Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/F9EB418CFEAB11F094E473AD656F56BC.roa
File:                     F9EB418CFEAB11F094E473AD656F56BC.roa (raw, json)
Hash identifier:          VRIh+7N+fo2k17XDhMQxupbWDY2IIbfNhK1kWgo6vJI=
Subject key identifier:   24:A3:6C:D4:C4:BA:89:3D:BC:C5:FF:55:28:B7:3A:87:21:3A:6D:CA
Certificate issuer:       /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial:       0103
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/F9EB418CFEAB11F094E473AD656F56BC.roa
Signing time:             Sat 31 Jan 2026 13:51:43 +0000
ROA not before:           Sat 31 Jan 2026 13:51:43 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153365
IP address blocks:        160.191.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
                          rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
        Validity
            Not Before: Jan 31 13:51:43 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=697e08ef-87b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:c9:da:9b:d3:bb:12:58:96:b4:00:db:ac:
                    a4:a9:34:a0:44:ef:c3:35:1f:1c:57:0f:2d:42:34:
                    01:e2:46:75:38:69:c7:52:31:1c:95:ac:a5:e0:13:
                    7b:9c:7c:7c:2f:fb:c8:46:1e:6d:3b:ee:4a:46:f5:
                    36:13:bd:29:29:e9:ea:3e:c7:c1:69:39:e6:e3:4f:
                    b9:6e:04:a5:a2:92:66:4f:0d:7a:fa:ed:2d:47:20:
                    a1:93:63:4d:bc:74:c0:34:c3:9b:20:ae:d8:96:8a:
                    93:f1:4f:a4:5c:e0:9d:9d:6a:8d:10:cc:22:d9:da:
                    e5:c3:61:79:c2:07:63:71:9a:93:3c:50:39:0a:93:
                    39:db:c0:38:f1:80:c9:64:27:70:27:e5:28:fc:a9:
                    8c:f1:2f:69:ab:98:b2:69:d4:b0:26:7b:d0:99:10:
                    90:57:49:9d:e3:a2:8e:32:46:0c:03:d7:de:2a:b1:
                    86:db:83:d1:ae:bc:b4:4a:31:1e:a5:52:6e:82:55:
                    d0:9d:43:a8:db:49:bb:d6:0e:bb:7d:b2:9e:c6:7a:
                    22:f2:cf:02:06:6d:00:5d:b3:29:0a:2a:16:99:2b:
                    56:c7:c8:24:66:83:df:e6:52:5c:6d:65:c4:bf:68:
                    df:45:3b:74:40:64:bc:da:48:b6:41:30:aa:11:95:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A3:6C:D4:C4:BA:89:3D:BC:C5:FF:55:28:B7:3A:87:21:3A:6D:CA
            X509v3 Authority Key Identifier:
                keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/F9EB418CFEAB11F094E473AD656F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:6f:0a:88:fa:03:43:a4:77:69:d9:df:1d:b2:f6:1d:bb:98:
         64:8e:3c:f9:a7:76:44:ff:c4:94:bb:84:62:0a:a5:27:3e:40:
         7c:ec:e3:e5:fa:e2:de:c3:0f:91:85:cd:82:6c:81:55:2c:ed:
         c2:91:d8:2c:e3:b0:ae:94:46:cb:be:4a:2b:ad:ea:66:36:24:
         eb:c1:01:38:a8:ed:af:dc:ef:13:21:16:0b:bc:56:61:ae:2c:
         1d:35:fa:73:34:54:da:b5:3a:52:ae:38:8e:7e:0f:a5:a6:98:
         fd:ad:52:3f:98:0f:52:66:6d:4a:61:aa:1c:2f:2a:fb:54:27:
         f7:87:44:03:70:7e:dd:82:cb:b7:19:8e:ed:32:c6:84:91:67:
         16:65:a8:a1:09:47:a1:f2:5b:4a:5b:2c:97:54:b5:0b:d9:fc:
         c3:be:65:a8:77:27:80:8b:af:d4:2b:e9:61:a4:af:7a:ff:f9:
         76:84:52:a4:18:db:df:82:f4:22:35:17:a1:55:74:42:f2:36:
         55:9b:00:da:07:f7:3b:da:a8:88:ad:09:b1:19:e1:c9:11:a8:
         0b:05:89:ec:d4:2d:63:a2:76:cc:d5:be:cc:1f:d1:f2:00:a3:
         22:1a:c3:f7:a8:e8:53:65:8d:a1:56:38:fb:ea:5c:ea:6a:e2:
         b7:cb:d7:d4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE
MzAzNEUzOEQwHhcNMjYwMTMxMTM1MTQzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdlMDhlZi04N2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtn7J2pvTuxJYlrQA26ykqTSgRO/DNR8cVw8tQjQB4kZ1OGnHUjEclayl4BN7
nHx8L/vIRh5tO+5KRvU2E70pKenqPsfBaTnm40+5bgSlopJmTw16+u0tRyChk2NN
vHTANMObIK7YloqT8U+kXOCdnWqNEMwi2drlw2F5wgdjcZqTPFA5CpM528A48YDJ
ZCdwJ+Uo/KmM8S9pq5iyadSwJnvQmRCQV0md46KOMkYMA9feKrGG24PRrry0SjEe
pVJuglXQnUOo20m71g67fbKexnoi8s8CBm0AXbMpCioWmStWx8gkZoPf5lJcbWXE
v2jfRTt0QGS82ki2QTCqEZWDUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCSjbNTE
uok9vMX/VSi3OochOm3KMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC
Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0
NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjBDOUUvNEVGRDE1QjY4QkNBMTFFRkFCRkMxQTM5QzRGOUFFMDIvRjlFQjQxOENG
RUFCMTFGMDk0RTQ3M0FENjU2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgvxQwDQYJKoZIhvcNAQELBQADggEBAHdvCoj6A0Okd2nZ
3x2y9h27mGSOPPmndkT/xJS7hGIKpSc+QHzs4+X64t7DD5GFzYJsgVUs7cKR2Czj
sK6URsu+Siut6mY2JOvBATio7a/c7xMhFgu8VmGuLB01+nM0VNq1OlKuOI5+D6Wm
mP2tUj+YD1JmbUphqhwvKvtUJ/eHRANwft2Cy7cZju0yxoSRZxZlqKEJR6HyW0pb
LJdUtQvZ/MO+Zah3J4CLr9Qr6WGkr3r/+XaEUqQY29+C9CI1F6FVdELyNlWbANoH
9zvaqIitCbEZ4ckRqAsFiezULWOidszVvswf0fIAoyIaw/eo6FNljaFWOPvqXOpq
4rfL19Q=
-----END CERTIFICATE-----
Generated at Fri Feb 20 03:40:11 2026 by rpki-client