Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/7C304160FECB11EFB755BB45C4F9AE02.roa
File:                     7C304160FECB11EFB755BB45C4F9AE02.roa (raw, json)
Hash identifier:          7w241TOLyyucLUDf7OQQ+XxJH6J8zBk8QcqnEOt6c80=
Subject key identifier:   11:CF:02:AE:3F:41:F0:F8:81:36:D6:06:AF:8E:5E:F1:1C:42:99:1B
Certificate issuer:       /CN=A91E554A/serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F
Certificate serial:       0111
Authority key identifier: 12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/7C304160FECB11EFB755BB45C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:13:05 +0000
ROA not before:           Sun 11 Jan 2026 05:23:37 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153377
IP address blocks:        160.191.80.0/24 maxlen: 24
                          160.191.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl
                          rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E554A, serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F
        Validity
            Not Before: Jan 11 05:23:37 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45781-e94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:e1:aa:ce:34:61:c3:af:f1:94:bd:fd:49:
                    a5:b0:aa:d5:15:8d:f4:d6:c9:b5:2b:d1:68:bd:22:
                    2d:3a:21:96:ba:f2:97:76:ba:c9:cd:85:5d:0a:75:
                    d4:21:00:46:8c:bc:b2:06:7c:37:ef:e4:12:8e:40:
                    fa:78:54:1e:4d:6c:c7:de:04:e6:a1:1e:f7:d0:74:
                    a6:6b:bc:be:77:2a:71:50:c2:f2:91:ea:44:83:62:
                    1c:6c:54:9d:9c:f7:32:07:34:dd:9b:6e:3a:fe:e8:
                    93:ec:07:f2:e8:2a:70:e6:2e:d6:32:b1:cf:20:1a:
                    b7:0e:d6:ad:4e:c0:92:cc:bd:d9:1e:5a:ff:02:f3:
                    c6:28:03:7a:91:fb:8a:77:40:62:23:cf:20:0b:80:
                    7f:c4:c8:5d:c2:e9:a8:3c:f5:53:46:ce:c3:6f:a1:
                    66:9a:86:3a:e0:fc:a4:ae:9f:17:da:de:5d:dd:7b:
                    82:40:66:ee:7a:e5:70:52:e0:ac:f2:86:2b:5f:4f:
                    8f:8b:86:ff:56:17:85:14:e1:f3:e3:f9:0e:6c:f5:
                    36:98:81:7f:a9:83:b4:96:da:f9:76:b4:b3:e7:b9:
                    1b:6e:7f:07:28:88:bc:87:c5:3d:b9:41:9d:16:3e:
                    86:6b:9a:1c:f2:ce:da:fa:69:27:d0:7b:5c:e7:66:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CF:02:AE:3F:41:F0:F8:81:36:D6:06:AF:8E:5E:F1:1C:42:99:1B
            X509v3 Authority Key Identifier:
                keyid:12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/7C304160FECB11EFB755BB45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:aa:5c:2a:51:f5:44:5a:8a:c5:06:af:94:ef:12:af:bd:64:
         3e:d6:d4:a4:61:5b:6d:7c:bb:a9:b3:8b:8c:b4:e9:15:8b:78:
         d1:ed:01:ad:0d:69:ab:6a:b2:d4:95:54:a6:2d:2c:ca:df:03:
         c3:58:0d:92:05:8b:2a:e3:c2:ac:4b:bd:9a:cb:37:b1:9c:27:
         1b:aa:04:5a:a4:3e:8c:de:8e:98:8c:ac:c9:0d:7d:47:79:75:
         b9:f2:27:d2:48:93:66:14:fc:ee:9f:8d:26:33:9e:f3:b9:f3:
         42:3c:d5:a9:1d:58:5d:0a:49:15:1a:de:0c:4b:78:4d:3e:11:
         b7:6f:f7:30:c9:d3:30:ba:6c:33:52:0a:ec:88:6b:41:b7:ae:
         1d:4f:a3:21:6c:a8:71:3f:71:09:19:62:69:fb:4a:c5:2d:46:
         f8:70:da:db:63:72:ec:4c:4b:ef:23:0c:f5:f4:f9:0c:67:b8:
         04:f6:c4:aa:b1:8b:fb:8c:5d:69:47:ff:f4:56:be:12:ac:e8:
         61:46:6b:77:df:38:7c:4b:d4:47:83:12:77:23:eb:9f:b1:7e:
         b4:47:d1:04:df:5e:d0:c7:cd:84:fe:30:09:7d:06:85:ad:e5:
         db:66:27:a0:d9:53:1b:c0:b6:fa:19:37:34:53:37:76:e2:b4:
         9e:15:8e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:55 2026 by rpki-client