Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa
File:                     E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (raw, json)
Hash identifier:          hdlYLSviqdsjiISi2RWRWAEZ34QocD0U9ocvGaJFxhI=
Subject key identifier:   70:1D:C8:AF:E1:4D:8D:12:75:6A:01:C3:D3:DD:5E:AB:FA:19:1A:30
Certificate issuer:       /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Certificate serial:       E1
Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:14:22 +0000
ROA not before:           Mon 19 Jan 2026 05:25:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133213
IP address blocks:        160.250.230.0/23 maxlen: 23
                          160.250.230.0/24 maxlen: 24
                          160.250.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
                          rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
        Validity
            Not Before: Jan 19 05:25:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41f8e-9314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:0f:e6:82:fb:56:c1:aa:70:ad:bb:e8:08:
                    c5:7c:66:b3:59:73:57:f7:d7:ea:c5:e0:1b:4d:2c:
                    62:b3:e3:c3:a5:22:9e:13:99:80:66:c9:00:78:72:
                    2b:90:50:05:03:31:29:7f:67:79:6f:64:48:95:73:
                    80:69:db:f2:33:bf:26:76:d8:40:8d:a3:bd:25:c5:
                    0c:50:e2:17:b8:73:47:d4:db:65:a9:69:b1:d3:13:
                    9b:41:ef:aa:4a:86:06:51:84:93:33:0a:0f:7d:f5:
                    82:8e:38:5a:15:a6:08:c9:d1:25:ef:c9:f9:0a:0f:
                    f0:a5:8c:29:88:2e:76:28:e7:f4:45:71:cf:7b:8d:
                    04:a3:b8:eb:3b:9a:21:75:61:4c:66:99:7d:7f:8e:
                    22:81:bc:43:77:93:34:5b:e3:0e:39:35:58:01:da:
                    0e:a8:3f:a3:ba:ee:13:66:4e:cf:3f:15:a6:8a:43:
                    22:40:1d:54:f9:4a:a7:6e:b2:bf:85:dc:2e:fc:fc:
                    0a:c0:fd:df:9f:59:98:8e:77:ef:bc:96:1b:80:af:
                    a8:bd:83:05:fd:2a:de:dc:b5:01:89:ef:1b:fe:05:
                    2f:0f:1d:ed:31:ff:6c:b9:50:62:91:d7:3e:80:10:
                    ba:7a:37:60:09:f3:b0:f0:f6:b8:45:3d:31:f3:31:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1D:C8:AF:E1:4D:8D:12:75:6A:01:C3:D3:DD:5E:AB:FA:19:1A:30
            X509v3 Authority Key Identifier:
                keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:ea:e4:df:32:4a:fd:04:2b:99:c2:b5:e8:84:99:53:87:da:
         f6:56:a4:1b:0f:56:e3:88:19:07:d5:48:5f:ee:1c:83:1b:32:
         83:9d:8b:2c:ff:02:c5:69:63:38:0c:8f:3c:13:c4:89:44:da:
         4a:4d:54:cf:79:46:17:21:d7:8f:97:41:f7:a2:e9:dc:e9:04:
         02:53:dd:9d:c1:01:a9:e0:7c:dc:e2:b7:50:9b:67:21:5d:d7:
         89:a3:0e:b6:57:16:94:2b:f4:16:30:f0:01:52:53:07:4c:b1:
         b3:18:87:eb:43:ab:82:4b:b6:60:67:0c:c7:9f:a9:fc:36:11:
         98:f3:60:2a:2e:80:23:99:2d:07:cc:20:91:c7:ae:2a:0c:42:
         c9:da:07:42:79:3e:a9:8b:36:d5:ac:f6:33:d0:94:8a:5a:36:
         6f:95:85:1d:28:1d:f0:d1:72:f2:ba:a8:42:9f:04:67:28:8d:
         3f:a5:87:2f:1d:ed:3c:be:9f:cf:da:74:f8:b9:06:d3:ba:70:
         ff:50:ed:dc:28:34:bd:c6:19:4a:9a:94:1e:1a:06:d6:dd:72:
         c4:35:3c:fa:e4:d7:92:96:a0:94:6d:38:ec:f1:f7:43:6a:49:
         1c:96:1b:01:f6:fd:6a:fd:32:78:53:9f:ea:c0:65:bb:0c:89:
         87:da:9d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:35 2026 by rpki-client