Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa
File:                     5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (raw, json)
Hash identifier:          nfTKSNk8+JIF1suVRpltXmeig8lRuHVZl1vGZQqNkWI=
Subject key identifier:   25:58:3C:93:4B:9F:B6:F5:59:D8:19:BA:A4:58:D4:6C:59:68:46:93
Certificate issuer:       /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Certificate serial:       0180
Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa
Signing time:             Wed 05 Aug 2026 06:54:43 +0000
ROA not before:           Wed 05 Aug 2026 06:54:43 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138580
IP address blocks:        160.30.9.0/24 maxlen: 24
                          160.250.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 03:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
        Validity
            Not Before: Aug  5 06:54:43 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a72de33-9daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1b:95:ad:37:46:36:b5:90:61:4f:32:36:d8:
                    a6:0c:a5:d1:0b:a6:4e:1b:75:e1:1e:09:66:4e:53:
                    5a:06:21:be:84:1a:67:12:df:d7:68:c9:e2:76:fb:
                    cb:da:46:ea:f4:0b:5b:d7:73:e8:b0:11:92:34:ff:
                    9f:05:50:e6:e1:a5:f9:0e:dd:52:00:6f:dd:1b:25:
                    71:6f:ca:91:f9:3e:75:b3:48:da:17:1d:00:a7:d0:
                    60:4a:da:d3:a9:83:07:0a:5d:7d:50:34:36:0d:42:
                    d8:34:35:39:a7:a6:9e:7d:fd:d5:34:6c:e6:88:26:
                    d8:07:e5:23:27:18:72:bf:c4:1f:1f:91:6d:e3:b5:
                    94:d3:3e:44:45:7c:f0:ff:13:c6:69:f2:33:be:24:
                    6a:28:4b:b9:a0:8d:41:2f:e0:6b:52:86:3b:f7:93:
                    87:87:e7:ff:b2:fe:72:53:ea:d5:21:05:9e:4e:45:
                    a5:4f:5c:66:7d:32:24:38:d1:43:94:d7:72:d5:4d:
                    cd:d0:16:af:d5:02:69:36:63:9a:c5:81:0d:6c:b0:
                    6a:61:af:1b:30:c1:6e:76:6a:c7:dc:65:6c:75:e4:
                    15:db:12:85:40:a9:d8:30:ea:cb:b1:a6:6e:42:b8:
                    83:94:ae:3a:8e:82:7e:27:a0:7d:34:84:2b:b1:9b:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:3C:93:4B:9F:B6:F5:59:D8:19:BA:A4:58:D4:6C:59:68:46:93
            X509v3 Authority Key Identifier:
                keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.9.0/24
                  160.250.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:34:f9:a7:71:ae:c5:0a:e4:86:f9:01:95:05:0c:3c:0a:f8:
         61:49:6e:c0:8b:e9:83:3d:d6:64:8a:cb:0e:38:82:c0:4c:03:
         05:e4:a7:38:e6:00:6b:5c:35:09:bb:70:73:ad:d9:ec:4d:61:
         af:85:17:56:27:76:ca:23:3b:f4:2d:c9:85:8d:e6:2f:82:99:
         1e:4f:21:96:26:4e:04:68:2a:9d:22:92:34:99:50:29:e7:65:
         81:5e:93:15:6d:85:ba:2c:4b:6c:b0:ca:9c:b1:74:ce:f3:bd:
         df:7a:53:fc:58:c4:06:65:ea:93:0b:96:8f:a1:e3:12:fd:f6:
         a6:81:a9:16:b5:8c:7d:4b:e5:5a:de:20:bf:c7:d3:cd:23:6a:
         98:ef:15:8c:80:a0:d6:a2:07:73:4c:a2:d7:1f:3f:5d:02:20:
         89:2c:7c:7c:a8:48:f1:9b:62:5b:e8:f6:ef:a6:58:0d:14:2b:
         49:49:cd:fe:b5:12:a7:03:13:fb:a0:0f:88:4f:e2:f1:82:32:
         e6:42:96:71:c2:38:16:75:04:e9:b6:3c:48:a9:3a:84:1f:e8:
         f0:f7:48:13:ef:f9:a3:7a:6b:a4:f1:0e:e4:f8:02:af:15:a4:
         25:f1:1c:a4:31:4a:29:e5:ff:22:e2:a7:d2:e0:31:1d:3a:d0:
         af:50:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 05:37:36 2026 by rpki-client