Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
File:                     DA8D1C7EA72311EFBCEB047EC4F9AE02.roa (raw, json)
Hash identifier:          KOPGS6LMhund+vJdD6XHT18EgiJR1qKIzzUaEq9CH3Y=
Subject key identifier:   B5:77:DA:6B:BB:71:84:15:0E:5C:5B:F6:7C:A8:B2:11:68:3E:15:AD
Certificate issuer:       /CN=A91CD40B/serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Certificate serial:       012D
Authority key identifier: 35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:59:02 +0000
ROA not before:           Sat 25 Oct 2025 09:49:54 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153358
IP address blocks:        160.187.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
                          rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD40B, serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
        Validity
            Not Before: Oct 25 09:49:54 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a597a6-527d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:58:97:4f:6c:91:0e:23:a8:d0:39:1b:ef:
                    41:e7:a9:21:49:a8:7b:d3:3f:d1:c0:79:b0:28:88:
                    12:00:68:58:ec:ca:c5:da:3b:72:f9:77:76:12:67:
                    94:1b:e3:70:c1:26:6c:2e:be:f5:cf:eb:97:eb:56:
                    ce:42:b1:19:b5:d7:49:a0:4d:b0:24:cb:3c:ea:a0:
                    09:cc:91:d7:84:fb:15:71:70:df:f5:25:92:64:96:
                    f8:54:d8:52:48:e6:65:60:01:8a:ee:d9:81:5c:80:
                    67:c1:1a:fe:01:6f:2c:67:30:ef:b2:e0:63:36:59:
                    eb:8a:9e:9b:16:e7:b4:03:9b:57:e5:34:ac:af:0d:
                    fe:21:ed:94:c1:99:a3:55:20:7e:74:bc:88:07:61:
                    49:f3:93:79:c2:69:2c:87:60:9e:ae:e4:05:e7:7f:
                    fc:fb:31:d8:a1:b7:42:54:aa:6a:68:72:16:46:69:
                    56:76:12:6b:8e:ad:ad:26:dc:da:42:79:13:0d:c8:
                    69:45:57:85:03:0b:c1:56:a4:69:71:19:03:ad:7e:
                    5c:6d:a9:96:d1:9f:b6:7d:6a:a7:0a:a1:75:3a:dc:
                    6c:96:59:03:f3:1b:6a:92:87:86:80:1e:fd:f9:73:
                    9f:5b:5e:74:e1:ab:d0:5d:cd:88:12:8f:dc:44:79:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:77:DA:6B:BB:71:84:15:0E:5C:5B:F6:7C:A8:B2:11:68:3E:15:AD
            X509v3 Authority Key Identifier:
                keyid:35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:cb:1d:28:1a:b2:33:16:f6:8b:b6:2d:da:4c:96:cb:a1:46:
         d5:d1:1f:77:3b:13:0a:b0:f3:be:4e:b4:17:ec:d8:47:14:5e:
         95:14:06:b3:ad:1e:95:a6:f0:3c:29:14:30:fa:00:1a:1e:e5:
         d2:2e:69:11:24:5d:58:3c:1e:9d:8d:7e:b1:4a:cc:a4:c5:b7:
         26:2b:3d:de:2a:28:1c:1f:81:08:96:b1:d5:59:4d:23:25:72:
         4e:21:59:5b:ef:bd:f9:fa:c0:ca:d2:0e:0b:69:47:1c:c9:f8:
         1a:cc:b9:fd:ba:b6:a6:af:b9:08:fe:74:88:7b:51:eb:3d:a6:
         09:3d:88:fb:47:82:12:f9:29:2d:44:19:27:bd:2e:5d:8e:b2:
         ce:ba:27:50:ed:d6:e1:47:16:fa:ea:69:95:45:c1:aa:4a:97:
         06:2f:05:13:66:44:89:b7:37:32:2a:26:1a:5b:5e:43:ca:90:
         ca:b0:c8:cb:e0:80:31:dc:1c:9e:5b:51:41:79:b7:1f:39:ca:
         04:44:38:5b:c2:8b:02:f5:4b:89:4d:9c:99:55:4a:44:99:51:
         f8:71:93:8a:61:9e:a9:e8:e0:41:5e:ab:21:4f:15:b3:7d:fd:
         94:e1:0f:9e:bd:5a:57:a5:ed:83:47:8a:0c:09:44:c7:e6:79:
         43:76:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:40:57 2026 by rpki-client