Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/11EDA7247B9911F1BB32141471A30FBC.roa
File:                     11EDA7247B9911F1BB32141471A30FBC.roa (raw, json)
Hash identifier:          zPYAAtF0kUrwJ6H9nU5ZWghq1nBENFO601UHGK50Xgs=
Subject key identifier:   73:7C:2F:B6:1F:C5:E5:A6:26:A7:1A:D1:EB:3E:E7:0B:0E:17:AB:C7
Certificate issuer:       /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial:       0162
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/11EDA7247B9911F1BB32141471A30FBC.roa
Signing time:             Thu 09 Jul 2026 13:21:19 +0000
ROA not before:           Thu 09 Jul 2026 13:21:19 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150718
IP address blocks:        160.191.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
                          rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
        Validity
            Not Before: Jul  9 13:21:19 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a4fa04e-0440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b7:8d:72:01:54:9d:02:6e:28:72:1f:b9:fd:
                    f2:3d:1a:2d:54:eb:a4:a0:0f:0b:9a:b4:db:61:a0:
                    99:fe:c4:6b:e4:6f:7b:eb:b7:09:d5:a7:1b:09:dc:
                    fb:d1:64:f1:d8:76:e9:af:49:58:e5:5f:c1:e6:c4:
                    b8:02:30:f2:e0:06:8f:ea:5a:b1:ca:b4:70:20:b1:
                    1b:77:53:99:ff:03:72:86:5b:9b:ef:b3:cd:5b:3f:
                    6c:3e:5d:3a:0f:1b:8e:29:2e:51:f1:a5:6e:60:d8:
                    88:35:4a:ea:52:26:f9:39:a9:8e:af:2f:d0:41:2e:
                    99:89:9b:07:7b:b9:04:ce:ff:5c:74:35:ad:45:59:
                    58:bf:e1:f9:aa:af:90:60:c2:c0:69:eb:5a:16:64:
                    0c:9a:73:45:dd:01:67:12:a8:d3:ad:11:49:87:fc:
                    43:c3:14:7d:1d:74:0f:d4:59:37:36:0e:b4:a0:d4:
                    0a:61:fc:df:2e:ff:4d:37:7a:d4:da:33:2c:c8:7e:
                    68:b4:47:b2:09:fb:9d:59:be:a1:7e:32:7b:89:45:
                    6c:ab:ae:3e:d5:80:e4:18:6e:f7:b6:07:ac:74:35:
                    23:ad:aa:1c:51:83:59:45:40:d8:4d:2c:cc:ec:55:
                    ca:dc:c2:df:c9:9f:a6:0c:f1:2e:db:8c:32:a4:25:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7C:2F:B6:1F:C5:E5:A6:26:A7:1A:D1:EB:3E:E7:0B:0E:17:AB:C7
            X509v3 Authority Key Identifier:
                keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/11EDA7247B9911F1BB32141471A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a3:a7:dc:07:05:00:f2:8a:4a:85:a0:56:92:16:16:43:c5:
         97:d2:eb:10:db:cd:a9:03:89:60:39:f3:b3:8c:6b:86:51:d7:
         d0:cb:71:f0:c7:0f:5b:10:d7:e9:7f:87:bb:b0:bd:43:08:a7:
         23:c4:89:36:a5:d6:6c:59:da:30:82:11:8a:4a:d3:46:7e:65:
         b4:e5:dc:de:48:d7:49:d1:4f:26:3f:7d:3b:5e:53:d1:64:f0:
         46:34:a1:e8:80:29:ef:87:15:1f:db:42:d1:3c:48:c1:fb:4f:
         85:31:49:3f:cb:9e:91:b3:36:80:a1:62:7c:5d:5a:9a:b6:b3:
         7f:45:a8:a4:03:6b:80:e5:30:97:c7:d8:35:f8:57:f3:da:b2:
         65:f2:ca:63:50:4e:45:f3:e7:1e:53:be:f0:fa:b1:11:dd:36:
         e1:2b:73:53:53:55:99:63:a1:2b:18:91:6b:4b:d5:6e:7d:a9:
         c8:a4:61:a2:f7:aa:ac:eb:11:8e:12:78:d2:01:09:59:e2:36:
         1b:4e:72:1c:53:28:f3:d9:86:d5:b4:35:c9:e4:e5:67:df:cd:
         c9:25:65:9b:48:7d:96:f1:76:65:22:ad:f1:38:1c:a6:02:3c:
         9b:fb:da:2b:89:fd:ba:6f:34:81:fd:41:51:f5:f6:5f:4a:5f:
         16:25:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:19:24 2026 by rpki-client