f2:fe:7b:bb:e8:e2:5e:21:
         1c:7a:56:00:52:b3:46:b0:38:dc:45:94:8a:b2:d6:8d:06:ab:
         9d:2b:20:7d:6a:72:04:10:75:63:50:92:f1:1f:3e:98:e8:ce:
         9e:35:70:95
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEzRUQxMTAvBgNVBAUTKERGMjRCNEQ1MUM2Nzg0MURENjAwREQyQTYxNzg2QkNF
OTg4Nzg2NjcwHhcNMjYwOTE5MDQ1NDE0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFlMTU3NS1lYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkBHY8jjjJe+mpR3m0EgT/DlM64bd5PVj4jnXFinCRWohruYiTBvvEPKTII3n
fFFs4sD9sBJUhXaKkLbOPBzj5a77HAT0b9oyfecLtcbvdwLwYRYsUolyhmONlv6Y
EzNyrtSMEL/dRTPXChW16B3CNkSyAs1AQ83AD05ViV0ChGa+wZfI0O7cWTMnXQnk
2XnKIzd2XzWApmp0S0+PIdY83oqjrQ5892LQUKYNF/iVEMr4pxibENiQRiIezNfT
fcu22fZeGxHd9IBFjZPD6oBw0/ELQWYAt7oddp4TCkAgNwWBUI2tr/IJ5xUsoMsB
gX4Ng9NI/GOA0uOCACJ4gFIzjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOF1iaZJ
QdToVUI6iYZPPTqGj/I3MB8GA1UdIwQYMBaAFN8ktNUcZ4Qd1gDdKmF4a86Yh4Zn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFRC82NzdBQUEzQzVG
MzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhCM1dBTjBxWVhocnpwaUho
bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGhtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODEzRUQvNjc3QUFBM0M1RjM3MTFFRkJGMzY5RTU4QzRGOUFFMDIvQjIxOTg1NzI1
RjM3MTFFRkExMDhDQTBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoB4lMA0GCSqGSIb3DQEBCwUAA4IBAQAxqpH6BTp7tNHfsUXHCLCH
kwbSJovecg912bmJfZXbO5EslcPJSa7N+tfZXHiyXyoZk+ys6SK90WN2pEQ8vAD9
bPkY47rDNwtzLlEYO3kKqfN0q4/iHvJ3kWCnXOtc/z6nso8IHRTBiTcQQs36IG7k
/xJcgaP+8GH4AKSxNVynr7pU4DTcJbUHLTSye9OYF6ASc9W8bOV8mrOfbTgAyml1
K+3M4a4Bwtuw/7cdShNoj+47Ls+nFrLrGgef2ggqk7d84HiKYOawBPidfHLWaEyL
8v57u+jiXiEcelYAUrNGsDjcRZSKstaNBqudKyB9anIEEHVjUJLxHz6Y6M6eNXCV
-----END CERTIFICATE-----
Generated at Sun Sep 20 09:32:37 2026 by rpki-client