Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/3E4867CC86DC11EFA6022627C4F9AE02.roa
File:                     3E4867CC86DC11EFA6022627C4F9AE02.roa (raw, json)
Hash identifier:          oEyX+N8POVIt0NPqCPVZb7yBeCptqcWugjG7I1xvlZc=
Subject key identifier:   03:07:96:69:A7:7D:57:4E:06:D7:74:B8:32:75:40:D3:1F:C0:3B:33
Certificate issuer:       /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial:       010E
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/3E4867CC86DC11EFA6022627C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:15:42 +0000
ROA not before:           Sat 25 Oct 2025 09:50:01 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153193
IP address blocks:        160.30.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
                          rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
        Validity
            Not Before: Oct 25 09:50:01 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a59b8e-235e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:c1:f4:a6:93:38:63:f7:7a:9d:2f:dd:f6:
                    e0:2a:09:f6:b2:14:f8:c0:98:f1:57:12:f5:dd:4f:
                    75:1e:ba:ff:6a:0b:df:2f:98:b3:e5:1b:fe:6d:1c:
                    d9:92:c3:ff:61:93:b0:f5:83:ab:67:49:d1:42:53:
                    f4:a8:3f:94:1a:e2:4c:a4:eb:00:e0:f8:46:a8:51:
                    14:3a:6b:78:45:df:f7:05:76:05:63:7a:b5:4e:2c:
                    4b:47:2e:0f:99:b8:95:04:31:f2:a3:6d:81:8a:74:
                    45:2f:28:c5:3c:95:aa:ac:60:d7:3d:ce:4e:f4:93:
                    e6:e6:ce:2a:48:47:c6:74:86:dd:9b:fd:0e:3b:78:
                    3d:91:04:8f:99:ec:35:fd:7a:9b:e0:b5:56:21:d1:
                    0e:e2:11:11:19:e6:95:f5:5f:fd:ed:52:4f:45:98:
                    de:f6:fe:02:43:40:de:b5:91:9c:59:fc:07:4f:a2:
                    a9:f4:3c:f7:24:af:3e:44:f8:7d:5d:2b:63:b0:59:
                    c2:81:4d:7c:9c:47:eb:5b:04:93:51:7b:47:3f:3f:
                    68:88:c1:9b:46:92:22:8a:2d:0c:77:fc:9c:fc:85:
                    06:39:88:26:4b:a8:2e:35:8d:90:0c:97:7d:f2:44:
                    5e:15:76:d3:36:a2:e8:6f:ac:9d:03:bf:3b:e8:58:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:07:96:69:A7:7D:57:4E:06:D7:74:B8:32:75:40:D3:1F:C0:3B:33
            X509v3 Authority Key Identifier:
                keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/3E4867CC86DC11EFA6022627C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:b2:8e:42:e2:8a:ea:68:6a:31:52:f0:f7:71:51:8a:3b:f9:
         70:6b:90:de:d6:23:eb:94:eb:ef:18:12:2b:b4:a0:73:60:27:
         19:5d:1d:3e:b7:5a:70:b7:01:ce:f4:a6:d4:3b:c0:34:ff:ab:
         22:0d:0e:2c:33:17:b0:87:aa:d0:03:d8:eb:59:43:10:3b:cb:
         ca:fe:52:82:e1:68:7f:46:67:20:c9:9f:15:8e:7a:a8:a1:26:
         73:79:99:c9:f9:58:5f:13:7c:93:d9:03:80:de:75:9d:a4:69:
         ec:78:41:85:94:e1:20:01:ce:b3:36:44:fd:d4:30:e2:1b:ec:
         8e:7e:68:ba:83:50:b4:59:84:a1:2c:89:a2:91:2b:47:8b:c7:
         9e:01:4c:66:60:2e:2c:ca:0d:3d:fd:c5:75:86:c2:c5:8c:07:
         23:6b:6d:f4:ba:cf:7f:16:62:4e:d3:ca:73:9a:dd:9e:95:3e:
         00:e4:4a:8a:c2:4a:2c:73:a9:44:44:ff:77:67:dd:cb:06:b9:
         68:68:7c:fe:77:5f:43:59:bc:53:55:e9:ce:fe:28:b3:d4:72:
         1b:a6:e2:de:7e:79:e4:7c:79:06:c6:56:81:cf:91:a5:58:3d:
         36:fd:2e:e7:0c:e8:21:c6:c7:11:20:11:b6:87:f0:ce:5d:03:
         73:73:7d:23
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I2MzMxMTAvBgNVBAUTKDEzRDdBMTNCNDIzQkI2RTg3QTFBNzVCNzQ5M0YwQkMx
OUQwQ0VBQTMwHhcNMjUxMDI1MDk1MDAxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWI4ZS0yMzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0DB9KaTOGP3ep0v3fbgKgn2shT4wJjxVxL13U91Hrr/agvfL5iz5Rv+bRzZ
ksP/YZOw9YOrZ0nRQlP0qD+UGuJMpOsA4PhGqFEUOmt4Rd/3BXYFY3q1TixLRy4P
mbiVBDHyo22BinRFLyjFPJWqrGDXPc5O9JPm5s4qSEfGdIbdm/0OO3g9kQSPmew1
/Xqb4LVWIdEO4hERGeaV9V/97VJPRZje9v4CQ0DetZGcWfwHT6Kp9Dz3JK8+RPh9
XStjsFnCgU18nEfrWwSTUXtHPz9oiMGbRpIiii0Md/yc/IUGOYgmS6guNY2QDJd9
8kReFXbTNqLob6ydA7876FiEGQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAMHlmmn
fVdOBtd0uDJ1QNMfwDszMB8GA1UdIwQYMBaAFBPXoTtCO7boehp1t0k/C8GdDOqj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EMEFCOTNFNDg2
RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1aDZHblczU1Q4THdaME02
cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0I2MzMvRDBBQjkzRTQ4NkQ5MTFFRjhCOEJFQjFGQzRGOUFFMDIvM0U0ODY3Q0M4
NkRDMTFFRkE2MDIyNjI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB5AMA0GCSqGSIb3DQEBCwUAA4IBAQBCso5C4orqaGoxUvD3cVGK
O/lwa5De1iPrlOvvGBIrtKBzYCcZXR0+t1pwtwHO9KbUO8A0/6siDQ4sMxewh6rQ
A9jrWUMQO8vK/lKC4Wh/RmcgyZ8VjnqooSZzeZnJ+VhfE3yT2QOA3nWdpGnseEGF
lOEgAc6zNkT91DDiG+yOfmi6g1C0WYShLImikStHi8eeAUxmYC4syg09/cV1hsLF
jAcja230us9/FmJO08pzmt2elT4A5EqKwkosc6lERP93Z93LBrloaHz+d19DWbxT
VenO/iiz1HIbpuLefnnkfHkGxlaBz5GlWD02/S7nDOghxscRIBG2h/DOXQNzc30j
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:58 2026 by rpki-client