Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/2AE7F0209E0A11F1A6A4064D4C11F970.roa
File:                     2AE7F0209E0A11F1A6A4064D4C11F970.roa (raw, json)
Hash identifier:          Q55ns3qgHzfdd9tA6C9B2IGZDy2kja6eWDaQp3SdxZ8=
Subject key identifier:   D6:35:4C:69:B6:CC:47:C9:6A:C4:1E:75:E1:0E:99:DA:0E:00:06:6C
Certificate issuer:       /CN=A9122796/serialNumber=73E090EF799B6759B03D2251DC44B7AC0353A6BD
Certificate serial:       04
Authority key identifier: 73:E0:90:EF:79:9B:67:59:B0:3D:22:51:DC:44:B7:AC:03:53:A6:BD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/2AE7F0209E0A11F1A6A4064D4C11F970.roa
Signing time:             Sat 22 Aug 2026 09:16:33 +0000
ROA not before:           Sat 22 Aug 2026 09:16:33 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     132367
IP address blocks:        160.236.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl
                          rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 09:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122796, serialNumber=73E090EF799B6759B03D2251DC44B7AC0353A6BD
        Validity
            Not Before: Aug 22 09:16:33 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a8968f1-16e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:bb:36:c6:76:11:31:27:d2:2b:bb:bc:31:
                    5a:15:81:a2:14:26:d5:52:08:61:8d:52:92:95:81:
                    7d:79:8a:c7:8b:6b:d3:1f:53:df:0d:07:4e:e6:1c:
                    b1:3b:d5:41:ae:15:cd:0b:76:3b:d5:07:ec:6f:e2:
                    32:8a:91:ed:e3:c7:21:7f:1e:12:0e:67:37:26:9c:
                    75:46:d9:93:58:4f:0a:6e:eb:e5:b7:81:fd:13:e3:
                    36:ab:ff:be:b9:13:4e:8a:a6:7b:8f:69:95:49:af:
                    85:45:6b:e5:ce:5e:45:d1:23:a5:d6:b1:81:f8:ec:
                    7a:65:33:1f:21:c2:ee:cf:80:d7:9e:83:9b:64:8d:
                    c8:bf:d8:d9:46:98:f6:b8:88:25:a2:63:9c:a7:61:
                    93:e3:52:fa:17:c8:1c:24:39:78:6b:2e:80:d4:f3:
                    5f:a7:31:52:4d:55:78:c7:5f:65:6e:e6:9f:38:7c:
                    05:32:dd:c8:f5:eb:03:e6:ba:49:49:26:e1:7b:ea:
                    ed:28:8c:53:c0:c9:4d:69:6f:32:e0:1e:bd:55:b1:
                    41:44:96:0b:06:1e:35:3f:35:92:57:20:c8:4f:54:
                    b6:01:e2:03:51:68:08:eb:fe:f9:cc:21:0d:a9:a9:
                    88:23:0c:68:44:84:d1:35:7d:91:90:e9:3a:89:3e:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:35:4C:69:B6:CC:47:C9:6A:C4:1E:75:E1:0E:99:DA:0E:00:06:6C
            X509v3 Authority Key Identifier:
                keyid:73:E0:90:EF:79:9B:67:59:B0:3D:22:51:DC:44:B7:AC:03:53:A6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/2AE7F0209E0A11F1A6A4064D4C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:46:09:12:31:29:f9:ab:9f:04:cc:50:f6:d6:fc:89:af:da:
         72:4f:a3:59:02:55:96:b9:1d:1b:a7:0e:70:95:35:17:75:77:
         84:c5:17:28:3b:9e:0d:86:b1:99:e0:9a:9e:00:0b:5e:ff:47:
         cd:43:f4:ee:50:c7:9a:a3:b6:3f:e7:a6:bb:b0:56:0a:f1:8f:
         af:44:05:52:5a:35:69:f3:c5:f5:c0:3d:39:4d:9b:3c:68:b0:
         61:c0:14:02:2c:31:79:5d:5e:50:2e:fb:f0:dd:89:2c:c5:3e:
         93:10:1d:01:11:f3:6a:b0:7d:e4:8b:9d:8f:ab:6f:67:7f:51:
         f1:6d:7c:65:34:90:e9:54:6a:57:c4:6b:50:ad:ce:eb:4e:c5:
         5b:24:e0:d1:be:0c:f3:d3:c4:50:31:ea:b5:63:67:f6:9d:0f:
         0e:21:0b:6a:4c:d1:db:e7:3d:bd:bb:de:92:18:80:37:f6:0b:
         8d:66:2d:cd:23:33:fa:6b:79:01:80:aa:18:2a:3d:b6:a4:97:
         74:40:37:bd:e7:67:ab:6c:c5:f9:14:80:81:90:0f:5b:84:27:
         db:7c:df:df:7c:76:a8:e2:9d:33:5c:ab:e8:05:c3:fa:51:b5:
         0d:dd:d7:c6:bc:2c:9e:2f:fc:b8:a4:d0:0d:80:9d:3d:f2:4e:
         a1:ab:07:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:41:36 2026 by rpki-client