Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/AD57493E0B7B11F09EB3322EC4F9AE02.roa
File:                     AD57493E0B7B11F09EB3322EC4F9AE02.roa (raw, json)
Hash identifier:          oQ2JgeY4YkpiQOdTzdpGHKguHYbJNYwOznhQfQF2As0=
Subject key identifier:   EE:50:AE:24:B8:DA:6A:3F:AC:5B:F0:FE:59:70:58:B6:6D:1A:A7:4F
Certificate issuer:       /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Certificate serial:       0133
Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/AD57493E0B7B11F09EB3322EC4F9AE02.roa
Signing time:             Fri 23 Oct 2026 06:54:56 +0000
ROA not before:           Fri 23 Oct 2026 06:54:56 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     150320
IP address blocks:        160.187.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
                          rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 06:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
        Validity
            Not Before: Oct 23 06:54:56 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6adb04c0-6ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:5f:84:36:13:ca:e0:d0:cf:be:2e:ef:bc:
                    a0:65:14:2a:95:b4:ee:c9:1c:27:c1:15:57:6f:93:
                    20:3b:e9:4b:81:08:80:af:a3:a6:f7:d3:c3:d2:79:
                    f8:1f:25:2a:a8:f1:67:83:cf:65:f7:c7:87:7c:04:
                    25:aa:c2:c1:68:e6:70:f8:25:39:8c:42:04:25:65:
                    bc:c0:1f:91:21:f8:4d:9e:d0:83:a5:fd:cc:e4:5a:
                    ba:04:df:30:81:96:4d:71:82:55:a7:b6:3b:f1:95:
                    5a:32:b4:e6:f1:ad:b5:0f:2a:45:07:ed:99:b8:e4:
                    3a:0d:74:1f:d8:a9:73:ec:4b:9e:05:ad:5d:e2:b9:
                    32:7b:63:3e:6e:67:f8:5f:50:7a:47:98:1d:82:ae:
                    7d:d6:ae:fc:91:d3:fb:06:45:57:26:dd:fe:c9:69:
                    72:8f:08:e8:8f:b1:93:66:08:ad:91:7a:82:d1:fd:
                    f2:51:55:5e:f5:2f:a3:55:44:eb:32:2c:10:a1:86:
                    a8:05:0b:86:b9:95:a1:4b:b3:1f:20:18:54:9b:d6:
                    c8:f8:25:0d:14:16:bb:b2:5f:9f:7d:49:10:b4:9e:
                    d6:a3:c3:eb:c3:ea:d0:be:6e:d5:81:44:6b:bc:bc:
                    67:77:4b:8d:84:0a:46:93:6c:79:db:c7:1c:3a:40:
                    87:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:50:AE:24:B8:DA:6A:3F:AC:5B:F0:FE:59:70:58:B6:6D:1A:A7:4F
            X509v3 Authority Key Identifier:
                keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/AD57493E0B7B11F09EB3322EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:5c:e1:72:eb:b2:16:f5:7d:1a:c3:9f:17:14:52:4c:b0:00:
         19:68:49:7f:e0:63:da:fa:32:70:45:87:6f:00:b0:c7:22:bb:
         5d:0d:27:8b:0c:e9:46:14:6d:6b:34:3e:ba:c7:db:a6:e3:e7:
         b3:a3:bc:ca:f6:9b:e0:ec:b7:34:aa:1a:63:23:87:01:10:bd:
         00:e4:82:95:05:66:f5:73:53:ac:45:14:b1:b1:c5:29:87:2a:
         f2:98:02:46:bb:6c:35:bf:6b:e4:70:32:00:ee:f9:41:19:eb:
         0c:4b:62:00:b0:71:02:e1:bd:70:a2:95:61:f1:ae:90:e7:ae:
         e3:03:09:d0:2b:4e:ec:ca:dc:f1:c1:5c:6a:6e:8e:fb:2f:9c:
         d5:e1:76:45:3e:8c:ae:2c:aa:4c:77:6a:8c:87:81:02:da:05:
         02:1f:3a:8c:ad:3a:ba:9b:f6:a6:2f:bc:15:37:c7:1d:c9:4a:
         2c:09:c0:ac:23:2f:3f:5c:01:59:ba:09:cf:c1:77:08:6e:07:
         42:8e:97:f0:21:58:e5:5d:ca:d9:51:b7:b5:43:1c:20:c5:53:
         84:43:be:a3:ae:ec:33:29:9c:ad:8e:fd:96:10:c7:35:db:1d:
         73:87:d3:81:09:11:e3:c4:d4:9f:99:77:74:a0:eb:37:08:c4:
         91:ce:35:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:16 2026 by rpki-client