Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/E611D250118111F1BD19AAF2323D8C67.roa
File:                     E611D250118111F1BD19AAF2323D8C67.roa (raw, json)
Hash identifier:          ZlY819q3BVvBAVN3kikGmOs572rGxvo+Slai0R6y0MM=
Subject key identifier:   8E:29:D4:1C:D0:B6:02:0D:9F:09:C7:7F:DB:D4:18:63:6D:31:C1:B3
Certificate issuer:       /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Certificate serial:       2E
Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/E611D250118111F1BD19AAF2323D8C67.roa
Signing time:             Mon 02 Mar 2026 13:08:30 +0000
ROA not before:           Tue 24 Feb 2026 13:08:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        160.222.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
                          rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
        Validity
            Not Before: Feb 24 13:08:23 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58bce-8231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:fd:73:fc:ef:7e:79:91:49:14:18:24:d9:
                    5a:13:dc:da:0b:67:d8:f0:86:3e:2a:16:0c:7d:4e:
                    ef:a5:06:e1:d7:ca:9d:17:18:52:28:5b:2d:0a:5e:
                    a9:66:6b:7d:83:2f:bf:fc:a1:ef:c0:4f:8a:ea:1e:
                    dd:6f:81:42:57:d4:11:b8:82:95:e6:f9:24:3e:88:
                    54:b0:56:da:20:79:9d:99:aa:c0:0c:36:89:8f:79:
                    15:06:aa:1d:d6:27:92:04:8b:66:f5:d1:3d:2b:87:
                    f0:4c:d5:b1:83:2e:0c:5d:f5:16:84:97:e2:b2:9c:
                    e9:f6:52:0d:4e:6c:40:84:75:b8:23:1b:f6:9a:b5:
                    26:7c:5b:e0:60:2b:f5:75:b3:4a:aa:d3:7b:a5:dc:
                    8a:1a:a5:10:f8:e7:ae:d6:d1:5f:1d:9c:f5:b8:c2:
                    36:a0:60:3b:35:8f:55:98:5a:35:7d:99:e3:0a:c0:
                    6f:89:94:e9:17:db:65:b8:42:68:66:f3:9e:c6:b2:
                    30:0a:a0:5a:95:1f:46:fb:d5:17:f3:d5:f4:5e:ca:
                    f7:dc:50:61:0e:d6:8f:c3:41:88:b2:41:5a:81:67:
                    08:03:f9:92:e7:b5:d5:70:4b:9d:69:f7:21:85:56:
                    50:4d:01:60:03:70:19:12:fb:53:dd:86:3a:dd:0b:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:29:D4:1C:D0:B6:02:0D:9F:09:C7:7F:DB:D4:18:63:6D:31:C1:B3
            X509v3 Authority Key Identifier:
                keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/E611D250118111F1BD19AAF2323D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.222.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:51:2f:f0:82:39:4a:75:06:3a:af:ee:cc:03:8f:5d:e8:b2:
         31:ae:53:2c:4b:58:e8:cb:25:c7:de:24:3d:9b:01:c2:8f:24:
         ac:ec:6c:41:20:b9:b2:3a:30:8c:fd:d1:65:ab:76:4d:e8:be:
         bd:43:c2:23:a1:6b:fc:21:f0:6c:e0:52:f0:2f:14:b6:12:6b:
         96:e5:af:cd:59:ea:13:bd:09:5a:76:7e:82:b4:5a:91:15:32:
         89:3a:78:4f:55:d8:53:78:73:0b:14:81:32:ee:a6:72:95:33:
         70:bc:13:7b:c0:c1:ba:de:11:e2:69:2e:81:ba:90:d1:77:e8:
         c5:db:30:99:9f:0f:f7:b7:e4:69:6c:ff:cf:41:9c:6d:24:3e:
         66:42:09:0e:39:0d:6d:f5:0c:9d:f5:70:d0:de:e4:ee:0c:43:
         ee:c9:f3:db:22:14:48:50:0c:c4:a5:ab:34:2c:1c:27:11:f2:
         3b:8d:9a:a0:e8:85:35:ae:45:fc:2d:1c:51:de:a9:bc:d3:f6:
         46:94:b5:82:4f:68:08:76:89:b1:0f:57:54:8b:0c:55:39:5d:
         3e:c5:a9:09:d4:09:c6:57:bd:f7:95:86:d3:75:17:fa:58:d7:
         5a:6d:d2:12:1c:f9:22:be:75:14:fe:1d:fa:b3:a8:5b:a2:61:
         6d:d5:74:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:07:09 2026 by rpki-client