Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/52EADE54935111EF98AA8C86C4F9AE02.roa
File:                     52EADE54935111EF98AA8C86C4F9AE02.roa (raw, json)
Hash identifier:          VhIuGtFPo2Cv8cAGYxGtYUO/7hhyF5U43Aacg6GF4jM=
Subject key identifier:   27:31:DC:18:AC:D9:C1:EC:A1:BD:1B:57:81:A9:B0:EF:BD:4C:17:59
Certificate issuer:       /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Certificate serial:       0107
Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/52EADE54935111EF98AA8C86C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:55:45 +0000
ROA not before:           Thu 21 Aug 2025 06:44:30 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140323
IP address blocks:        160.30.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl
                          rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
        Validity
            Not Before: Aug 21 06:44:30 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a5a4f0-a992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:31:5e:ae:af:3c:47:af:8c:eb:2a:31:00:
                    d4:fe:a3:45:f3:4d:65:56:c4:8e:87:f6:94:7a:6f:
                    c5:1a:a1:03:fb:37:58:a8:68:24:91:a1:14:b2:3f:
                    fc:53:16:cf:cd:d6:81:37:79:fc:ad:c4:2f:3a:58:
                    8a:e0:b6:0f:52:90:e2:70:26:10:2d:f1:f2:61:6f:
                    6f:8b:34:85:1d:bd:5a:9d:88:c0:54:b5:a8:c3:6c:
                    0b:85:d7:63:c5:1b:a7:38:1f:f4:d4:46:fb:65:9b:
                    82:7e:5f:a3:e4:39:3c:f1:05:48:e1:4f:ae:9c:61:
                    5b:7a:2f:10:9b:be:82:2e:20:94:73:97:0e:8f:92:
                    85:43:b3:bb:8d:d3:89:4a:54:80:91:be:ee:40:a4:
                    11:56:75:df:af:99:38:cf:04:2b:4c:90:44:4f:72:
                    fe:a3:78:09:3e:47:47:ea:3b:8c:53:39:22:bf:00:
                    37:b9:82:47:42:a6:4f:f6:7f:64:fd:6b:55:cb:0c:
                    6f:c6:94:49:1d:d2:04:57:f3:15:a7:b7:95:4e:92:
                    72:2c:f4:1c:c3:b8:4e:a9:25:62:53:1e:ce:f5:e4:
                    c2:a5:d0:3f:88:0d:f7:18:b9:06:c9:42:4b:93:65:
                    be:39:6a:91:ba:b2:0e:39:6d:5f:64:f5:4f:b7:e9:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:31:DC:18:AC:D9:C1:EC:A1:BD:1B:57:81:A9:B0:EF:BD:4C:17:59
            X509v3 Authority Key Identifier:
                keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/52EADE54935111EF98AA8C86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:e9:25:af:31:38:b6:bb:19:08:76:c4:83:d7:81:8b:b6:37:
         77:f8:8b:ea:81:35:3e:dd:7b:78:9f:6d:08:4d:a4:24:b6:49:
         df:6f:21:1a:86:0e:58:39:1f:a8:7e:4e:27:6e:f4:4b:76:7e:
         44:e9:65:35:fa:ab:e0:26:7d:98:4f:13:e0:2b:f9:f5:d9:f7:
         10:17:50:d5:b5:95:a4:5e:09:26:7d:9a:be:3c:d6:e2:e3:6c:
         ef:a8:26:6f:28:b2:62:94:3b:06:a6:54:a3:e4:8e:21:b7:0e:
         25:09:74:55:23:09:37:de:e6:78:6e:ca:20:b0:11:9b:52:4b:
         60:3c:41:37:92:05:ad:bf:51:96:fa:39:b9:08:cc:0a:cc:4a:
         af:8c:e9:cf:0d:9f:87:ed:06:96:7f:07:f7:10:0c:6d:0e:8f:
         c6:f9:3d:f8:64:fc:26:b3:ba:e0:bb:b9:71:3c:4d:f3:53:ae:
         eb:e1:59:99:48:0a:06:11:54:76:39:2b:f9:c5:e6:f7:b2:9d:
         1e:e7:13:42:50:98:4a:22:6d:cf:4d:7f:9c:87:a3:f2:84:3d:
         15:1c:d7:9a:9f:95:ac:f2:7a:4b:e0:ce:3a:6c:86:6e:4c:07:
         42:05:fc:7d:c6:6e:91:bd:10:17:ca:e1:f0:64:af:c0:17:bc:
         ed:67:45:97
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4
MkMyRUQ0ODgwHhcNMjUwODIxMDY0NDMwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTRmMC1hOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsSoxXq6vPEevjOsqMQDU/qNF801lVsSOh/aUem/FGqED+zdYqGgkkaEUsj/8
UxbPzdaBN3n8rcQvOliK4LYPUpDicCYQLfHyYW9vizSFHb1anYjAVLWow2wLhddj
xRunOB/01Eb7ZZuCfl+j5Dk88QVI4U+unGFbei8Qm76CLiCUc5cOj5KFQ7O7jdOJ
SlSAkb7uQKQRVnXfr5k4zwQrTJBET3L+o3gJPkdH6juMUzkivwA3uYJHQqZP9n9k
/WtVywxvxpRJHdIEV/MVp7eVTpJyLPQcw7hOqSViUx7O9eTCpdA/iA33GLkGyUJL
k2W+OWqRurIOOW1fZPVPt+nNVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCcx3Bis
2cHsob0bV4GpsO+9TBdZMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz
NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI3RTIvNzAzMUExRUM5MzUwMTFFRkJBQ0UwMDRDQzRGOUFFMDIvNTJFQURFNTQ5
MzUxMTFFRjk4QUE4Qzg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB6mMA0GCSqGSIb3DQEBCwUAA4IBAQC36SWvMTi2uxkIdsSD14GL
tjd3+IvqgTU+3Xt4n20ITaQktknfbyEahg5YOR+ofk4nbvRLdn5E6WU1+qvgJn2Y
TxPgK/n12fcQF1DVtZWkXgkmfZq+PNbi42zvqCZvKLJilDsGplSj5I4htw4lCXRV
Iwk33uZ4bsogsBGbUktgPEE3kgWtv1GW+jm5CMwKzEqvjOnPDZ+H7QaWfwf3EAxt
Do/G+T34ZPwms7rgu7lxPE3zU67r4VmZSAoGEVR2OSv5xeb3sp0e5xNCUJhKIm3P
TX+ch6PyhD0VHNean5Ws8npL4M46bIZuTAdCBfx9xm6RvRAXyuHwZK/AF7ztZ0WX
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:13 2026 by rpki-client