Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/D79D112E6C7F11EF92105459C4F9AE02.roa
File:                     D79D112E6C7F11EF92105459C4F9AE02.roa (raw, json)
Hash identifier:          TOr3lSEvYAhPjFeYT97SY9GDA4wLaqovZ7Rh+RBe+3k=
Subject key identifier:   D2:F6:E6:78:39:D6:7C:C7:78:8B:EF:68:8F:56:FD:A8:79:3A:EE:63
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       0180
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/D79D112E6C7F11EF92105459C4F9AE02.roa
Signing time:             Sat 05 Sep 2026 04:54:57 +0000
ROA not before:           Sat 05 Sep 2026 04:54:57 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153175
IP address blocks:        160.30.26.0/24 maxlen: 24
                          160.30.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Sep  5 04:54:57 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9ba0a1-8c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:d4:21:95:ca:10:ba:19:e7:ed:46:93:4b:
                    42:51:a4:7a:f6:f3:3e:5e:db:82:5a:0b:e9:21:be:
                    a0:b9:e0:81:8b:c6:35:ed:c8:7e:f8:17:e6:52:9d:
                    97:89:8a:9a:f9:d9:67:87:13:16:06:24:d0:dc:b3:
                    e8:d3:1d:a1:cf:9c:ee:dc:20:6e:1d:03:2d:1e:16:
                    39:66:4e:2a:5d:72:34:dd:55:47:b3:e8:b0:53:2c:
                    54:7a:e5:ce:4f:39:56:95:3c:1c:31:c8:d8:f9:34:
                    f6:ce:8e:c3:68:2c:0e:52:af:5a:8f:25:db:02:44:
                    f1:a8:a0:cd:6d:fc:ec:86:d0:3e:1e:65:88:2b:fb:
                    cb:f1:9f:fc:3b:51:d0:6c:42:9b:da:b5:75:a7:e5:
                    3d:67:ad:88:8b:48:0d:83:63:a3:c2:ae:39:94:93:
                    0f:dc:c0:2d:d1:29:7d:f1:41:4e:54:4a:f8:2e:e7:
                    f5:1a:27:80:82:68:e9:9f:70:18:4d:54:80:e0:d9:
                    be:b4:c5:42:a7:1d:23:4d:8b:7b:51:f3:89:4d:93:
                    5a:6e:73:29:3b:ef:d6:e5:47:d5:84:5b:f6:79:70:
                    6b:02:4b:69:25:ca:59:37:00:e7:5a:04:18:d4:6b:
                    bc:92:1f:bf:1c:30:2e:a5:83:1c:d7:ea:59:2a:17:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F6:E6:78:39:D6:7C:C7:78:8B:EF:68:8F:56:FD:A8:79:3A:EE:63
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/D79D112E6C7F11EF92105459C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:04:c1:b3:f5:01:27:22:cf:63:ae:ec:39:68:ef:9c:1c:
         9a:28:cb:e1:ec:06:78:a6:0c:2c:75:c8:b1:f8:45:eb:93:97:
         1d:6e:1b:ac:76:7f:65:b2:d1:d6:51:6a:ca:a9:01:7a:66:b3:
         c8:bf:dd:c2:37:ee:56:a3:2d:2f:14:fc:ff:c1:66:c3:11:14:
         8b:6f:2e:ff:92:44:54:c7:7b:3c:d1:b7:88:42:54:af:95:e0:
         3d:23:9b:01:e4:5a:06:a1:a8:90:2c:20:b9:43:5f:f0:5c:47:
         ac:0a:f0:98:f4:9c:14:16:2d:30:76:5a:9d:af:c9:5f:04:93:
         85:f2:51:2a:74:67:dd:d9:ae:05:e4:8b:22:80:04:6e:fa:bb:
         a2:a1:c4:39:83:3e:50:2f:c7:9d:33:05:c5:4c:e5:0d:cd:36:
         77:b2:55:7f:1e:16:b4:c7:ea:c9:29:f1:6e:c4:f9:f4:22:62:
         ff:4f:6e:67:81:bb:7a:bf:e3:5e:b3:c4:c5:86:8d:c6:4b:29:
         cd:61:4e:eb:14:d4:43:ba:8e:a7:18:6e:0a:c9:6c:96:ef:00:
         44:99:02:0c:45:5f:61:45:24:91:70:02:94:81:a5:f9:61:1b:
         0f:83:42:75:9b:38:60:5b:0d:20:0f:e3:6c:16:53:1a:f4:15:
         a4:89:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:01 2026 by rpki-client