Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/27995372566911EF9D53B517C4F9AE02.roa
File:                     27995372566911EF9D53B517C4F9AE02.roa (raw, json)
Hash identifier:          Os/USXvt/H7fIhWC0bqoSEfU+MdodBdgAj4OrX2+x24=
Subject key identifier:   38:9C:12:5B:82:09:91:48:32:2D:CC:31:EC:35:EB:0F:86:60:B3:4B
Certificate issuer:       /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
Certificate serial:       018A
Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/27995372566911EF9D53B517C4F9AE02.roa
Signing time:             Thu 27 Aug 2026 04:56:00 +0000
ROA not before:           Thu 27 Aug 2026 04:56:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     136461
IP address blocks:        160.30.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 04:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
        Validity
            Not Before: Aug 27 04:56:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8fc360-b58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f2:07:69:c9:7a:34:e4:c9:47:6f:59:5b:52:
                    87:bc:d2:b6:8a:57:e7:47:15:8f:81:78:ec:e3:dc:
                    07:e7:9a:c6:f2:0c:42:39:8d:0a:48:c8:ca:51:d2:
                    14:a4:ac:26:53:8d:e3:c0:be:fc:8d:65:f5:20:3b:
                    f3:6e:68:16:a6:e4:ac:42:06:2c:99:d5:8d:c6:3c:
                    a2:cf:cb:ed:ee:08:97:56:bf:0e:4c:6f:a9:cf:2a:
                    cc:8e:a2:91:ca:34:af:d0:31:10:40:e4:85:8d:a5:
                    30:1d:09:77:75:b8:ba:8b:71:23:c4:ba:84:33:b7:
                    80:e8:0c:e3:fb:aa:40:7d:0c:15:9f:72:14:3a:0b:
                    ed:3c:76:e6:ff:2f:d5:e4:94:57:6d:bb:84:b5:40:
                    02:8f:8c:b6:7a:a0:b5:c0:47:3b:5f:d1:8a:e9:a1:
                    22:35:92:66:78:66:ad:13:91:5f:ad:d7:d1:dc:0f:
                    63:a3:62:f8:67:67:1e:4e:4c:66:a6:a7:01:72:42:
                    50:49:56:66:6b:72:76:e5:b4:5b:c2:21:5b:7e:75:
                    10:6b:79:57:03:a9:b9:02:67:23:11:b5:0d:59:e4:
                    74:81:f7:ab:73:83:88:12:ae:5d:c0:49:2d:09:8f:
                    e5:5e:1f:a7:39:38:91:2c:9a:ca:06:5d:22:fc:8a:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9C:12:5B:82:09:91:48:32:2D:CC:31:EC:35:EB:0F:86:60:B3:4B
            X509v3 Authority Key Identifier:
                keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/27995372566911EF9D53B517C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:c2:34:37:fc:fd:e4:33:15:b9:81:c6:a1:62:e7:26:34:a6:
         00:55:fa:14:73:9b:ef:c9:16:da:8c:76:53:d0:37:cd:9d:f0:
         3b:c8:10:89:1f:cd:85:08:e5:b5:78:c5:98:26:db:26:b3:5a:
         ba:e7:1c:95:6b:2d:95:bd:ed:b8:03:c4:03:f2:80:67:b1:51:
         86:1c:59:0f:3b:68:9d:4c:05:cd:1d:c7:c3:bc:aa:a6:a4:f6:
         4b:e2:1d:de:6a:51:69:a1:38:82:1a:f7:28:ef:ac:c9:22:d2:
         32:6b:1e:19:66:e0:25:84:88:11:01:8e:18:f2:52:5a:fc:ae:
         cc:06:f9:8d:d1:90:75:d0:68:f7:52:c8:28:58:c1:10:09:05:
         22:fe:3c:f8:54:dd:0b:3a:30:f2:d1:bc:fc:c6:98:1a:8f:6f:
         5c:0c:77:cc:bd:ae:3a:e4:60:78:8e:08:6b:04:ab:ad:b4:eb:
         3c:ef:1e:c8:db:66:00:f3:65:2f:4e:8e:2e:54:86:68:b7:69:
         e0:fc:31:04:5f:d3:8f:f4:92:72:74:f8:61:68:d1:5b:72:35:
         06:90:08:21:25:c8:2a:e4:69:60:45:88:20:cf:58:72:91:31:
         e0:c7:f8:d1:4c:66:1a:0d:40:3e:72:de:0b:06:fc:c2:bc:78:
         34:0c:14:a2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNCQjAxMTAvBgNVBAUTKEI5MUEyNENGMDQ3MTExMTdDOEMzQkEyNjRBMzMzOTVE
QTc3RjkxQjQwHhcNMjYwODI3MDQ1NjAwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThmYzM2MC1iNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvIHacl6NOTJR29ZW1KHvNK2ilfnRxWPgXjs49wH55rG8gxCOY0KSMjKUdIU
pKwmU43jwL78jWX1IDvzbmgWpuSsQgYsmdWNxjyiz8vt7giXVr8OTG+pzyrMjqKR
yjSv0DEQQOSFjaUwHQl3dbi6i3EjxLqEM7eA6Azj+6pAfQwVn3IUOgvtPHbm/y/V
5JRXbbuEtUACj4y2eqC1wEc7X9GK6aEiNZJmeGatE5FfrdfR3A9jo2L4Z2ceTkxm
pqcBckJQSVZma3J25bRbwiFbfnUQa3lXA6m5AmcjEbUNWeR0gferc4OIEq5dwEkt
CY/lXh+nOTiRLJrKBl0i/IrxywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDicEluC
CZFIMi3MMew16w+GYLNLMB8GA1UdIwQYMBaAFLkaJM8EcREXyMO6JkozOV2nf5G0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9CODY1QjM3RTU2
NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVSZkl3N29tU2pNNVhhZF9r
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2tiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzNCQjAvQjg2NUIzN0U1NjY4MTFFRjhFNkE3NzVEQzRGOUFFMDIvMjc5OTUzNzI1
NjY5MTFFRjlENTNCNTE3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB4gMA0GCSqGSIb3DQEBCwUAA4IBAQAAwjQ3/P3kMxW5gcahYucm
NKYAVfoUc5vvyRbajHZT0DfNnfA7yBCJH82FCOW1eMWYJtsms1q65xyVay2Vve24
A8QD8oBnsVGGHFkPO2idTAXNHcfDvKqmpPZL4h3ealFpoTiCGvco76zJItIyax4Z
ZuAlhIgRAY4Y8lJa/K7MBvmN0ZB10Gj3UsgoWMEQCQUi/jz4VN0LOjDy0bz8xpga
j29cDHfMva465GB4jghrBKuttOs87x7I22YA82UvTo4uVIZot2ng/DEEX9OP9JJy
dPhhaNFbcjUGkAghJcgq5GlgRYggz1hykTHgx/jRTGYaDUA+ct4LBvzCvHg0DBSi
-----END CERTIFICATE-----
Generated at Sat Oct 10 08:42:16 2026 by rpki-client