Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/329C17E6BCDA11EFA2D81814C4F9AE02.roa
File:                     329C17E6BCDA11EFA2D81814C4F9AE02.roa (raw, json)
Hash identifier:          fMdXJV+1ucniyu3k/11VAI6qy/FxoiJSc5x07sN7B60=
Subject key identifier:   24:18:9F:93:C6:A7:7E:B0:AD:C7:6A:3B:6D:FA:B6:91:CC:58:90:4A
Certificate issuer:       /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial:       EB
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/329C17E6BCDA11EFA2D81814C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:29:17 +0000
ROA not before:           Sun 03 Aug 2025 07:14:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140729
IP address blocks:        160.22.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
        Validity
            Not Before: Aug  3 07:14:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a590ad-0356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:f7:6f:dc:99:50:8e:8f:59:19:c8:17:16:
                    cd:b4:a7:f8:e3:5d:ad:a5:ec:4b:8d:46:37:db:c8:
                    46:8e:90:83:8f:fb:7c:51:b7:0e:06:44:ea:9a:9c:
                    39:ac:96:74:fb:2c:8e:3b:31:ed:0e:03:a0:1c:72:
                    00:a7:78:7f:e0:5f:ad:48:ff:54:08:46:53:84:e1:
                    65:70:b6:5c:3b:58:37:d7:dd:5f:36:89:08:f8:ab:
                    04:18:05:e1:08:ce:0d:32:eb:77:16:fe:55:57:ce:
                    25:a1:ef:58:26:3f:64:3f:07:e3:b5:94:d0:74:fd:
                    4d:a2:99:ab:6b:e9:4a:68:15:43:77:cb:38:4b:49:
                    5b:39:0a:64:b6:9b:a1:be:51:75:20:07:d3:81:a5:
                    d8:fd:cd:64:18:07:c9:32:b0:b1:1d:18:06:d0:cc:
                    bf:52:b3:42:19:89:fc:73:bc:9c:24:8f:84:ed:3e:
                    83:0a:11:ae:17:1f:3b:fb:c8:49:2c:9b:e2:da:01:
                    02:5b:1c:88:5e:e4:42:a4:cd:9e:59:da:2d:d9:90:
                    9b:be:82:69:04:83:d3:ea:9c:7f:5b:b9:bb:33:db:
                    19:26:ec:89:64:3e:b4:7e:e2:17:f5:e3:1d:3b:a3:
                    79:fe:f9:8e:42:34:3f:b5:1f:f6:06:70:d3:1a:0f:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:18:9F:93:C6:A7:7E:B0:AD:C7:6A:3B:6D:FA:B6:91:CC:58:90:4A
            X509v3 Authority Key Identifier:
                keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/329C17E6BCDA11EFA2D81814C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:32:86:83:75:f3:40:23:cd:80:42:53:32:88:f4:c1:b6:e0:
         0c:e2:7a:ea:b5:bc:ec:9c:36:d9:37:80:a4:6b:28:84:04:10:
         bf:51:a9:23:e0:bb:00:47:fe:35:36:04:a6:dd:b8:dd:01:74:
         86:88:2c:b2:f6:fa:4a:38:21:d6:fa:bb:c0:66:c9:46:1b:74:
         b0:43:ea:80:a7:ad:07:16:99:41:cd:e9:da:f5:36:d1:48:ff:
         20:fe:ff:14:f8:82:0d:69:e6:e7:f9:08:53:81:96:75:50:75:
         67:85:0e:c9:90:75:5f:30:40:87:45:7e:0a:c7:9f:84:8d:0b:
         28:a3:e0:2c:a4:9b:4c:86:1c:6c:80:53:15:07:04:9a:a6:cd:
         81:e3:63:76:9e:49:ac:6f:33:c0:4d:2d:4c:3f:62:9b:51:c8:
         0c:d4:be:ba:af:d0:6b:57:c8:ac:09:8c:7e:18:a5:4b:aa:33:
         2d:91:00:f6:2f:ee:cb:3e:ef:31:27:86:66:a9:ca:c7:a6:00:
         9a:fb:2c:5f:c8:4c:5f:1d:78:66:9c:23:61:15:cc:77:2b:a9:
         83:c9:3d:21:da:a4:e7:dc:ff:ff:96:87:f0:1f:ae:4a:5a:72:
         8d:8d:cf:89:2d:d1:3a:49:a7:c1:13:ed:63:af:21:a1:02:a8:
         87:3f:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:49:25 2026 by rpki-client