Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa
File:                     D4BAE68E853311F0AC0D4852C4F9AE02.roa (raw, json)
Hash identifier:          dguyqJJlfQdrZxS7gBVnP+fhLGVgFc3v59CnlE7InbE=
Subject key identifier:   16:2A:17:FB:14:0E:E4:72:81:5D:C7:E1:0B:04:92:4F:D3:AF:E6:41
Certificate issuer:       /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial:       012B
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:33:25 +0000
ROA not before:           Sat 25 Oct 2025 09:49:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141342
IP address blocks:        160.30.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
                          rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
        Validity
            Not Before: Oct 25 09:49:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a58395-528b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:18:35:d7:f9:b6:7e:d5:b0:8c:d4:86:52:
                    2a:46:44:03:fc:5f:87:dd:e2:7b:2a:5b:6e:06:2f:
                    1c:21:fc:43:b7:db:b9:25:b7:1d:14:12:f2:ce:5e:
                    0d:ef:a7:97:ce:42:f7:8a:6c:f4:c5:a4:75:40:b0:
                    d7:75:c5:8c:37:6a:11:c4:eb:08:80:52:06:ff:ef:
                    bd:7e:9a:74:27:24:fd:08:2c:bd:ce:d9:dd:48:c7:
                    ab:f4:d1:47:1c:bc:1c:eb:30:b4:03:2b:15:54:87:
                    f2:8a:66:d0:ae:25:2d:2b:85:6f:72:f3:a6:f8:57:
                    94:94:b0:fe:66:76:3d:8a:a1:70:4d:17:f2:80:41:
                    55:08:d4:10:74:11:87:50:37:a7:4a:5a:a7:50:32:
                    56:73:76:1d:d8:59:b4:06:0a:68:98:03:c5:84:68:
                    d3:e8:96:f8:0c:89:15:c2:36:14:7a:14:59:cd:3e:
                    44:29:73:56:21:fd:da:1f:88:d8:16:5a:61:31:10:
                    0a:95:78:73:3d:51:3a:43:64:d2:54:3d:e8:c7:48:
                    f5:ad:38:bb:73:4c:ef:b2:23:e5:4a:ad:13:96:2b:
                    42:aa:da:36:c6:2b:81:60:2b:cd:21:ff:cf:d7:fd:
                    fd:e4:47:c2:e0:d7:0e:7d:70:8b:e0:d4:ef:79:17:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2A:17:FB:14:0E:E4:72:81:5D:C7:E1:0B:04:92:4F:D3:AF:E6:41
            X509v3 Authority Key Identifier:
                keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:da:23:de:79:f2:d6:dd:46:4b:b6:04:67:61:19:85:c2:65:
         c3:ba:37:8b:13:07:8e:c4:23:27:6d:ef:fa:88:d9:3c:b6:d7:
         f7:a2:99:a4:5b:05:98:d4:7b:df:ea:30:8d:8f:11:9b:7b:b8:
         99:53:5f:5a:8a:91:03:b9:a6:90:f6:ed:a1:06:2b:8a:19:a0:
         ef:c5:cd:83:ae:21:57:17:de:fd:ee:ad:bc:29:27:9f:e5:47:
         ca:86:a1:fd:6e:fc:af:c5:2b:56:bd:c6:dd:88:1a:ab:ce:b1:
         8e:d7:15:bc:96:f0:b6:32:aa:39:ce:47:4b:5c:77:d1:08:bd:
         29:2a:9e:6b:6c:91:3e:c5:96:b4:4e:0e:14:82:1b:e6:87:ff:
         ce:51:27:df:8c:36:88:a8:21:3c:c5:38:32:4a:51:99:75:f3:
         93:e9:2a:67:8c:97:78:25:0c:9d:61:96:da:d1:7d:ff:8e:57:
         69:a7:a3:4f:ec:01:fb:a3:48:fc:da:bb:1c:31:40:52:8c:e3:
         de:93:68:46:62:6d:e6:55:2b:51:89:0f:b6:59:c9:bb:98:71:
         3f:f6:e7:8e:b6:7c:c7:47:6c:06:a8:e6:04:44:b6:47:f0:1a:
         b4:5e:a4:0b:7c:5d:4d:92:93:10:f8:62:5b:fe:55:5d:71:55:
         42:49:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:04:40 2026 by rpki-client