Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/710FB354979E11EF99310B40C4F9AE02.roa
File:                     710FB354979E11EF99310B40C4F9AE02.roa (raw, json)
Hash identifier:          ibwxeVeyVQI+vvw7bXSGLT3jfkcETuhidGMFVe0e+w0=
Subject key identifier:   B4:FE:BB:C1:8B:27:BC:E0:50:23:9B:AC:5D:80:30:79:BB:79:81:DB
Certificate issuer:       /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
Certificate serial:       0198
Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/710FB354979E11EF99310B40C4F9AE02.roa
Signing time:             Tue 25 Aug 2026 04:55:11 +0000
ROA not before:           Tue 25 Aug 2026 04:55:11 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137425
IP address blocks:        160.30.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl
                          rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Sep 2026 04:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
        Validity
            Not Before: Aug 25 04:55:11 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8d202f-bcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:1b:2a:3d:57:61:c9:da:6f:24:a6:5c:91:
                    9c:95:04:ef:ab:ea:f8:1d:b4:81:0f:c7:ff:3c:4b:
                    51:cc:f6:75:3a:98:ad:88:c5:a4:10:ba:8e:78:a1:
                    27:51:9e:58:dc:5c:e5:95:ff:fd:c8:79:94:44:41:
                    37:e8:03:2d:73:ef:05:47:fb:b4:31:94:68:c1:85:
                    2c:f3:05:93:31:7a:85:ab:3c:cc:d9:5a:83:c9:dd:
                    16:83:50:d6:d9:c7:6d:85:51:44:ee:12:89:6f:44:
                    ec:91:3b:52:75:f9:0a:c4:b6:11:5c:5b:a2:db:b4:
                    c8:e2:22:7c:26:e9:a0:95:9e:fb:ed:c1:ea:f8:66:
                    94:35:c8:33:76:29:71:01:62:99:cf:eb:e3:36:ba:
                    46:9d:67:7b:8f:d3:27:6a:5c:b3:a9:cb:4c:3a:0b:
                    47:38:c6:86:f1:51:fc:59:0e:f1:82:8c:ea:00:29:
                    3f:6d:09:f9:81:be:19:1c:65:67:0c:ae:ab:60:91:
                    18:8f:e8:e7:87:ff:f8:56:eb:f9:a0:f6:83:ca:c8:
                    2e:b0:e2:b8:b0:73:40:17:da:e4:2e:e3:c8:69:4b:
                    f6:19:ae:a6:0c:b1:f8:4a:be:bd:4c:83:ae:72:20:
                    08:ec:b6:53:e8:6f:eb:be:11:95:0c:62:d9:3c:14:
                    ec:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:BB:C1:8B:27:BC:E0:50:23:9B:AC:5D:80:30:79:BB:79:81:DB
            X509v3 Authority Key Identifier:
                keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/710FB354979E11EF99310B40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:2d:60:37:69:af:54:fd:ad:9a:d6:3f:da:c3:c0:a5:ce:28:
         04:54:17:28:50:d9:d0:cf:cc:cd:8b:c1:62:f3:60:71:db:5a:
         18:98:e9:0a:b3:9c:9f:97:d1:7f:1e:10:3f:29:3a:92:0b:79:
         44:83:3c:13:6e:fa:b7:28:57:06:20:1e:74:ba:86:c6:b2:4c:
         24:36:db:29:85:a1:b1:08:37:a8:12:5f:79:e3:2a:63:b6:28:
         62:10:5e:95:31:21:43:b4:2a:80:9e:68:c3:ca:71:6d:60:6c:
         e4:bf:7b:ba:85:58:b5:f4:d7:f1:b6:d2:ba:17:03:e5:97:6f:
         c5:c4:8f:5b:81:e5:c9:65:7d:32:f9:21:5c:e2:0a:b9:c9:99:
         69:5b:c7:4c:1d:ba:63:40:d0:b9:1f:bf:ed:51:cc:1a:1b:aa:
         01:6f:09:b8:b0:b1:20:5d:e9:53:b0:9c:0a:45:aa:7c:28:69:
         0b:eb:cc:f7:50:4c:c7:46:2a:76:9d:85:08:a1:15:2a:02:f1:
         ec:2a:24:a3:c7:3a:17:09:c3:22:d1:68:bf:9a:bb:2f:08:63:
         58:a7:be:28:fa:79:56:6e:c6:f3:87:e8:e8:35:70:63:59:b8:
         2c:c9:6d:0a:21:3f:21:5b:5c:74:71:57:ef:3c:78:87:94:92:
         84:18:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 00:00:37 2026 by rpki-client