Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/10435EE8740511EF93658977C4F9AE02.roa
File:                     10435EE8740511EF93658977C4F9AE02.roa (raw, json)
Hash identifier:          6+dRrxPmWRCMlxCcSYhpVStcDeLZfIKjMMz2mDaOI+Q=
Subject key identifier:   2F:91:C9:3F:CB:B9:A0:FE:2F:AE:98:16:12:82:E9:B2:2A:8B:31:70
Certificate issuer:       /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Certificate serial:       012B
Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/10435EE8740511EF93658977C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:25:28 +0000
ROA not before:           Thu 23 Oct 2025 07:49:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153323
IP address blocks:        160.187.20.0/24 maxlen: 24
                          160.187.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
                          rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
        Validity
            Not Before: Oct 23 07:49:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a58fc8-2a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:d2:d2:b2:ea:8f:3b:19:96:f7:20:85:8d:
                    a4:c7:dc:3f:5e:72:0c:94:e7:e6:3c:42:26:47:06:
                    e8:66:63:42:4d:3d:1b:c9:17:52:88:d2:69:23:ac:
                    45:28:fa:be:0b:4f:30:52:e7:4b:ef:bb:29:ff:c8:
                    e0:c3:88:a2:b9:75:09:f6:1a:2d:c3:18:ae:8c:14:
                    db:d8:51:bc:95:18:81:18:87:05:76:d2:ab:f4:7f:
                    f9:8d:2a:a6:df:b6:c9:27:72:b1:aa:f4:63:28:fa:
                    d8:73:d0:70:21:1f:07:da:2c:b0:23:86:32:dc:e9:
                    18:44:a8:ca:68:16:69:71:9e:b5:65:c9:b6:91:59:
                    b9:33:86:f1:15:d3:5a:a5:8d:a8:00:e7:6d:5e:f8:
                    17:6d:7c:d4:54:1f:ca:5d:2d:f7:30:29:15:44:f7:
                    11:c3:41:fe:9c:d8:03:91:b6:9c:e5:c9:d7:ec:fe:
                    b7:ea:59:99:83:ff:ef:39:c9:ee:68:06:4d:d7:4a:
                    10:e1:fe:e7:9e:14:6f:07:97:1b:85:a6:80:6c:8d:
                    6a:e2:eb:53:74:ec:bb:1d:3f:fa:07:1b:83:04:27:
                    e1:95:49:db:4e:09:d7:71:95:a2:9e:9f:55:7c:fd:
                    f8:da:0e:14:f7:e5:8d:64:3d:bc:3e:57:65:b3:19:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:91:C9:3F:CB:B9:A0:FE:2F:AE:98:16:12:82:E9:B2:2A:8B:31:70
            X509v3 Authority Key Identifier:
                keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/10435EE8740511EF93658977C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:14:c9:ee:2c:b3:60:cc:21:86:54:ce:c0:c6:67:60:a8:96:
         7a:74:91:8b:6b:c6:69:db:3a:7d:a5:94:18:0f:0e:bb:45:41:
         4a:64:0a:d1:7a:fe:01:56:cb:39:83:98:d7:44:63:cf:58:de:
         c5:ef:4c:64:d2:ee:14:be:62:78:a9:fd:f4:bc:35:1c:01:fb:
         4d:b8:c1:da:9e:f4:98:23:2e:5d:49:50:1b:6a:10:e3:6f:2e:
         b6:ee:73:1f:aa:0e:e8:3c:f4:73:eb:a4:59:40:51:c8:dd:b4:
         f5:44:88:3a:72:fa:b8:33:7e:6e:fe:04:b1:bd:26:32:20:8a:
         75:ce:4d:39:59:23:e0:91:a5:b3:63:f9:86:d6:c9:5f:5e:e7:
         9d:3f:97:a5:cc:ae:db:d9:c5:13:5f:d3:e5:db:12:34:7a:07:
         5f:b9:72:57:41:5a:fa:f4:d3:34:59:63:60:0e:00:c8:44:d5:
         05:91:56:ef:b6:a0:4b:8b:c9:49:38:b3:97:66:cf:6f:3c:0c:
         35:f1:c8:a1:7a:d9:2a:97:71:bb:ef:61:31:1c:3a:f7:42:08:
         23:82:20:a8:fd:50:d4:c4:e0:e9:4e:0a:bf:43:4d:44:87:ff:
         b0:18:2d:66:ce:73:8e:11:ba:82:b3:ba:ed:98:dc:59:3c:af:
         a7:d6:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:49:24 2026 by rpki-client