Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/C6AA8F5A8B4911F197B84AD94811F970.roa
File:                     C6AA8F5A8B4911F197B84AD94811F970.roa (raw, json)
Hash identifier:          6f9AemjvikwIDiSVjQqJdYW43pPx37pnnb/gCf4hzkQ=
Subject key identifier:   A3:AD:5A:3A:E6:85:48:4E:E5:47:1D:32:F2:2B:B2:A4:0C:DC:FF:FE
Certificate issuer:       /CN=A9181292/serialNumber=194C38762FD9D794FADB8308F52B9C4F1983EA1C
Certificate serial:       0E
Authority key identifier: 19:4C:38:76:2F:D9:D7:94:FA:DB:83:08:F5:2B:9C:4F:19:83:EA:1C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GUw4di_Z15T624MI9SucTxmD6hw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/C6AA8F5A8B4911F197B84AD94811F970.roa
Signing time:             Sun 16 Aug 2026 07:45:38 +0000
ROA not before:           Sun 16 Aug 2026 07:45:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134382
IP address blocks:        160.236.118.0/23 maxlen: 23
                          160.236.118.0/24 maxlen: 24
                          160.236.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.crl
                          rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GUw4di_Z15T624MI9SucTxmD6hw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181292, serialNumber=194C38762FD9D794FADB8308F52B9C4F1983EA1C
        Validity
            Not Before: Aug 16 07:45:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a816aa2-9fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:28:0b:5b:eb:c7:c9:9e:75:04:10:6f:c1:
                    11:5e:b5:51:43:d2:07:7d:c1:e3:7e:8b:fa:6e:65:
                    83:3a:20:39:48:f1:c5:6f:67:80:21:af:1d:f5:8c:
                    ea:98:70:52:d5:9c:a7:83:49:3d:96:ac:23:ed:9b:
                    82:a3:9c:cf:eb:61:67:72:72:cf:5c:3e:77:44:3d:
                    7b:97:e1:12:eb:bd:30:b7:59:a5:83:ef:af:6a:c5:
                    17:ce:1a:2d:6b:bd:ca:6b:90:26:e9:d5:9d:74:1e:
                    c4:1d:25:24:1b:80:d9:31:1b:4e:91:e0:d2:b2:e3:
                    eb:12:7e:ed:9b:6f:9e:71:0c:3b:1d:6b:47:e3:2a:
                    fd:84:9f:bf:31:15:16:21:fb:e4:1d:d8:cd:a1:9c:
                    d3:9b:f9:98:dc:ef:fb:e9:7a:44:8a:3c:ed:60:a4:
                    ae:e3:a9:6d:cf:fb:83:aa:56:76:c0:df:75:af:c1:
                    a5:28:97:81:ae:b3:39:d6:e9:71:a7:fd:fb:45:ed:
                    79:a6:49:54:60:1d:04:44:f5:42:fc:f2:6b:b3:6f:
                    e5:a2:42:42:46:f0:2e:03:7f:ce:3b:6f:0f:bb:72:
                    f3:81:38:21:e6:68:32:84:ac:93:d6:a3:bb:5c:1a:
                    d3:26:d2:12:37:68:fe:dd:35:4b:ce:29:10:21:2d:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AD:5A:3A:E6:85:48:4E:E5:47:1D:32:F2:2B:B2:A4:0C:DC:FF:FE
            X509v3 Authority Key Identifier:
                keyid:19:4C:38:76:2F:D9:D7:94:FA:DB:83:08:F5:2B:9C:4F:19:83:EA:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/GUw4di_Z15T624MI9SucTxmD6hw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GUw4di_Z15T624MI9SucTxmD6hw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181292/482C90368B4611F192E7A6494611F970/C6AA8F5A8B4911F197B84AD94811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:4d:09:c4:b9:a3:a1:b1:e4:b6:71:9e:0d:5c:2b:87:9d:
         c9:ce:76:16:6d:26:85:e2:0c:fa:43:29:b9:b3:32:b5:04:51:
         10:55:ab:a5:db:15:b3:8b:9e:03:ad:ed:ae:4e:d5:cf:43:79:
         19:f7:e9:57:87:49:3f:c2:ac:db:8e:86:cf:5b:a3:ed:0c:24:
         c9:a1:ca:b6:4b:7f:73:0a:3a:e7:60:14:f5:95:23:1d:7d:d1:
         c4:10:66:bd:da:b8:37:d7:60:a6:12:52:2c:4f:00:9c:7e:b1:
         e0:ab:15:fc:8b:9f:40:d2:c7:41:a1:42:b6:78:68:a9:29:54:
         83:60:3b:d8:8f:33:bb:4f:2c:73:bd:ba:9c:6f:78:a6:7c:0e:
         3f:1e:e8:46:91:bc:0e:61:39:33:3a:6d:cc:e6:95:c6:3b:c5:
         c2:39:47:64:5a:44:3f:7f:ec:77:7b:6a:e7:09:c7:1b:2f:ec:
         90:ca:3e:b5:7b:3a:9a:48:b4:af:0b:03:74:23:83:58:1a:f1:
         e1:84:c3:7c:30:f8:d8:4d:90:34:35:03:f5:ea:ff:9c:4d:d8:
         73:e4:4b:21:ba:a8:be:52:6b:4c:a6:75:27:fb:b5:56:3c:14:
         88:c5:44:b1:75:9d:a3:76:ec:91:b4:2d:00:38:ab:4a:20:64:
         d5:ec:e6:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:38 2026 by rpki-client