Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
File:                     E010D234AC8D11EF93B1CB46C4F9AE02.roa (raw, json)
Hash identifier:          pMb/fzhxQo8B4/8r3buBhCAOx+HEOaBzUhA5CpNJUgw=
Subject key identifier:   9D:22:2C:19:CC:62:9A:56:FE:5C:CB:5E:D0:37:C2:D2:7E:EC:4B:6D
Certificate issuer:       /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Certificate serial:       F5
Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:37:14 +0000
ROA not before:           Wed 19 Nov 2025 04:22:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     206216
IP address blocks:        160.187.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl
                          rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
        Validity
            Not Before: Nov 19 04:22:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a5a09a-a785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:bb:4a:a8:5f:35:48:c7:80:91:a6:7c:3a:
                    8d:03:21:8e:41:d4:7b:01:ad:30:54:41:d9:20:dd:
                    66:6f:d8:f9:b4:0f:d1:4f:eb:25:b9:4d:61:d2:fe:
                    e7:4c:13:72:40:00:be:a4:1b:1d:f8:f1:27:ab:29:
                    9f:1d:28:14:e0:6c:03:9c:d1:b5:d1:29:2f:0d:9d:
                    41:35:ae:e1:43:4c:c6:21:76:94:73:e5:e9:d5:f7:
                    54:95:54:6d:cd:c7:37:a7:42:7c:b3:28:93:96:a6:
                    77:9a:ca:be:72:a5:ec:4b:b4:b7:df:ce:68:8f:2f:
                    78:f8:41:a2:d4:b5:6b:cb:8e:bb:35:bf:c8:39:91:
                    0f:91:1f:e6:22:66:d2:fb:0f:7b:43:c9:26:9b:d2:
                    5b:95:16:a3:07:c9:4c:67:ac:6e:5b:54:83:4a:f3:
                    84:d9:e2:8b:a5:c9:03:a3:56:3f:06:0b:b1:d3:8b:
                    28:ba:52:e4:75:fb:0e:3d:95:68:0a:78:66:c3:82:
                    ef:3b:dc:57:57:d1:2f:15:fc:26:f5:2d:25:e9:72:
                    0e:ac:c4:cc:a3:d7:60:eb:2e:3f:28:43:3f:8a:f2:
                    ac:2b:b1:d8:ae:01:8a:01:31:9a:11:24:57:1d:cf:
                    4a:70:09:41:6c:7e:b9:b7:8c:64:5d:4e:fc:bc:1d:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:22:2C:19:CC:62:9A:56:FE:5C:CB:5E:D0:37:C2:D2:7E:EC:4B:6D
            X509v3 Authority Key Identifier:
                keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:fb:ac:c3:7d:e2:11:f3:04:98:2f:78:cb:90:d4:dc:c9:04:
         55:3d:60:58:36:b3:c5:86:76:97:bb:da:77:a1:81:13:78:91:
         e6:33:02:9f:91:f9:fe:91:8e:c1:31:97:13:ae:e3:00:42:d5:
         52:b1:bc:fe:81:6f:bc:bd:61:d0:e3:52:bc:4f:1b:8d:70:3b:
         e9:d3:7a:4a:e9:09:8b:de:1b:fa:35:c1:77:36:64:b7:83:cd:
         8f:8c:e7:e2:a6:fa:57:e7:b0:1c:ba:9e:74:30:52:2a:6e:7a:
         98:25:2a:1b:dc:ca:f7:65:ed:ea:56:91:ca:9b:28:a0:34:b3:
         a2:d1:c5:22:e5:55:aa:eb:bc:cf:6e:ce:d6:14:2d:ce:dd:da:
         27:67:b2:1e:2d:bb:1f:a6:2d:10:47:52:e4:e5:fe:4c:ee:f3:
         46:da:25:5b:4f:9c:6d:ce:50:44:eb:0e:89:31:85:34:36:5f:
         e2:2c:69:f1:c3:ea:4b:f8:d6:cf:05:44:9e:93:87:d0:80:27:
         7d:71:f5:39:56:43:a4:36:a0:9d:3a:5d:4f:a1:27:ba:3d:90:
         f6:d9:65:40:e2:00:eb:52:ed:1f:e5:7d:47:d4:cc:dd:a8:43:
         01:b6:88:0a:9b:16:03:28:0d:d9:fe:fe:a8:a9:d4:6e:b7:da:
         6e:6b:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:50:48 2026 by rpki-client