Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/9F4A37143EA511EF882FE276C4F9AE02.roa
File:                     9F4A37143EA511EF882FE276C4F9AE02.roa (raw, json)
Hash identifier:          Now9TjjE+GxtdPJprgY+7PVC9jMdsLTZtrZmdMtaZ+c=
Subject key identifier:   35:DD:1C:E7:A1:D5:98:41:7E:17:38:90:DB:8F:B2:15:FD:39:1D:CD
Certificate issuer:       /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial:       0156
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/9F4A37143EA511EF882FE276C4F9AE02.roa
Signing time:             Sat 04 Apr 2026 02:51:02 +0000
ROA not before:           Sat 04 Apr 2026 02:51:02 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152900
IP address blocks:        160.22.78.0/24 maxlen: 24
                          160.22.79.0/24 maxlen: 24
                          192.206.117.0/24 maxlen: 24
                          216.176.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
        Validity
            Not Before: Apr  4 02:51:02 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69d07c96-0267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:65:c3:59:6c:b5:81:fb:29:47:6d:ea:79:
                    1a:c4:57:8b:07:96:33:38:af:c5:e9:da:c4:f9:07:
                    99:7a:17:c9:da:40:40:9e:55:ac:f5:b8:32:7a:16:
                    11:79:20:b5:e8:07:8e:4b:2b:4d:07:68:10:fa:3f:
                    f1:9e:a7:f1:d8:b0:b8:44:ca:a5:90:52:83:53:05:
                    a5:7d:be:71:87:0b:45:76:75:df:73:de:a0:ba:61:
                    33:00:f9:2a:d2:d1:cb:60:08:c5:b2:c6:37:4a:7c:
                    0b:0b:70:19:4b:01:29:35:5c:b4:d0:37:67:d9:fa:
                    7b:2a:26:21:1a:b6:d4:c8:ce:e2:b9:85:d4:dc:3c:
                    a7:64:db:45:f0:e8:62:fc:4b:f2:9b:37:68:43:62:
                    1a:da:99:32:e4:a3:74:1d:61:67:f1:2a:23:19:c9:
                    3f:b9:4f:95:89:fa:c4:47:5f:d3:c3:aa:0d:90:5a:
                    2e:81:bc:2f:0b:57:6f:19:87:40:26:10:f8:cf:33:
                    24:6f:57:ee:b1:2e:62:03:07:d0:83:72:70:88:2e:
                    9d:75:87:71:f7:5b:f1:b7:16:3e:b8:d0:cc:3a:4d:
                    c9:db:1c:49:d7:8a:38:4d:fa:cc:d9:cf:08:bc:1b:
                    76:8b:47:d7:b7:ee:c3:a6:e0:cd:89:f0:7a:30:3e:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DD:1C:E7:A1:D5:98:41:7E:17:38:90:DB:8F:B2:15:FD:39:1D:CD
            X509v3 Authority Key Identifier:
                keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/9F4A37143EA511EF882FE276C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.78.0/23
                  192.206.117.0/24
                  216.176.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c8:6b:c5:c4:3a:27:be:c9:65:c6:f5:86:5e:e9:8e:0f:9a:
         10:6b:2e:de:97:93:2a:b8:bc:03:07:25:c4:3e:77:d3:b3:99:
         84:68:fa:ab:02:a1:e0:64:fc:ca:98:6f:2c:4f:0e:6b:fa:d4:
         c6:cc:40:4f:a8:1b:44:d7:e4:68:da:0c:af:65:dc:c6:13:04:
         bd:a3:5e:e5:f2:a1:ea:c1:59:a1:4f:8f:13:61:f9:09:d1:61:
         86:60:d3:de:a6:6e:0f:5d:6e:51:3e:cf:6c:8c:b6:9d:14:20:
         0e:77:00:bf:d2:18:3d:67:e7:aa:5e:9d:7f:94:c4:7a:d5:c2:
         39:c5:19:ab:d2:91:0a:51:96:5f:43:b9:6f:45:ad:b8:d9:1c:
         ee:1d:73:fa:15:94:e4:32:9c:fe:17:56:bb:8a:23:6d:c4:20:
         28:f2:f4:b5:f3:60:97:94:16:cb:d0:c7:78:30:6b:b6:34:51:
         3b:83:20:ee:8b:5c:84:09:bc:e4:d4:cd:9e:4f:87:d1:a3:ca:
         45:31:4c:93:9a:4a:a2:86:7b:4d:2d:de:63:c7:d9:3a:08:61:
         ec:70:bc:45:47:e3:c3:c6:a4:b2:53:89:31:ab:eb:f5:d2:67:
         5c:fb:ce:d8:f5:72:c9:fb:61:fe:f2:3a:f0:9d:61:c1:19:73:
         1e:a0:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:23 2026 by rpki-client