Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/F74324B0464511EFA4CCFA6DC4F9AE02.roa
File:                     F74324B0464511EFA4CCFA6DC4F9AE02.roa (raw, json)
Hash identifier:          jiOqsOopgHWdylNJvQ56lnPS2twkZ7rplvNHVmhQWj4=
Subject key identifier:   A2:5E:3C:CC:44:49:36:5C:B6:6B:48:2A:38:67:85:AE:7F:33:27:64
Certificate issuer:       /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Certificate serial:       0171
Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/F74324B0464511EFA4CCFA6DC4F9AE02.roa
Signing time:             Tue 09 Jun 2026 05:36:10 +0000
ROA not before:           Tue 09 Jun 2026 05:36:10 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     141455
IP address blocks:        160.20.126.0/23 maxlen: 23
                          160.20.126.0/24 maxlen: 24
                          160.20.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
                          rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
        Validity
            Not Before: Jun  9 05:36:10 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a27a64a-1868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:00:25:1f:42:40:37:2a:60:d7:31:ae:64:
                    80:5e:e1:75:e9:32:49:ae:69:40:f4:52:76:c3:e9:
                    6d:33:f6:99:5c:df:d6:72:0e:bd:1d:c4:ce:31:0d:
                    cd:4d:c7:41:6d:45:a0:52:ac:f4:ca:ba:8a:b8:ef:
                    3c:09:e6:19:45:31:24:d0:63:33:aa:ef:02:59:7d:
                    48:8e:a4:da:d0:ed:f8:39:69:55:84:97:02:d0:ab:
                    5f:08:85:57:2c:0b:a7:6e:35:c0:64:6a:6c:db:0a:
                    f7:01:17:1c:aa:b1:d6:ef:00:cf:7d:7d:c8:55:f1:
                    89:6c:1b:82:58:21:ba:a0:a2:21:a5:48:1d:f4:20:
                    2a:fd:d6:b2:66:50:cd:d3:62:66:f4:5e:f6:cf:5b:
                    b1:c3:c4:f0:01:05:8c:1f:d2:78:0c:9d:79:6a:91:
                    5d:fc:29:34:ca:c7:66:c9:d9:7a:cc:c0:32:ec:ae:
                    46:a5:a8:54:da:fb:f5:9d:77:ad:1f:6e:c2:a8:73:
                    90:69:8e:44:87:de:2a:12:d4:40:be:1d:af:10:1f:
                    e2:b5:4f:7e:36:45:21:de:ac:72:b4:26:d5:bd:30:
                    ca:81:d1:9b:d3:c8:13:74:73:52:70:e2:4a:e5:e4:
                    11:64:df:6d:96:00:9a:2e:ec:e4:f0:6f:3d:8c:6b:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5E:3C:CC:44:49:36:5C:B6:6B:48:2A:38:67:85:AE:7F:33:27:64
            X509v3 Authority Key Identifier:
                keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/F74324B0464511EFA4CCFA6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:e4:af:bd:23:ca:77:8d:fd:eb:39:d1:0a:21:15:82:b8:58:
         81:57:65:77:3a:e9:93:bf:14:27:3a:0e:32:ff:57:7e:4a:d9:
         4f:16:10:a2:94:63:3b:c3:70:b5:68:ad:a1:ba:a6:b2:a8:f9:
         f8:e2:fe:2f:48:ab:0a:a1:66:a1:71:b2:37:dc:ed:06:76:db:
         ba:5f:13:09:e5:b3:70:82:de:3c:b6:cf:42:61:f2:93:0e:06:
         13:d3:7f:cd:f1:38:77:62:c8:dd:5b:28:b2:c9:50:e1:3e:b1:
         5e:63:5c:6d:e4:76:9b:01:53:51:6f:4c:12:65:d9:f5:72:12:
         99:6f:3b:ca:08:8f:cc:8e:58:02:eb:6c:a6:d6:30:0a:4e:b0:
         92:96:2a:07:7d:f5:c2:66:db:8b:df:ab:44:2a:6d:0c:fe:32:
         6c:49:a5:89:4a:78:33:10:4f:f4:3d:fd:e6:08:38:bb:00:62:
         bf:ba:16:2f:a2:fe:e0:04:9d:16:80:9a:b1:fa:c8:1e:40:ac:
         ec:34:27:75:f7:3b:07:fc:3b:0f:9b:43:6d:d7:d0:6d:d6:95:
         48:5d:95:7b:1f:d5:31:3a:df:3b:85:f9:4d:c5:c6:f9:ea:55:
         1a:95:d0:1b:1b:cc:ea:b1:cf:aa:4a:4b:46:69:4b:ea:11:da:
         5d:85:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:51:21 2026 by rpki-client