Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/8064BD9A531811F19CFFFF86C0833773.roa
File:                     8064BD9A531811F19CFFFF86C0833773.roa (raw, json)
Hash identifier:          6eSWI3lacVFYWJ6Y3LXT4o1eDdujYg9oUunVgvcKPVw=
Subject key identifier:   78:25:F3:60:A5:E5:22:D4:C5:39:20:8D:0D:79:89:4D:D9:87:7E:3E
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       35E8
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/8064BD9A531811F19CFFFF86C0833773.roa
Signing time:             Tue 19 May 2026 00:20:12 +0000
ROA not before:           Tue 19 May 2026 00:20:12 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152205
IP address blocks:        160.30.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 13:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13800 (0x35e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: May 19 00:20:12 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a0bacbc-abf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:df:83:ea:fc:bd:dc:fe:01:de:2d:e4:32:4f:
                    4a:f0:3f:04:06:da:7e:aa:d2:fc:66:e7:7f:e3:78:
                    93:5a:14:f0:4e:98:62:ad:f3:2e:c3:12:d1:9d:1f:
                    88:8c:45:5a:62:68:40:ff:78:53:c2:b6:9a:0d:c7:
                    50:0d:5a:78:78:93:2d:02:d5:1f:19:5b:55:05:5f:
                    7b:d7:6a:99:a2:ad:5d:96:8f:87:00:fe:ce:b5:21:
                    08:0f:b9:de:79:95:17:16:9e:d3:a5:7c:c2:1d:80:
                    3d:15:fb:78:97:b6:07:ff:eb:be:2e:4a:53:21:27:
                    24:13:d7:d5:0c:b9:d6:0e:1d:2a:c9:2a:50:1e:d2:
                    12:6c:1f:97:ba:f2:cd:aa:6e:d0:65:0a:10:57:47:
                    18:7e:91:2a:9d:8e:21:8b:1a:bc:34:1a:28:4a:82:
                    c7:4d:ed:a2:44:83:95:5a:de:3d:66:c0:23:45:7f:
                    33:8c:78:ef:e3:36:12:36:44:ff:b8:4b:54:ac:c7:
                    a6:16:a8:00:e6:c7:12:42:75:aa:a6:af:f9:f4:d9:
                    91:3e:f4:57:a2:5a:e3:5d:19:74:74:87:fa:0b:12:
                    11:eb:c7:6f:ca:c8:a7:ad:c6:a4:e1:5e:5e:94:85:
                    26:7b:82:2c:6c:90:8e:3d:00:fb:12:11:93:39:a7:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:25:F3:60:A5:E5:22:D4:C5:39:20:8D:0D:79:89:4D:D9:87:7E:3E
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/8064BD9A531811F19CFFFF86C0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:af:94:61:a0:69:d8:9f:ec:53:9f:68:d6:f2:80:c0:3f:1a:
         05:0c:63:f2:2a:78:24:3c:e2:17:2a:eb:09:5b:e6:d2:48:6e:
         39:38:fa:57:e6:c7:b0:19:19:e4:ad:59:58:34:47:e5:9c:a7:
         b5:61:9e:e6:86:69:9c:4b:04:19:bf:c8:59:14:18:2d:e0:7d:
         77:e3:5c:03:cf:c7:70:69:3c:4f:e6:15:84:7b:bb:e6:ea:49:
         11:ad:35:3a:60:38:be:36:aa:14:0d:7f:18:6b:47:97:df:08:
         b2:d2:5c:46:96:b5:28:2b:07:dd:ee:49:39:f7:76:79:db:3d:
         df:bc:50:e7:36:ac:c6:ed:6b:a3:3c:fe:e0:22:46:18:ae:0b:
         4e:0d:89:cd:bc:17:96:63:d5:b8:9c:26:c5:7c:e2:4b:1d:28:
         2d:81:b6:28:bc:74:18:af:61:c6:4d:40:58:de:cc:c7:67:72:
         3e:1a:29:f9:20:17:fc:85:6c:eb:6a:19:fb:23:40:a4:1e:43:
         c4:73:7a:ca:b9:08:2d:88:1e:db:69:2c:c0:1d:8a:3b:58:70:
         82:59:da:e9:df:de:44:f7:29:00:2c:7a:3f:48:c8:80:6f:96:
         d4:37:96:67:60:06:db:5a:72:17:93:f3:cc:c4:3c:09:9b:f9:
         80:a5:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:09 2026 by rpki-client