Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/0DE9C0F2691E11EF86B94667C4F9AE02.roa
File:                     0DE9C0F2691E11EF86B94667C4F9AE02.roa (raw, json)
Hash identifier:          L5TY3FwOTzQKhRYERDun2f4Svp7WU5eqsXRirStChow=
Subject key identifier:   B9:9E:D1:C6:DA:01:CC:B0:DC:3C:AB:AD:F0:F7:EF:8E:07:A0:68:87
Certificate issuer:       /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
Certificate serial:       0124
Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/0DE9C0F2691E11EF86B94667C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:56:49 +0000
ROA not before:           Wed 01 Oct 2025 07:04:47 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140244
IP address blocks:        160.30.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 12:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
        Validity
            Not Before: Oct  1 07:04:47 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a58911-b41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:81:15:38:be:21:8c:5d:13:15:29:aa:e0:
                    2b:23:d9:5b:78:2e:72:62:ca:8a:2e:01:ce:3a:72:
                    65:3a:01:f8:1d:6c:40:e5:89:9b:3c:65:90:19:d6:
                    f9:5f:c2:08:c2:76:7b:8b:d2:7d:2e:07:0a:f2:d8:
                    8c:a6:e8:fd:b8:d1:ed:4b:bb:31:11:6e:0f:30:d7:
                    2c:4b:35:76:a0:40:f7:f2:0c:72:da:c4:82:67:8d:
                    cd:31:84:b9:0f:e9:ca:35:e6:7c:85:d4:33:68:f4:
                    5a:e3:cc:46:1c:1b:11:41:d2:92:6d:03:6a:a8:ed:
                    17:1e:a9:12:10:46:21:47:5f:1c:8c:87:ae:75:9e:
                    e4:e3:52:ea:d0:b9:da:11:58:05:ca:8c:2f:83:6b:
                    38:ae:17:3a:8d:49:93:2b:9d:56:69:87:b8:cb:b3:
                    5f:75:e2:cd:dd:73:10:22:a4:ac:9e:68:0d:6a:f6:
                    8d:d6:8c:bc:4e:1b:02:e8:02:fc:22:c0:ae:4b:b1:
                    f6:bf:26:bf:ca:53:65:77:81:fc:50:1f:00:8d:d2:
                    0a:db:b5:f8:db:f4:49:8a:85:24:e3:65:ec:d0:ad:
                    6a:d2:ff:f4:ed:ee:10:f6:71:47:30:da:6c:c5:c4:
                    0d:01:f2:99:6d:7b:5a:b4:ff:18:0f:a0:99:87:16:
                    5f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9E:D1:C6:DA:01:CC:B0:DC:3C:AB:AD:F0:F7:EF:8E:07:A0:68:87
            X509v3 Authority Key Identifier:
                keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/0DE9C0F2691E11EF86B94667C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:e3:75:4b:f4:86:fb:20:a3:0a:ef:a1:94:cd:84:27:14:46:
         f0:7a:09:3c:1a:f3:dc:4d:e0:28:b8:0d:35:80:11:7e:68:ef:
         98:70:a0:42:6c:8f:a5:d6:4a:38:83:bf:d0:af:ba:94:ea:6d:
         5c:6e:7b:aa:91:63:bb:10:ca:26:47:84:b2:6c:d9:9f:d6:30:
         23:26:9f:98:49:00:af:c9:54:fd:63:82:5d:bc:ba:ec:83:3a:
         42:21:70:13:b4:9b:31:63:25:fa:4f:d8:d6:22:b9:27:27:a4:
         99:a0:74:06:ec:f2:50:1a:12:f9:18:a1:71:a9:c0:f4:d0:f4:
         b3:25:cd:37:a7:f5:10:b7:55:45:0b:28:28:67:54:14:d4:5c:
         37:5f:e7:74:3e:13:df:39:29:da:5c:fc:a6:10:58:39:e3:e6:
         bf:2c:1c:bc:2f:6e:75:15:ec:69:74:48:5b:9c:d7:4a:fa:44:
         a8:32:07:37:ff:b3:a4:66:e3:58:82:44:3c:06:c9:b8:81:5e:
         d4:fb:af:da:5d:9d:cb:c2:93:d5:50:25:11:cf:03:8a:40:a4:
         04:d0:78:95:0b:7d:94:c4:e4:49:00:36:37:93:3d:f1:0f:5c:
         71:ce:c0:1f:1d:de:17:32:48:c7:36:f6:e7:d3:86:21:cf:95:
         e2:9b:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:21 2026 by rpki-client