Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/C2B54C4E9D2611F0A7B9140CC4F9AE02.roa
File:                     C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (raw, json)
Hash identifier:          YeM5Ob93+NlZS8Ef/mJRnsGe6iFv4NqaLaZpJ+XqgGE=
Subject key identifier:   4C:D9:E1:C1:4E:08:97:4F:9F:4F:6F:8F:1F:8F:66:47:41:EE:EC:99
Certificate issuer:       /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
Certificate serial:       C0
Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/C2B54C4E9D2611F0A7B9140CC4F9AE02.roa
Signing time:             Tue 29 Sep 2026 07:57:21 +0000
ROA not before:           Tue 29 Sep 2026 07:57:21 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     133484
IP address blocks:        160.30.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl
                          rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
        Validity
            Not Before: Sep 29 07:57:21 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abb6f61-ee96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:b9:1c:5d:0d:05:a7:22:91:0a:d8:fd:b6:
                    6b:b5:bf:c3:cc:11:2b:db:ca:8c:63:fd:4d:44:7d:
                    ea:3a:66:f7:eb:5a:12:ff:d5:32:d2:62:5f:c7:5c:
                    43:76:0b:50:81:4d:53:10:64:f9:75:36:86:ae:55:
                    91:1a:16:81:87:32:9d:53:df:eb:db:91:06:39:a7:
                    28:2b:ca:82:04:0c:57:4e:ce:ed:7f:6c:4b:f5:76:
                    7a:9a:81:d2:69:d9:bd:89:56:a2:38:10:97:43:85:
                    ee:cc:83:b3:7c:5e:94:9e:4a:23:49:8e:cf:37:e5:
                    e6:73:be:20:59:86:9d:94:22:fe:d3:cb:c4:a9:57:
                    6a:2d:34:43:26:48:3d:92:fd:83:53:77:32:15:86:
                    01:7b:1b:a1:23:12:f9:5d:99:8c:4f:0a:d1:92:b2:
                    20:54:58:db:c7:b1:e3:31:29:be:56:2c:d7:d9:bf:
                    4d:e6:41:7f:54:1c:a5:5f:57:49:4f:0d:95:ad:ee:
                    36:bc:2a:43:56:f1:09:8e:d9:84:78:e2:de:2b:4d:
                    d6:21:e5:50:83:78:96:4a:af:92:e2:f6:21:53:33:
                    6e:0a:80:6e:c2:f3:81:2a:05:7f:a5:75:7b:49:f6:
                    e1:ae:77:93:59:0a:58:d9:d5:47:a6:a2:72:3d:12:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D9:E1:C1:4E:08:97:4F:9F:4F:6F:8F:1F:8F:66:47:41:EE:EC:99
            X509v3 Authority Key Identifier:
                keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/C2B54C4E9D2611F0A7B9140CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:83:77:15:04:65:0f:3b:5a:19:f6:51:1e:de:8f:bc:e2:66:
         b0:2a:e0:04:5d:f6:3e:17:b7:eb:85:29:31:30:98:c2:8d:dd:
         6d:29:0b:64:73:59:50:13:57:82:9b:28:7d:c4:27:16:3c:6e:
         ff:00:a3:e0:23:0f:b6:c1:09:ad:89:92:f0:e3:2a:87:12:38:
         b2:14:5b:52:8c:5c:70:dc:5e:35:18:0a:11:04:c7:14:6a:6e:
         b3:23:3d:34:c4:1a:3a:be:7f:22:dd:8b:f0:11:5d:4d:6a:24:
         57:c1:af:57:8e:60:eb:97:d5:e9:82:f2:d5:cc:c8:1e:8c:86:
         c5:b4:6a:be:2b:15:96:15:e4:18:97:65:6b:b0:95:79:37:a8:
         29:7f:b0:8a:55:4d:73:f4:87:53:90:54:e9:56:e3:6a:d2:db:
         b4:3a:a5:5d:00:78:e6:3e:71:fa:d2:ea:96:6d:bd:31:69:66:
         65:f7:6a:fc:01:f3:81:9c:86:f1:3d:52:59:f3:91:4b:f1:79:
         4a:50:7e:cf:bc:97:8a:07:3e:2c:9a:89:12:95:3e:6a:dc:38:
         51:9b:2f:5e:3e:11:61:f5:7a:eb:c5:62:6b:f2:de:c6:f7:75:
         6c:dd:bd:60:14:c4:f1:c9:f6:3e:b2:f9:4b:1d:6a:65:33:82:
         df:76:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:13:47 2026 by rpki-client