Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/24142938343C11EFA0165876C4F9AE02.roa
File:                     24142938343C11EFA0165876C4F9AE02.roa (raw, json)
Hash identifier:          Z0tUYsaLLhYR1loSuOnvSOEnvhlMPsdBTvhsEmSm5Ko=
Subject key identifier:   0E:E0:9A:97:5D:FE:49:01:D0:7C:A0:E1:6F:73:2F:E5:9B:8F:92:9D
Certificate issuer:       /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324
Certificate serial:       016A
Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/24142938343C11EFA0165876C4F9AE02.roa
Signing time:             Fri 15 May 2026 05:37:20 +0000
ROA not before:           Fri 15 May 2026 05:37:20 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152916
IP address blocks:        160.22.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324
        Validity
            Not Before: May 15 05:37:20 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a06b110-6c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:cd:b2:8f:a6:c0:20:20:03:6f:18:79:36:
                    ac:99:e8:99:3c:62:f0:c0:fa:c8:7c:e6:9a:bd:b6:
                    e9:f8:f5:ff:70:af:36:3b:d8:70:73:03:7a:84:be:
                    f0:19:b5:af:58:ee:28:51:8d:ed:a2:4a:98:65:13:
                    78:37:14:61:a6:7a:5d:3a:24:73:2f:24:d7:bc:bb:
                    6c:dc:26:a6:7a:71:68:9c:ec:84:fa:81:1a:92:3e:
                    3e:b1:8e:27:a2:e3:72:88:2e:cd:26:4a:11:be:2a:
                    60:89:af:24:6e:6c:8c:96:b2:fc:98:7a:53:34:fe:
                    b5:2f:1a:9e:0d:e7:a3:cd:5e:d5:12:4a:0f:a5:31:
                    dc:36:42:34:42:99:54:a6:e4:81:f5:ed:f6:21:26:
                    05:cb:07:87:36:8a:a7:46:ed:73:56:67:6d:35:ab:
                    a8:b7:65:73:ed:ae:ea:8a:37:a5:0e:45:c3:91:b8:
                    ce:51:06:0b:c8:1d:62:7f:11:17:58:4c:ba:c6:86:
                    9d:00:6d:81:46:ac:48:15:43:76:17:18:b0:93:89:
                    18:d3:2a:6a:10:ca:a4:da:76:59:8a:6f:aa:b7:91:
                    2b:f5:e1:e2:b7:2b:02:3b:50:0c:c9:b0:68:16:1a:
                    5b:92:cf:6d:0f:8e:58:1f:4b:33:67:6c:3e:2d:b7:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E0:9A:97:5D:FE:49:01:D0:7C:A0:E1:6F:73:2F:E5:9B:8F:92:9D
            X509v3 Authority Key Identifier:
                keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/24142938343C11EFA0165876C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:f1:8f:1b:09:48:4a:ce:80:73:b9:33:93:05:40:ae:43:41:
         d4:d9:99:7e:ba:a3:99:70:e0:d0:e9:45:44:0c:2b:20:50:7d:
         21:99:57:3c:9b:e1:89:76:3a:dd:7d:48:e0:48:e1:d6:08:25:
         66:76:e7:fc:d2:68:fe:fc:86:0f:4e:d9:a5:fb:92:0a:db:21:
         ca:2b:49:57:9f:ee:b7:c2:aa:37:c7:9b:64:cb:94:ac:56:ca:
         99:ca:58:07:f9:77:8b:2b:c1:73:ef:bf:4c:92:87:db:4e:42:
         2a:9c:30:36:bf:e3:f3:7b:e0:e2:97:b3:01:77:a4:5d:dc:10:
         03:b7:fd:f7:14:3e:4b:d5:66:1c:05:b1:2e:66:e3:d5:aa:ec:
         21:3a:56:2e:b8:1a:b5:31:d7:00:e9:da:0f:03:1b:52:8f:79:
         37:05:a1:74:46:68:08:87:c6:96:70:30:ab:4f:f6:e0:52:a6:
         b7:4e:3c:f9:ae:5e:34:5f:e3:6c:e8:1d:c6:0e:9b:df:48:64:
         d2:f4:9f:46:38:03:f2:22:36:60:d2:45:30:0d:15:e8:19:0e:
         1d:b3:ef:95:b2:5c:af:b8:da:b2:d0:dd:9a:10:85:54:01:81:
         df:08:fc:2c:7f:23:94:47:8d:39:1b:2b:c8:0d:a8:f6:28:a1:
         67:d2:1d:e1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0
NjU0MTQzMjQwHhcNMjYwNTE1MDUzNzIwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTA2YjExMC02Yzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnCrNso+mwCAgA28YeTasmeiZPGLwwPrIfOaavbbp+PX/cK82O9hwcwN6hL7w
GbWvWO4oUY3tokqYZRN4NxRhpnpdOiRzLyTXvLts3CamenFonOyE+oEakj4+sY4n
ouNyiC7NJkoRvipgia8kbmyMlrL8mHpTNP61LxqeDeejzV7VEkoPpTHcNkI0QplU
puSB9e32ISYFyweHNoqnRu1zVmdtNauot2Vz7a7qijelDkXDkbjOUQYLyB1ifxEX
WEy6xoadAG2BRqxIFUN2Fxiwk4kY0ypqEMqk2nZZim+qt5Er9eHitysCO1AMybBo
Fhpbks9tD45YH0szZ2w+LbedHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA7gmpdd
/kkB0Hyg4W9zL+Wbj5KdMB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0
MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzc0RkIvNzg5N0Y4MTYzNDM5MTFFRjlDM0QyMTNFQzRGOUFFMDIvMjQxNDI5Mzgz
NDNDMTFFRkEwMTY1ODc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBaiMA0GCSqGSIb3DQEBCwUAA4IBAQA78Y8bCUhKzoBzuTOTBUCu
Q0HU2Zl+uqOZcODQ6UVEDCsgUH0hmVc8m+GJdjrdfUjgSOHWCCVmduf80mj+/IYP
Ttml+5IK2yHKK0lXn+63wqo3x5tky5SsVsqZylgH+XeLK8Fz779MkofbTkIqnDA2
v+Pze+Dil7MBd6Rd3BADt/33FD5L1WYcBbEuZuPVquwhOlYuuBq1MdcA6doPAxtS
j3k3BaF0RmgIh8aWcDCrT/bgUqa3Tjz5rl40X+Ns6B3GDpvfSGTS9J9GOAPyIjZg
0kUwDRXoGQ4ds++VslyvuNqy0N2aEIVUAYHfCPwsfyOUR405GyvIDaj2KKFn0h3h
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:16 2026 by rpki-client