Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BD8F545EA04E11F1AE96D4763F11F970.roa
File:                     BD8F545EA04E11F1AE96D4763F11F970.roa (raw, json)
Hash identifier:          SRiv637j26st2H86B258SwdQCkUXgyS0JaraOJ/aW0M=
Subject key identifier:   05:33:3A:C3:D1:5C:B4:93:24:11:64:EC:42:B4:45:4F:26:7E:1E:E7
Certificate issuer:       /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial:       0175
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BD8F545EA04E11F1AE96D4763F11F970.roa
Signing time:             Tue 25 Aug 2026 06:32:27 +0000
ROA not before:           Tue 25 Aug 2026 06:32:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     17644
IP address blocks:        160.191.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 06:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
        Validity
            Not Before: Aug 25 06:32:27 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a8d36fb-b75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ca:9e:ce:15:d4:21:4d:de:b4:a8:07:80:9f:
                    2b:a6:05:1c:ad:75:ac:fd:4d:08:4f:a3:b8:7d:dc:
                    d5:01:34:c2:42:06:22:3b:e9:3f:29:38:30:01:e3:
                    20:8b:a0:07:69:fa:49:4a:3c:0b:9a:b8:28:01:26:
                    e2:ed:f1:60:29:f9:a7:f6:23:66:ce:dc:2c:40:eb:
                    c7:03:d9:bd:94:01:d5:b0:5d:e7:05:c4:d8:09:71:
                    1c:48:3d:a1:74:e3:99:33:f4:ad:c1:ec:01:e2:33:
                    49:11:9c:9b:94:fe:40:72:96:9f:22:5a:7d:4b:ad:
                    c1:76:9c:bd:eb:dd:4d:0d:1a:e6:86:4f:52:28:2b:
                    1b:ae:c8:b5:78:47:f1:08:05:d2:24:a9:68:4a:ac:
                    3b:00:6e:7b:30:e2:d4:4f:0f:61:86:12:73:99:a2:
                    14:e2:de:7b:d0:cc:3c:79:48:7f:0a:a4:74:bb:c5:
                    15:5e:e8:03:68:4d:04:ee:ab:c1:a3:92:30:32:ea:
                    c6:d9:bc:df:b7:7c:ba:dd:19:7d:12:21:4b:c5:13:
                    60:14:5e:b4:55:c2:48:da:15:cf:f9:6b:d3:07:d3:
                    18:9e:aa:4c:be:04:59:66:fc:54:26:82:0d:98:13:
                    77:61:1d:52:58:2e:08:40:07:5a:df:06:d9:88:fb:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:33:3A:C3:D1:5C:B4:93:24:11:64:EC:42:B4:45:4F:26:7E:1E:E7
            X509v3 Authority Key Identifier:
                keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BD8F545EA04E11F1AE96D4763F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:f2:0b:97:2c:ff:7b:d0:31:10:61:24:de:71:fb:f0:b3:
         d4:b1:08:b1:24:6f:71:57:33:22:02:7d:66:90:f6:f4:eb:8d:
         3b:c7:11:b6:9d:31:de:55:6a:e9:53:71:8f:5d:5a:7b:4a:63:
         c7:55:b6:89:b7:85:3c:c9:60:5c:81:78:35:85:8d:36:dd:51:
         09:c3:a2:76:cc:99:2a:c7:57:57:c5:f2:91:3f:3c:a8:ad:73:
         69:0a:cf:8b:4e:49:15:49:7e:5c:9c:c4:be:8c:24:3c:99:99:
         f2:be:42:62:4c:5f:dc:fa:7f:16:e2:7a:3d:ac:5e:81:72:1c:
         97:19:47:4e:55:11:e6:18:8f:07:a7:e0:8c:5e:c6:8f:09:97:
         35:0b:24:ce:b0:82:c5:9c:b7:de:a1:0f:29:f1:3f:0a:ee:90:
         3e:d6:6e:bc:1f:8d:6f:71:b8:71:d0:89:f4:87:01:b7:23:6c:
         ec:43:ef:00:87:8d:56:14:eb:6b:a0:01:a7:26:80:7d:cb:0a:
         b6:88:aa:5d:e3:5b:65:89:09:76:3f:c2:70:df:73:b1:30:f4:
         e6:be:e3:88:4f:3c:34:c1:0a:ed:34:5c:3e:61:62:65:76:77:
         53:15:b0:8b:19:03:9c:5d:38:f9:66:cb:d1:7d:c9:cc:9c:5d:
         dd:ef:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:14:01 2026 by rpki-client