Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/00926CA2D41F11F092947183C4F9AE02.roa
File:                     00926CA2D41F11F092947183C4F9AE02.roa (raw, json)
Hash identifier:          wqkUfeM+QKVS8qmAEVsiC5c7QZ1bu80LeTA1QCGTnpw=
Subject key identifier:   04:3D:73:E5:B4:58:F2:0D:36:4C:8E:25:D5:F0:2E:75:ED:D6:AE:3B
Certificate issuer:       /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
Certificate serial:       0114
Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/00926CA2D41F11F092947183C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:51:02 +0000
ROA not before:           Tue 09 Dec 2025 07:33:56 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        160.191.148.0/23 maxlen: 23
                          160.191.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl
                          rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 05:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
        Validity
            Not Before: Dec  9 07:33:56 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a595c6-61b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:d0:6c:bb:8f:67:55:c9:cd:6b:8b:cf:42:
                    53:74:ff:0a:a5:0c:0b:85:74:1c:98:b7:d6:f9:7a:
                    c0:91:a4:98:51:8c:7d:f4:3d:b0:c9:95:0d:8f:a8:
                    dc:d8:79:ba:b3:d7:ee:8c:81:72:a2:11:b2:12:75:
                    2f:d3:eb:21:22:dd:78:3e:b4:7b:06:7d:44:28:e5:
                    b1:5a:1a:60:32:a5:81:a9:43:5f:03:f5:59:ea:c6:
                    6f:26:a3:a6:95:63:b1:51:c3:db:c7:7e:53:5d:66:
                    b9:b8:79:33:84:a1:e7:ad:c0:d6:40:fe:64:42:83:
                    7d:0f:67:d0:d1:aa:b8:c2:32:00:36:29:98:1b:4b:
                    c7:cf:0a:f5:4f:8b:14:d3:ee:6b:46:8b:bb:80:1f:
                    6c:f5:57:f5:9e:d8:b5:6d:d1:88:93:6b:7a:75:86:
                    e0:ef:95:20:a3:38:0c:d9:d7:51:a0:90:65:7e:b0:
                    59:bf:27:ce:c3:51:9f:56:56:95:3e:52:a6:d7:60:
                    aa:bb:23:b3:57:a9:3a:bc:da:80:d0:3c:42:79:0a:
                    37:53:e2:df:b3:ca:4d:f9:de:e6:99:c6:47:d2:13:
                    76:5a:0e:12:f2:92:a1:36:3a:16:82:0d:43:54:fd:
                    9c:cf:53:b2:42:78:e5:8d:f8:67:de:83:17:bd:2f:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3D:73:E5:B4:58:F2:0D:36:4C:8E:25:D5:F0:2E:75:ED:D6:AE:3B
            X509v3 Authority Key Identifier:
                keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/00926CA2D41F11F092947183C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:84:ba:10:b6:f2:36:cd:3c:d8:31:49:44:32:76:3f:bb:85:
         a6:79:5e:86:37:e1:24:96:86:c1:2e:7b:b6:37:50:f9:d4:cc:
         02:5f:62:8f:bb:1e:99:86:e7:7e:0b:f6:97:84:25:bd:61:ca:
         43:91:cf:97:72:c2:16:c0:a8:99:ce:74:28:fb:fd:bb:3d:81:
         7e:2d:0d:44:3c:37:66:af:ea:94:31:60:85:12:66:c8:1a:04:
         d5:98:45:7a:7f:4b:d5:70:80:f2:61:06:e5:22:fa:9e:a8:78:
         09:3b:cf:06:e4:62:2e:2e:43:1e:35:c7:6b:a4:1b:3d:59:5d:
         f6:cf:4c:1d:2a:86:04:5c:55:3b:1c:fe:07:b6:0b:f6:0e:3a:
         c8:97:19:c0:4f:0f:22:cd:86:7a:50:d4:17:fb:55:98:95:c1:
         80:07:09:aa:03:90:68:ae:44:de:66:1a:c4:76:e5:66:10:54:
         4f:6e:16:18:b3:f8:f9:c6:14:43:c8:2e:45:f7:bb:20:d0:87:
         c1:7f:e7:00:23:4e:d3:68:91:21:2c:4a:57:d1:fc:fd:b9:e0:
         fb:34:64:25:7a:19:60:e2:5f:11:62:b5:ed:22:a2:2a:18:12:
         01:f7:a4:c2:75:af:11:03:c6:a8:25:9b:84:7a:0a:ae:68:aa:
         b2:59:10:ce
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBGMTExMTAvBgNVBAUTKDIxMUEwMjFFOEFCREY0REJGMjA3MDgyMjZDQzgzMjhG
RDI0MTMxREYwHhcNMjUxMjA5MDczMzU2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTVjNi02MWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3XzQbLuPZ1XJzWuLz0JTdP8KpQwLhXQcmLfW+XrAkaSYUYx99D2wyZUNj6jc
2Hm6s9fujIFyohGyEnUv0+shIt14PrR7Bn1EKOWxWhpgMqWBqUNfA/VZ6sZvJqOm
lWOxUcPbx35TXWa5uHkzhKHnrcDWQP5kQoN9D2fQ0aq4wjIANimYG0vHzwr1T4sU
0+5rRou7gB9s9Vf1nti1bdGIk2t6dYbg75UgozgM2ddRoJBlfrBZvyfOw1GfVlaV
PlKm12CquyOzV6k6vNqA0DxCeQo3U+Lfs8pN+d7mmcZH0hN2Wg4S8pKhNjoWgg1D
VP2cz1OyQnjljfhn3oMXvS9HJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAQ9c+W0
WPINNkyOJdXwLnXt1q47MB8GA1UdIwQYMBaAFCEaAh6KvfTb8gcIImzIMo/SQTHf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FMTYzODkxMDlB
N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9JUm9DSG9xOTlOdnlCd2dpYk1neWo5SkJN
ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lSb0NIb3E5OU52eUJ3Z2liTWd5ajlKQk1kOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzBGMTEvRTE2Mzg5MTA5QTdDMTFFRjg0OTUwRDMzQzRGOUFFMDIvMDA5MjZDQTJE
NDFGMTFGMDkyOTQ3MTgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoL+UMA0GCSqGSIb3DQEBCwUAA4IBAQC+hLoQtvI2zTzYMUlEMnY/
u4WmeV6GN+EklobBLnu2N1D51MwCX2KPux6Zhud+C/aXhCW9YcpDkc+XcsIWwKiZ
znQo+/27PYF+LQ1EPDdmr+qUMWCFEmbIGgTVmEV6f0vVcIDyYQblIvqeqHgJO88G
5GIuLkMeNcdrpBs9WV32z0wdKoYEXFU7HP4Htgv2DjrIlxnATw8izYZ6UNQX+1WY
lcGABwmqA5BorkTeZhrEduVmEFRPbhYYs/j5xhRDyC5F97sg0IfBf+cAI07TaJEh
LEpX0fz9ueD7NGQlehlg4l8RYrXtIqIqGBIB96TCda8RA8aoJZuEegquaKqyWRDO
-----END CERTIFICATE-----
Generated at Fri Mar 13 19:29:24 2026 by rpki-client