Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91576BB/2CC66D1EC72611F19022DA296111F970/7E351DDAC72611F18F117E456111F970.roa
File:                     7E351DDAC72611F18F117E456111F970.roa (raw, json)
Hash identifier:          Xib3oTDWdJgy7cqHe5rf/+HVzv4WN4tE6MpvlvqFO04=
Subject key identifier:   5C:E9:77:C5:96:D7:32:75:08:AC:F1:EE:95:43:4D:BD:31:5C:B7:11
Certificate issuer:       /CN=A91576BB/serialNumber=1A5BA0F4F5575DC527BBEE6C2A6BDB3ADDC68150
Certificate serial:       02
Authority key identifier: 1A:5B:A0:F4:F5:57:5D:C5:27:BB:EE:6C:2A:6B:DB:3A:DD:C6:81:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Glug9PVXXcUnu-5sKmvbOt3GgVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91576BB/2CC66D1EC72611F19022DA296111F970/7E351DDAC72611F18F117E456111F970.roa
Signing time:             Tue 13 Oct 2026 16:52:37 +0000
ROA not before:           Tue 13 Oct 2026 16:52:37 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        160.202.186.0/24 maxlen: 24
                          160.202.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91576BB/2CC66D1EC72611F19022DA296111F970/Glug9PVXXcUnu-5sKmvbOt3GgVA.crl
                          rsync://rpki.apnic.net/member_repository/A91576BB/2CC66D1EC72611F19022DA296111F970/Glug9PVXXcUnu-5sKmvbOt3GgVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Glug9PVXXcUnu-5sKmvbOt3GgVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 09:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91576BB, serialNumber=1A5BA0F4F5575DC527BBEE6C2A6BDB3ADDC68150
        Validity
            Not Before: Oct 13 16:52:37 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ace61d4-b19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5c:83:ee:d6:8a:57:da:e1:c3:6e:07:dc:6f:
                    a4:44:3c:9b:4d:06:9f:be:e2:fe:47:8f:1c:a3:f3:
                    97:6a:d7:b2:ef:2a:a9:16:17:93:9e:00:13:67:4e:
                    80:a6:78:94:2b:9e:bd:d2:6b:e7:ff:f5:f4:43:5d:
                    80:fc:33:bb:a0:b5:63:96:d0:4b:8e:3e:ff:b8:55:
                    0c:70:b9:eb:7c:60:26:df:f2:da:d0:80:15:1c:ea:
                    57:a9:17:fa:c5:d9:ad:7b:7c:c5:94:79:93:d7:e7:
                    74:ca:4e:2a:86:fa:d1:68:7b:7f:9f:ff:6f:6a:66:
                    86:22:11:d5:cb:bd:f4:e8:6b:5d:41:7d:ee:02:c8:
                    8f:51:08:53:e7:65:c2:fd:3b:c1:44:cb:9d:78:3f:
                    76:89:5e:47:e3:32:05:35:cc:e7:c7:a7:74:63:89:
                    fd:fa:c3:2d:0d:9e:5f:c2:b0:60:70:c9:25:63:e4:
                    38:94:a9:17:81:34:42:26:5c:b2:b7:a8:7e:d9:d2:
                    80:9a:26:1b:b7:f0:40:7f:15:e3:01:54:92:f1:12:
                    a9:d0:8c:7c:11:52:ce:a6:cf:a0:7a:b1:d5:63:5d:
                    9d:02:4d:6f:46:8e:d7:e5:e7:38:61:09:cd:37:88:
                    f4:0f:59:9f:ba:dd:43:c3:6d:5d:97:95:50:b5:d0:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E9:77:C5:96:D7:32:75:08:AC:F1:EE:95:43:4D:BD:31:5C:B7:11
            X509v3 Authority Key Identifier:
                keyid:1A:5B:A0:F4:F5:57:5D:C5:27:BB:EE:6C:2A:6B:DB:3A:DD:C6:81:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91576BB/2CC66D1EC72611F19022DA296111F970/Glug9PVXXcUnu-5sKmvbOt3GgVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Glug9PVXXcUnu-5sKmvbOt3GgVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91576BB/2CC66D1EC72611F19022DA296111F970/7E351DDAC72611F18F117E456111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:a4:d0:c9:b6:cc:21:66:05:30:44:97:9c:08:6d:ad:c8:97:
         49:4f:71:41:1b:c8:cc:8a:2e:59:d6:f1:c3:f4:39:e9:cd:d4:
         44:76:da:3c:4b:77:3a:fd:51:34:0b:92:5a:61:7a:96:08:bf:
         06:bd:10:42:5c:9c:63:74:2b:3e:f3:d5:b6:da:84:8b:94:53:
         df:a3:c8:12:37:ac:21:75:07:93:af:69:ab:b2:77:cc:ca:d9:
         85:8c:c2:5d:c0:63:cb:7a:99:ca:1d:49:cb:34:b0:eb:42:c5:
         18:43:b4:03:cb:e1:90:12:35:df:12:99:03:11:80:69:55:46:
         71:d3:50:fe:2d:7d:8b:2d:60:56:70:82:42:c5:7b:e2:fa:ea:
         f8:25:43:40:3d:76:3d:5d:6c:71:bd:0b:a5:cf:a5:ab:16:6a:
         e6:57:fb:d8:1e:98:0d:fd:cf:cd:89:59:ad:8a:e8:ce:4e:b5:
         8c:37:0a:10:98:bd:56:c6:6e:24:fe:16:b0:dd:40:e0:25:c9:
         17:5a:c7:a6:ff:f5:c3:f2:e2:fa:74:b7:82:07:18:31:64:2d:
         2c:57:36:f5:d8:6e:d4:a6:0c:ce:18:b4:12:77:ce:ac:10:c5:
         62:ac:df:c6:6c:75:6b:79:8b:d3:5e:27:34:43:b6:98:7d:3f:
         f4:25:6e:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:08:24 2026 by rpki-client