Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/BE9BADE02B4011F0BA1FF282C4F9AE02.roa
File:                     BE9BADE02B4011F0BA1FF282C4F9AE02.roa (raw, json)
Hash identifier:          ZRgcko4mZDU94zW1mE2zsmeg1CEm3cVuoBFvJp8bDbw=
Subject key identifier:   C1:AA:6D:A2:A3:34:49:D9:3E:E4:F0:CD:F3:D3:F4:F1:C2:2C:D3:AE
Certificate issuer:       /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial:       2C70
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/BE9BADE02B4011F0BA1FF282C4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:22:39 +0000
ROA not before:           Thu 20 Aug 2026 16:22:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152842
IP address blocks:        160.22.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Sep 2026 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11376 (0x2c70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
        Validity
            Not Before: Aug 20 16:22:39 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a8729cf-a5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:34:a1:75:16:fe:bc:5f:5c:8b:fb:af:91:
                    be:29:5d:c8:b4:01:d9:cc:17:bb:ed:51:b6:9f:40:
                    18:33:61:ac:c0:7b:fa:2a:a3:bd:a5:1a:6f:32:cf:
                    b6:57:cb:f2:82:7c:e0:87:43:ae:ab:87:a9:36:33:
                    8e:1d:d4:34:a4:6c:0d:36:d5:33:b5:92:a2:3d:03:
                    3e:8b:83:19:c1:e5:b8:63:82:e1:30:8e:2f:c1:02:
                    68:c9:3f:b7:8d:a4:38:8a:ec:4f:83:7a:14:b8:69:
                    08:c3:81:fe:5e:a1:ef:11:ef:5a:75:4b:d9:a8:d6:
                    8c:56:2a:23:b1:68:c2:f0:23:d5:e0:a2:2d:3c:c2:
                    46:63:f7:49:4b:95:19:06:56:86:ac:53:72:8d:9e:
                    cd:2b:9e:f9:e0:ad:4a:ef:26:df:e5:25:4a:55:93:
                    f7:b6:ed:10:d7:ff:47:c8:e0:45:cd:65:72:0e:d7:
                    77:09:ae:e1:f0:8e:bb:32:94:20:ee:53:d4:60:22:
                    10:f5:79:24:d5:8b:bf:0b:ab:7f:c7:a9:e4:f6:2a:
                    67:7c:d1:8d:27:eb:75:60:f3:60:c5:e0:ce:e3:dd:
                    16:d1:9c:8a:d4:95:54:54:99:f7:10:1f:1f:01:74:
                    fb:2c:b9:25:78:ef:00:88:42:b0:cf:8c:95:87:91:
                    b6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AA:6D:A2:A3:34:49:D9:3E:E4:F0:CD:F3:D3:F4:F1:C2:2C:D3:AE
            X509v3 Authority Key Identifier:
                keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/BE9BADE02B4011F0BA1FF282C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:d0:6f:22:c8:49:ad:b9:27:f1:87:fb:2d:50:f5:b0:23:1a:
         44:28:76:9d:60:14:2a:ee:e6:b2:a4:e6:f6:b6:06:bb:c7:7e:
         d4:1e:64:e0:f4:dd:71:bb:68:82:94:4a:6e:23:d8:f9:f3:ee:
         5b:64:68:df:c0:c7:e1:a3:d3:94:d4:42:49:14:98:e6:b3:13:
         d4:7c:01:d6:a7:4c:f1:fb:66:40:8c:ba:cf:24:1e:b5:c0:7d:
         7d:60:ba:08:44:9c:45:65:1e:e1:77:ea:3d:7b:63:78:87:6f:
         57:97:06:f1:15:1f:eb:31:a2:30:38:c4:49:5f:93:7a:7e:92:
         10:25:67:8d:50:c1:76:ca:3d:ab:54:3b:af:d2:53:63:05:69:
         8a:46:36:db:59:41:4d:7c:fe:d9:4e:f9:3d:9b:bd:b3:d0:6f:
         e9:b5:28:54:7a:a7:8c:50:11:7c:54:d0:fc:61:9d:c8:69:60:
         ef:83:b6:6e:43:73:6a:56:c2:78:70:e8:41:d2:eb:64:38:e3:
         0d:aa:e9:18:3b:1e:06:f6:4d:ac:7c:c7:b3:99:03:18:1b:08:
         1d:5d:b6:24:ff:44:c9:42:6c:b8:e0:dd:5b:e4:8b:f5:73:17:
         55:0e:39:8d:82:e4:48:32:77:37:9d:0f:c5:c9:4a:7f:98:30:
         7d:1a:d9:a3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2
MUY4MkE5NTcwHhcNMjYwODIwMTYyMjM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3MjljZi1hNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnj40oXUW/rxfXIv7r5G+KV3ItAHZzBe77VG2n0AYM2GswHv6KqO9pRpvMs+2
V8vygnzgh0Ouq4epNjOOHdQ0pGwNNtUztZKiPQM+i4MZweW4Y4LhMI4vwQJoyT+3
jaQ4iuxPg3oUuGkIw4H+XqHvEe9adUvZqNaMViojsWjC8CPV4KItPMJGY/dJS5UZ
BlaGrFNyjZ7NK5754K1K7ybf5SVKVZP3tu0Q1/9HyOBFzWVyDtd3Ca7h8I67MpQg
7lPUYCIQ9Xkk1Yu/C6t/x6nk9ipnfNGNJ+t1YPNgxeDO490W0ZyK1JVUVJn3EB8f
AXT7LLkleO8AiEKwz4yVh5G2OQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMGqbaKj
NEnZPuTwzfPT9PHCLNOuMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQjdGODE5NTgzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQkU5QkFERTAy
QjQwMTFGMEJBMUZGMjgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBbuMA0GCSqGSIb3DQEBCwUAA4IBAQAV0G8iyEmtuSfxh/stUPWw
IxpEKHadYBQq7uaypOb2tga7x37UHmTg9N1xu2iClEpuI9j58+5bZGjfwMfho9OU
1EJJFJjmsxPUfAHWp0zx+2ZAjLrPJB61wH19YLoIRJxFZR7hd+o9e2N4h29Xlwbx
FR/rMaIwOMRJX5N6fpIQJWeNUMF2yj2rVDuv0lNjBWmKRjbbWUFNfP7ZTvk9m72z
0G/ptShUeqeMUBF8VND8YZ3IaWDvg7ZuQ3NqVsJ4cOhB0utkOOMNqukYOx4G9k2s
fMezmQMYGwgdXbYk/0TJQmy44N1b5Iv1cxdVDjmNguRIMnc3nQ/FyUp/mDB9Gtmj
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:35:37 2026 by rpki-client