Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/160ADCACE34A11EFA6960F0CC4F9AE02.roa
File:                     160ADCACE34A11EFA6960F0CC4F9AE02.roa (raw, json)
Hash identifier:          r6RObzZDmvTKdURDxwySrRDVkCeN5KJ86vtH4x9kO5Q=
Subject key identifier:   B6:06:2B:91:D8:19:F1:F6:8D:A8:81:0F:48:37:38:67:59:5F:77:63
Certificate issuer:       /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Certificate serial:       08B2
Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/160ADCACE34A11EFA6960F0CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:54:54 +0000
ROA not before:           Tue 06 May 2025 21:01:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138657
IP address blocks:        203.32.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
                          rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2226 (0x8b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
        Validity
            Not Before: May  6 21:01:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4290e-0c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:d9:f8:dd:8c:95:fe:d7:ce:30:8c:0b:5b:
                    6f:ec:22:ec:73:06:de:59:d6:9e:40:59:64:8c:ce:
                    83:e8:2a:08:38:30:7e:cb:bb:1e:2d:a8:c1:d7:56:
                    0b:19:b1:72:20:bd:31:88:57:3d:df:31:2e:21:41:
                    ce:2c:30:c5:67:c2:8a:64:17:17:2b:cf:b3:9e:03:
                    ad:27:45:7a:21:a1:34:04:1f:46:e1:70:fa:99:23:
                    b9:5e:66:1b:e8:fe:92:b7:b6:75:53:b7:2a:59:54:
                    9a:d8:d1:44:51:77:5e:bc:d5:0c:39:77:e0:1c:51:
                    d3:ca:bd:c7:3c:8e:0e:bb:43:de:91:b0:f3:a6:f6:
                    8b:92:4f:2d:04:ad:0f:a1:16:f8:bd:f7:2a:a0:21:
                    8d:ae:00:24:2e:c2:50:f6:e1:c2:88:b9:76:08:8e:
                    ba:f5:07:94:cf:dd:41:b7:92:bc:86:e6:0c:d5:40:
                    49:ff:77:8d:3a:3f:8d:48:9c:c3:51:5a:cf:47:e0:
                    8b:8c:d8:4e:95:a3:d4:be:9a:e5:1e:8a:61:d9:75:
                    ee:0f:d5:a3:dd:83:ac:dd:6e:20:ab:60:96:84:7a:
                    0c:95:7d:2b:59:e0:ed:4e:29:bf:04:a7:02:71:b7:
                    cd:cf:5e:7b:15:ba:1c:c9:f9:d8:87:30:46:25:12:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:06:2B:91:D8:19:F1:F6:8D:A8:81:0F:48:37:38:67:59:5F:77:63
            X509v3 Authority Key Identifier:
                keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/160ADCACE34A11EFA6960F0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:87:8e:54:e4:bc:bc:d4:e4:83:03:41:6b:21:29:01:a6:
         90:31:d4:db:5b:1d:c4:85:d1:94:7e:fb:e6:33:ee:b0:6b:da:
         5c:a4:e0:f9:27:51:2d:82:db:52:42:ad:86:2a:d0:6f:96:c5:
         c0:c4:fb:1d:80:d7:a7:da:fd:e8:19:b8:33:c7:f9:f9:fc:67:
         31:27:3c:61:68:3c:9f:b2:a2:0d:a5:af:8d:c6:73:e5:7c:4f:
         65:d1:b5:2e:69:74:99:2b:df:c5:90:80:b6:65:7a:eb:ea:5e:
         02:57:9f:c6:cf:4b:f7:e4:6c:8e:00:cd:59:2d:1e:c1:3d:0c:
         25:9b:31:fb:11:24:ba:04:c6:f1:cc:04:f6:54:99:0f:4a:28:
         04:4d:38:13:3f:61:da:9e:dd:c7:1d:22:38:e9:ba:52:05:eb:
         34:65:8e:c2:a0:9b:93:1f:76:21:5f:e4:b7:db:3d:3c:77:b0:
         dd:2d:9e:89:aa:24:1c:4e:52:fd:f2:e3:a6:f3:65:a5:de:28:
         df:5b:e0:6b:a0:8a:23:ac:13:93:60:33:6b:e5:35:0a:18:ba:
         93:95:48:ca:a6:32:72:04:0c:0e:67:3e:a1:fb:c0:2e:88:5e:
         d4:92:a5:21:cf:9f:4f:38:2f:b3:7f:31:52:5c:e7:f6:5f:a6:
         92:38:84:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:20 2026 by rpki-client