Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/8A54B9326F0C11EF866A7A83C4F9AE02.roa
File:                     8A54B9326F0C11EF866A7A83C4F9AE02.roa (raw, json)
Hash identifier:          OO9P3nmvwrK+trtUzCa29KboMFoWOIvA2JuvwhgWBD4=
Subject key identifier:   0D:96:9B:4A:7A:43:78:63:6E:19:A4:EE:06:39:94:48:C1:9B:0E:16
Certificate issuer:       /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial:       01A4
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/8A54B9326F0C11EF866A7A83C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 04:55:56 +0000
ROA not before:           Thu 03 Sep 2026 04:55:56 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        160.30.95.0/24 maxlen: 24
                          160.187.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
        Validity
            Not Before: Sep  3 04:55:56 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a98fddc-9dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:6e:da:3f:26:cd:5a:bb:83:b1:3d:38:8b:
                    a5:a5:63:a7:5b:c6:7c:a9:19:c0:ea:fb:26:c8:22:
                    dd:15:f5:aa:12:49:00:ce:dd:d0:6d:02:88:ac:38:
                    59:d7:11:25:df:29:65:b6:1a:1a:c5:c9:5c:00:af:
                    01:0b:49:34:b5:3f:7c:50:8b:62:81:ac:05:5e:5f:
                    6d:f7:52:ca:19:a9:c6:7f:57:6d:cb:0c:3a:1f:6d:
                    9d:29:31:ba:ec:11:32:9e:37:4a:c9:60:59:a7:33:
                    14:cc:c5:3d:5b:8f:9f:f2:47:61:e7:c4:0d:b5:71:
                    98:90:0b:e1:d2:52:3a:14:b7:a6:d8:b8:5c:87:e6:
                    7a:e7:04:e4:04:48:62:9c:0f:34:8d:b1:e4:fb:f1:
                    07:e1:12:30:ac:8f:b6:44:3e:3e:5c:ee:61:15:98:
                    e4:86:3f:d8:24:a7:2e:f4:e0:34:2f:89:44:20:b3:
                    17:c9:1a:3c:6b:2c:14:65:1f:fc:e4:97:e6:6b:35:
                    d1:05:b2:ff:6f:c4:bb:c8:f8:42:b1:16:0a:4e:0c:
                    c0:60:62:12:a5:ae:48:56:ad:04:f1:38:2c:a0:d7:
                    c6:fa:e5:0d:ae:94:e6:cb:d7:92:2b:93:62:bc:58:
                    3a:8c:71:f7:76:ea:99:58:1c:65:c1:6f:17:e1:a9:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:96:9B:4A:7A:43:78:63:6E:19:A4:EE:06:39:94:48:C1:9B:0E:16
            X509v3 Authority Key Identifier:
                keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/8A54B9326F0C11EF866A7A83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.95.0/24
                  160.187.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:da:ab:72:75:0b:06:19:d7:00:ea:83:32:28:40:5b:19:b2:
         3d:ac:3d:a1:62:60:0b:06:6b:a9:58:57:57:93:10:44:49:dc:
         eb:12:b2:63:53:dd:ff:35:5e:80:b1:8a:6d:8c:b0:30:46:87:
         0c:b2:05:a2:10:28:94:21:f6:7b:70:54:d6:1e:68:88:3a:7b:
         23:18:5c:71:99:ca:27:c9:8c:76:63:15:08:18:d1:95:d6:2a:
         68:4d:68:14:01:1a:aa:64:bf:8c:31:37:f5:91:e4:bf:7a:2f:
         46:41:7a:d4:f2:f6:4c:be:cb:52:7d:98:23:ad:a9:d1:59:7c:
         9d:41:5b:a3:48:44:df:1c:2e:78:d2:c6:3f:d6:5e:ca:6b:c7:
         f9:ea:56:64:79:1b:a5:cf:eb:27:71:39:05:78:72:93:f3:6e:
         eb:45:70:1b:2c:ac:49:1e:25:98:4e:f7:e5:c3:bb:d3:c5:7b:
         6f:84:ba:48:47:59:03:d6:67:66:af:b0:56:c9:3c:fd:79:89:
         e1:1b:c6:9c:bb:33:25:53:8e:a4:5c:5b:bc:11:c8:f4:74:7e:
         64:5e:3e:a9:37:be:4c:e4:ac:66:52:94:15:c3:1c:16:db:a8:
         14:69:ed:4a:84:34:93:af:b6:4f:68:d9:fe:5e:60:5b:67:b9:
         ed:ed:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:53:16 2026 by rpki-client