Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/43749A72824E11F0A1C4B018C4F9AE02.roa
File:                     43749A72824E11F0A1C4B018C4F9AE02.roa (raw, json)
Hash identifier:          KSDxonhKP2R/jFXcwFf/p6d4f1Qwk//gYks77lT8Zqc=
Subject key identifier:   AA:F4:EB:32:37:9A:0C:C3:62:CB:06:11:90:FF:88:66:90:A4:5A:84
Certificate issuer:       /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial:       0177
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/43749A72824E11F0A1C4B018C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 06:54:52 +0000
ROA not before:           Mon 03 Aug 2026 06:54:52 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     149296
IP address blocks:        160.30.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
        Validity
            Not Before: Aug  3 06:54:52 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a703b3c-0f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:7f:0e:d2:58:f7:be:d6:a3:41:5b:e6:ad:
                    73:26:ea:89:aa:d2:f8:fd:3e:1d:22:fb:a4:f9:13:
                    d3:57:ee:96:af:88:1c:62:38:57:6b:6c:b8:d2:9f:
                    b0:b2:7f:14:af:ba:53:0e:1f:ba:08:20:18:b9:32:
                    00:a3:59:3b:05:64:a5:4b:cd:f5:b1:31:d3:33:2c:
                    02:89:91:99:70:36:29:55:75:40:c3:28:04:c2:1e:
                    59:fa:07:86:45:af:95:fb:bf:7f:d2:50:9a:65:08:
                    46:8b:95:96:4b:4c:e6:62:fd:6e:97:91:49:ad:e5:
                    47:10:76:5d:0a:dd:a2:33:3b:f1:17:37:a5:b7:ad:
                    87:68:33:fc:33:3d:eb:1a:10:73:c3:07:e2:98:e1:
                    5a:e4:b5:55:7f:bc:b1:fa:f9:be:a5:ea:3f:13:a3:
                    c1:2a:46:50:4c:74:fc:4f:4d:4f:ab:81:1d:d6:9e:
                    4e:ab:bf:f8:62:21:34:40:f0:df:3a:3c:b6:e1:08:
                    f7:dd:b1:e2:77:1f:04:63:4f:da:be:7b:b6:d5:fd:
                    2d:23:93:e5:8d:b6:54:7a:1e:36:78:2d:5d:73:9f:
                    d5:87:c2:61:68:aa:a2:83:74:e8:4b:34:53:60:0f:
                    50:95:8d:7f:b5:76:c0:3e:dc:bd:d6:3a:3f:f2:0d:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F4:EB:32:37:9A:0C:C3:62:CB:06:11:90:FF:88:66:90:A4:5A:84
            X509v3 Authority Key Identifier:
                keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/43749A72824E11F0A1C4B018C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:73:a1:46:fa:db:9c:45:a2:b9:bb:9c:39:32:d9:ee:5a:bb:
         96:e8:bb:d0:ff:08:8f:3b:97:be:28:42:24:7a:e2:9c:17:e3:
         47:7e:8c:8a:d1:4f:da:5a:80:5f:02:80:38:3a:de:00:ad:5f:
         94:82:71:57:b6:a6:5d:a4:c0:14:6b:9d:4b:ea:9f:55:90:32:
         a6:a7:ad:d2:51:16:8f:51:6a:5f:8f:64:fc:05:20:fb:31:41:
         85:d4:69:f4:5f:94:7b:4d:bf:20:71:43:45:73:96:c0:1e:92:
         fc:22:ec:70:05:b8:df:fd:b4:13:aa:cb:05:32:16:0c:fc:74:
         df:81:b0:17:59:ab:f2:9f:38:cd:2e:f7:a3:7e:ac:e6:07:ae:
         45:21:d8:47:42:43:78:2d:15:96:aa:df:72:5f:29:0a:57:9d:
         c1:2d:5d:08:02:7e:59:ae:b5:cb:c5:79:eb:2a:9a:f0:b2:11:
         5a:7c:8b:de:4f:35:9b:19:8f:f8:9d:ee:85:1a:3d:eb:a8:a9:
         26:13:9f:97:13:b1:48:65:74:ed:c9:df:60:68:b2:f3:98:b5:
         ef:c0:96:2d:3b:7b:3e:6e:db:2a:da:74:e9:86:f3:79:3b:22:
         a9:6e:0f:f1:3a:4a:54:9e:c0:1b:e6:3f:12:9c:82:c8:c2:96:
         67:69:f3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:31:36 2026 by rpki-client