Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/2D52500E7B9A11F197E2363C71A30FBC.roa
File:                     2D52500E7B9A11F197E2363C71A30FBC.roa (raw, json)
Hash identifier:          o5xPauFaUQy8rVXgIB04IjGSZaP2lq1u5QSKCq0PT8U=
Subject key identifier:   F9:62:B4:E1:E4:54:42:3E:23:66:4D:19:50:86:04:18:32:B2:96:20
Certificate issuer:       /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial:       0166
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/2D52500E7B9A11F197E2363C71A30FBC.roa
Signing time:             Thu 09 Jul 2026 13:29:14 +0000
ROA not before:           Thu 09 Jul 2026 13:29:14 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153365
IP address blocks:        160.191.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
                          rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
        Validity
            Not Before: Jul  9 13:29:14 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a4fa22a-57a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:aa:e3:78:dc:43:4d:d0:ae:e0:12:76:f4:
                    53:ea:65:44:fd:3c:66:98:67:ee:53:49:56:c1:a2:
                    10:8b:a5:d6:db:4b:e7:39:56:31:4a:7c:1d:39:88:
                    bf:02:74:b9:85:0b:60:e3:54:f4:cc:d4:64:44:97:
                    e5:b8:9e:4c:43:5e:1a:44:88:28:8a:81:8a:44:f2:
                    f7:75:a8:fd:67:28:8a:f4:6b:97:f5:f7:df:1e:7d:
                    ae:5d:f1:81:fc:a3:10:2c:ce:4d:38:a3:50:b6:91:
                    f1:f4:c6:46:1a:67:52:3f:cf:6d:bb:38:7f:cb:48:
                    d0:b3:9b:49:8a:91:ff:00:ea:ed:95:68:16:a5:91:
                    75:3e:9a:5c:4f:b5:7a:e8:f8:b3:54:90:16:50:93:
                    76:43:9c:0b:89:81:21:86:2f:22:97:83:c8:14:26:
                    a1:79:df:f5:c3:3c:59:32:7e:99:2c:74:c7:27:46:
                    c7:b4:6f:47:ea:9f:36:15:3b:86:52:9c:c1:75:33:
                    65:84:88:3f:03:ff:d0:9d:83:49:24:98:e1:a6:e8:
                    99:4a:be:d2:fa:28:2b:96:d4:1a:46:a4:06:3a:39:
                    e1:cc:a4:98:a0:22:99:27:f3:98:34:b4:69:6e:57:
                    34:9d:81:68:28:c7:4b:d4:bd:64:15:e9:f1:62:88:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:62:B4:E1:E4:54:42:3E:23:66:4D:19:50:86:04:18:32:B2:96:20
            X509v3 Authority Key Identifier:
                keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/2D52500E7B9A11F197E2363C71A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:cd:14:92:0e:68:5b:50:6e:8a:8f:21:a2:bd:e4:b9:d7:
         69:9a:92:ae:dd:1c:87:62:4f:82:fa:2a:8f:b5:4c:cb:e7:18:
         e9:72:63:61:56:56:db:96:75:0d:80:47:cc:e9:d6:59:2a:ef:
         77:df:f7:b0:e7:8f:77:76:9b:c5:03:74:58:cd:d2:1a:58:dc:
         ac:bb:fc:52:da:48:31:0c:1f:bb:09:01:02:e9:8d:74:44:33:
         b0:99:79:50:af:93:1a:50:14:b0:1d:fc:ce:e1:a1:ea:de:4c:
         e1:6f:56:f6:c8:28:6e:84:88:94:a7:cd:ff:80:a5:1d:8a:1d:
         0a:68:d1:31:02:cb:35:0d:42:a8:85:ef:36:16:1d:a5:9e:40:
         81:af:a6:48:60:49:dd:30:fb:a3:ac:33:5f:1f:3f:78:fd:0c:
         59:8b:48:e2:3f:d6:37:17:d9:da:c3:42:92:a4:54:87:13:f2:
         3b:8e:60:84:c4:ed:3a:ad:ed:b2:28:ee:6a:81:ad:84:21:82:
         2b:1e:0a:d2:ad:4a:7b:4e:a6:02:32:a2:36:ec:8b:26:1f:97:
         1e:9e:4f:33:d8:9b:2e:ee:15:60:24:99:43:ca:04:f5:ec:76:
         b0:43:c2:2b:73:b1:51:82:7d:9b:b1:5e:16:6f:26:89:92:79:
         f8:44:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:19:24 2026 by rpki-client