Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/C2B54C4E9D2611F0A7B9140CC4F9AE02.roa
File:                     C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (raw, json)
Hash identifier:          /odblAES8/7YPLaconnJ5Vgys59wwFEPqcpWiTdxc8Y=
Subject key identifier:   24:A1:E0:1A:21:17:CF:8D:4A:6C:37:EF:7E:78:70:43:4B:31:D7:BE
Certificate issuer:       /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
Certificate serial:       51
Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/C2B54C4E9D2611F0A7B9140CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:16:19 +0000
ROA not before:           Mon 29 Sep 2025 11:23:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     133484
IP address blocks:        160.30.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl
                          rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
        Validity
            Not Before: Sep 29 11:23:45 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3d9b2-cd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:47:81:fe:40:f3:c6:98:9a:ed:06:d5:8e:
                    29:dd:1c:a1:43:65:7f:f2:7c:5c:de:b7:b9:5c:1e:
                    1f:70:3e:82:8c:4a:f1:10:c1:d2:53:72:27:2c:99:
                    95:3f:cf:a8:a1:76:1f:65:e3:b7:d7:8d:b4:8c:83:
                    8e:8d:ae:a5:6d:3b:0a:67:22:e1:4b:86:2b:f7:07:
                    96:2b:29:75:de:19:63:e0:bc:d8:c8:40:97:a0:f9:
                    0d:af:ac:53:18:7e:ef:dc:d1:a9:53:00:c0:af:ae:
                    6c:09:ce:ef:d4:33:1c:ca:c9:ec:b8:59:1e:98:43:
                    d5:37:a1:19:e4:02:e0:9c:03:a6:7f:2e:7a:e6:33:
                    46:a2:11:b7:91:54:fb:78:a8:a2:02:07:ee:f7:f2:
                    bc:db:22:2a:a4:00:c9:0b:c0:d4:cc:e6:3e:5a:6c:
                    a1:37:8f:65:14:91:a9:61:e0:45:26:f6:b3:7e:75:
                    c5:86:fd:54:8f:b4:74:07:cb:3c:52:6e:a6:00:2e:
                    26:01:b6:4f:ea:0c:31:2c:1f:45:51:03:89:cf:02:
                    2f:89:cc:3e:a2:27:6c:a3:68:1e:eb:fa:1a:09:89:
                    79:2d:13:44:6c:b7:5b:eb:e4:5d:dc:2b:67:29:3c:
                    14:4b:a8:2b:3c:5b:aa:2f:6b:70:08:07:63:09:70:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A1:E0:1A:21:17:CF:8D:4A:6C:37:EF:7E:78:70:43:4B:31:D7:BE
            X509v3 Authority Key Identifier:
                keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/C2B54C4E9D2611F0A7B9140CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:f2:95:71:e7:ab:aa:15:fb:1e:d3:34:91:f6:cb:ef:3d:
         a6:00:09:60:31:26:c4:c5:3c:17:ec:98:13:28:d8:20:06:a4:
         18:1d:9e:9e:dd:e8:de:e9:6a:4f:08:49:39:30:02:f5:84:89:
         a7:41:af:58:6f:70:37:95:c8:36:37:55:ef:ab:fa:34:88:08:
         61:a6:2e:f2:6a:33:b6:ed:ec:b7:1f:68:e0:37:91:68:f6:c4:
         96:95:04:a1:df:16:58:1c:d7:b5:41:8b:56:84:c9:17:50:22:
         99:aa:30:af:90:1c:09:d7:2a:f3:f9:6b:75:c4:f2:0e:0f:c0:
         b5:f3:d0:f5:17:dd:2e:3f:80:20:ae:75:86:3a:4e:a7:e4:ef:
         00:d1:e4:bf:5c:40:36:b2:57:72:0b:90:4b:18:d7:ec:bf:70:
         b6:a5:79:fd:08:d7:95:9e:6a:5e:44:4f:d3:e0:de:7c:63:85:
         74:29:01:96:b2:01:96:d7:71:00:20:c3:17:15:3f:99:8f:72:
         b2:a0:9a:b8:82:70:d9:bb:5d:e2:78:55:2c:db:33:07:a3:9d:
         a1:9e:1d:e3:7f:2b:59:8d:e0:4f:a3:8d:73:2a:0e:fc:4a:d5:
         bf:be:27:9a:b4:2d:2d:de:da:a3:21:89:ab:0c:6a:44:73:b7:
         ed:10:2e:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:14 2026 by rpki-client