Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/DDDCEA1E8CD011F192D42A854011F970.roa
File:                     DDDCEA1E8CD011F192D42A854011F970.roa (raw, json)
Hash identifier:          g7heFy4fxock6S6CcqutuLaz4uE4rAZir+13UMjp2Ik=
Subject key identifier:   38:30:C5:25:FF:63:A8:C0:37:94:75:23:AE:94:1A:08:75:27:A5:8E
Certificate issuer:       /CN=A91567D5/serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672
Certificate serial:       08
Authority key identifier: 29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/DDDCEA1E8CD011F192D42A854011F970.roa
Signing time:             Fri 31 Jul 2026 11:13:33 +0000
ROA not before:           Fri 31 Jul 2026 11:13:33 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132372
IP address blocks:        160.236.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl
                          rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91567D5, serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672
        Validity
            Not Before: Jul 31 11:13:33 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a6c835d-ad16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:24:d4:a0:b1:d1:8d:52:df:73:e3:3d:de:
                    79:47:df:3a:1a:f7:7f:80:d9:fa:58:be:9f:8f:25:
                    d5:41:f7:97:64:b6:ab:40:cb:d7:b9:d0:cc:8e:fd:
                    bf:93:44:e2:f1:69:cc:b7:50:72:2d:e8:47:e6:3e:
                    21:13:b5:01:f8:fe:7f:96:f2:b7:f6:e4:e8:24:2a:
                    59:3e:e6:cf:d1:40:fa:51:0d:53:31:cb:ad:83:04:
                    e1:6e:a2:7e:52:53:39:16:48:03:c5:c0:08:7d:6a:
                    6a:da:d9:9f:bd:67:56:e1:09:fe:49:ef:19:11:33:
                    a2:a5:c1:fe:c1:ff:a0:8b:1b:28:41:03:a7:3e:42:
                    3a:b9:33:54:47:70:f6:6a:e5:c6:1c:15:ac:40:ff:
                    9d:5d:80:14:b5:9d:f3:83:23:6f:e5:1a:66:f0:26:
                    af:6f:73:35:cf:b1:b8:9f:e7:f6:3f:9c:11:4b:f5:
                    74:75:1a:03:b8:02:6d:ef:f4:43:2f:7b:fa:98:d9:
                    c6:6e:c4:d3:8c:13:ae:71:3e:95:bc:89:d1:62:9b:
                    1d:80:8c:46:c2:20:97:35:9e:01:33:5c:7f:b5:b8:
                    b6:41:c7:e5:6d:c0:d0:93:c0:36:f2:62:13:c7:19:
                    9c:cd:80:7d:0a:5a:52:1f:94:04:36:c4:65:09:28:
                    c0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:30:C5:25:FF:63:A8:C0:37:94:75:23:AE:94:1A:08:75:27:A5:8E
            X509v3 Authority Key Identifier:
                keyid:29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/DDDCEA1E8CD011F192D42A854011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:10:88:51:50:9b:b9:60:9f:09:a6:f9:22:dc:9b:7b:75:f5:
         62:9c:1a:61:60:f3:12:fb:28:c5:79:46:f0:d0:54:11:e6:42:
         70:10:d3:68:91:ed:1c:7b:72:18:20:73:50:49:be:ce:86:90:
         04:fe:a5:69:8c:a0:ba:3f:1d:dc:c3:2e:47:32:d9:9b:7b:5a:
         14:0d:3f:42:60:e0:e0:6a:41:a8:7b:20:92:55:a8:e6:c0:21:
         78:9a:8f:1b:4e:3e:16:07:5e:93:48:d1:66:16:ae:c2:90:14:
         de:de:87:f4:54:d6:49:cd:b4:c5:ad:24:1e:3a:ba:b9:97:73:
         2b:04:49:a7:e1:45:7b:bb:81:d0:01:23:cb:29:53:32:14:3c:
         aa:79:84:21:18:37:14:75:49:e0:64:65:bd:69:95:df:61:be:
         41:7c:da:dc:35:a0:6a:20:8f:69:af:16:70:92:8f:a4:88:68:
         81:ad:5c:5d:67:3c:fd:21:27:d1:13:d4:00:86:ce:75:c5:4b:
         b8:17:0c:44:b5:3e:f0:80:d1:84:b3:16:12:9c:8a:37:32:94:
         ac:ff:ce:8a:66:36:13:fb:c9:9c:cb:01:61:49:6d:ed:54:27:
         af:59:ee:17:e9:2f:75:05:2c:25:98:c4:63:6d:0a:76:91:1b:
         c7:8e:57:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:38 2026 by rpki-client