Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/88B4A746725111F189F604128DA30FBC.roa
File:                     88B4A746725111F189F604128DA30FBC.roa (raw, json)
Hash identifier:          /emz37e0m2LLZWcMUqkDepflFN5315Y0u/7biRL6nWA=
Subject key identifier:   CF:A4:3B:49:9C:92:2C:C1:97:77:2B:20:3C:88:03:62:37:FA:0D:C0
Certificate issuer:       /CN=A91729D4/serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
Certificate serial:       02
Authority key identifier: AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/88B4A746725111F189F604128DA30FBC.roa
Signing time:             Sat 27 Jun 2026 17:56:34 +0000
ROA not before:           Sat 27 Jun 2026 17:56:34 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136396
IP address blocks:        160.236.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl
                          rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 10:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91729D4, serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
        Validity
            Not Before: Jun 27 17:56:34 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a400ed2-17ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:93:1a:3c:41:c5:b9:6f:94:f0:bc:fe:ff:
                    19:7b:4d:b2:b8:d6:2d:8a:ba:15:1d:68:15:3b:df:
                    8d:98:4e:86:e7:e6:0a:df:54:71:93:35:f9:35:92:
                    4b:91:97:49:3b:22:e1:c7:b3:56:91:5a:5c:6b:2b:
                    f5:70:22:df:0c:11:22:ef:9e:93:54:03:43:34:0b:
                    df:de:93:23:83:53:89:b4:c2:5e:74:e0:52:71:a9:
                    73:eb:d7:be:d6:af:a5:61:0d:81:f6:98:74:ae:20:
                    b0:bd:2f:c6:34:f4:e5:8c:64:eb:c1:4b:48:f8:a0:
                    a1:71:b1:31:d5:72:b3:9f:1d:70:06:3d:9e:af:96:
                    5c:d7:17:f1:14:f3:19:0f:4c:b8:e4:44:42:64:7c:
                    83:6d:8a:26:a0:47:49:4d:a2:16:c6:22:45:b4:5c:
                    e7:82:e1:69:1d:36:54:83:9b:cb:16:d6:01:aa:9a:
                    ed:9c:bc:a1:37:9e:d1:65:72:ac:50:e2:b4:c1:ee:
                    6c:ed:a6:77:bb:9f:f9:50:3c:8e:da:99:1d:9b:18:
                    e4:52:05:b9:7f:79:de:1d:fb:0d:38:7c:5d:41:a1:
                    ff:02:59:52:16:7b:fd:e3:50:ec:b6:97:85:08:fe:
                    f7:ef:0b:29:e6:a4:06:5c:5d:f1:0e:09:0e:b7:a3:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A4:3B:49:9C:92:2C:C1:97:77:2B:20:3C:88:03:62:37:FA:0D:C0
            X509v3 Authority Key Identifier:
                keyid:AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/88B4A746725111F189F604128DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:44:d4:29:6d:5a:8f:82:35:4c:b4:7b:b1:8d:0f:cc:9f:7c:
         72:71:e3:38:20:49:19:14:bc:81:ec:63:8d:89:f7:82:95:52:
         e8:fa:db:24:4d:55:64:f0:1d:f2:cc:d9:ee:48:6c:dd:98:71:
         16:41:67:bf:b9:64:e1:8b:89:1b:ad:aa:36:db:af:ca:48:a7:
         87:70:41:55:04:ee:a9:41:77:c1:5f:ba:08:33:3b:da:be:f2:
         51:d4:53:86:16:bd:c5:ab:f6:e2:a9:2a:8d:2e:f5:b9:d0:5b:
         06:ce:9e:85:dc:ed:23:3f:1b:39:fd:a6:39:f0:e7:8b:4b:40:
         43:69:40:f2:a5:bc:f8:7f:62:72:33:66:22:fe:21:6c:b8:b9:
         bd:3d:2c:26:8d:45:ce:c5:9a:83:4d:c0:14:7d:2c:68:6c:f5:
         54:1c:ab:34:be:a9:ed:94:93:32:7b:67:48:ab:35:65:af:ef:
         a5:a0:34:97:c2:2f:f1:b4:4d:ae:21:95:da:3a:18:97:f3:04:
         d6:6a:d3:77:25:ca:dd:83:fa:2a:29:60:e1:36:61:78:68:a6:
         a3:e3:60:1a:2d:b5:8d:b1:fc:20:e6:a9:13:01:ac:54:7a:34:
         74:98:2d:62:aa:6d:df:77:aa:e0:a3:02:2a:c4:a6:81:52:a0:
         80:32:d6:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 10 23:40:30 2026 by rpki-client