Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2EC3F75E717D11EF911E7525C4F9AE02.roa
File:                     2EC3F75E717D11EF911E7525C4F9AE02.roa (raw, json)
Hash identifier:          Jw5hNoKrBgjjtXWbauSwl7+HpxXeACy1UGgu9QKDzdI=
Subject key identifier:   24:06:48:47:A7:41:87:D1:41:37:D9:14:7D:6C:D2:31:3D:67:6D:00
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       214E
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2EC3F75E717D11EF911E7525C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:22:23 +0000
ROA not before:           Thu 28 Aug 2025 14:51:33 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152980
IP address blocks:        160.30.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8526 (0x214e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:33 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61baf-19ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:81:60:9e:ad:c2:10:dc:5c:7c:04:84:fa:
                    0e:ca:b2:7e:18:c6:5c:6b:52:6d:cc:16:7f:1b:c4:
                    0e:09:bb:d9:b1:3d:b6:fb:7b:9e:6c:fa:cf:6f:a4:
                    61:b9:7b:77:39:c3:bf:52:75:cc:83:b1:17:ab:1e:
                    09:75:6f:a1:2c:38:30:f8:1a:6a:2c:ab:82:4b:48:
                    9f:b4:1f:73:24:17:e6:6e:53:e2:7b:01:00:8e:67:
                    6f:7a:7d:7d:5d:a6:21:04:03:8f:6a:87:01:8d:57:
                    e5:9c:63:5a:48:1c:e8:d0:52:de:95:72:c8:4b:9c:
                    84:38:7e:2e:60:45:a1:3b:79:ab:f3:2e:02:3d:a9:
                    46:6d:a7:b3:2c:13:04:0f:da:3e:b7:8c:10:5b:5b:
                    73:cb:d6:2b:c9:91:84:11:0b:1e:48:a0:14:eb:05:
                    12:d5:10:13:76:e6:51:ea:46:17:b6:46:3e:8d:09:
                    13:e7:ba:39:1a:54:53:f0:82:f8:02:3f:67:68:4e:
                    df:4a:29:09:89:50:cd:fc:09:c2:68:df:c0:a6:89:
                    23:3b:b9:74:86:5c:e9:0a:b2:09:11:b0:bc:41:36:
                    1d:90:bd:33:03:e6:e4:72:1b:2d:28:18:25:fb:db:
                    d1:63:48:2c:5b:37:0d:22:48:5c:b2:1c:63:74:93:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:06:48:47:A7:41:87:D1:41:37:D9:14:7D:6C:D2:31:3D:67:6D:00
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2EC3F75E717D11EF911E7525C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:8e:6b:8d:73:c4:41:74:56:2c:19:b5:d0:65:4a:6b:9e:ba:
         50:27:44:06:6b:57:65:33:98:7d:8e:2a:ef:39:ee:f8:ca:33:
         78:5d:69:c8:11:df:9f:27:e6:21:e7:0b:8d:ef:c3:c9:d5:ec:
         a0:69:80:b4:06:dc:08:fb:ba:f6:06:e0:73:4a:53:09:75:75:
         8a:21:a0:0f:70:d0:9f:3c:16:be:0d:10:d2:0a:52:89:97:1d:
         4d:6c:0c:76:f0:df:61:39:e0:35:73:7f:b2:f2:77:64:fb:a2:
         e0:6e:28:88:3f:b6:d1:51:e2:89:36:57:c9:a1:f2:de:92:19:
         28:b3:30:b6:c2:ae:be:0a:f5:d8:ac:c1:97:07:67:78:e6:1c:
         61:63:06:ab:c0:05:f4:6b:e9:1e:f9:ce:b3:a8:0b:db:5a:93:
         16:9e:b3:f4:f4:28:a9:b6:95:2d:3d:d3:08:96:e8:5d:46:83:
         af:a1:2e:bb:d9:ae:44:aa:80:4b:4a:67:d5:bb:2d:35:4b:0f:
         6e:b7:ca:39:69:94:5e:a4:5b:22:b7:f2:ce:11:4c:33:f4:02:
         6a:17:17:f9:82:17:fc:63:86:90:ec:61:20:16:0c:0c:bc:cf:
         28:22:7d:cb:40:2e:ac:82:36:5b:6a:8f:e5:0e:97:4b:94:99:
         1c:6c:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:35 2026 by rpki-client