Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/3E61693479DD11F18DA5FBFE64A30FBC.roa
File:                     3E61693479DD11F18DA5FBFE64A30FBC.roa (raw, json)
Hash identifier:          4ISeNbf+HWkmo+dW5l6ccpVCk+/JDHzY8Y8EpJZaUJI=
Subject key identifier:   85:F4:ED:C0:CF:46:0C:4A:BA:D4:22:E7:E7:12:71:4A:ED:DF:D0:E1
Certificate issuer:       /CN=A91ABD41/serialNumber=B2B4413372484EE3CEC2B3CFF030B037ABF6F82E
Certificate serial:       02
Authority key identifier: B2:B4:41:33:72:48:4E:E3:CE:C2:B3:CF:F0:30:B0:37:AB:F6:F8:2E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/3E61693479DD11F18DA5FBFE64A30FBC.roa
Signing time:             Tue 07 Jul 2026 08:24:17 +0000
ROA not before:           Tue 07 Jul 2026 08:24:17 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     136429
IP address blocks:        160.236.72.0/23 maxlen: 23
                          160.236.72.0/24 maxlen: 24
                          160.236.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.crl
                          rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABD41, serialNumber=B2B4413372484EE3CEC2B3CFF030B037ABF6F82E
        Validity
            Not Before: Jul  7 08:24:17 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a4cb7b1-8065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:2e:ac:07:35:fa:b5:87:c9:93:be:4c:e9:
                    af:0a:9d:21:2f:04:65:0b:e9:44:b0:39:da:e0:b0:
                    33:00:9c:1c:68:a8:8a:24:75:78:7e:89:23:cb:b1:
                    48:67:fd:03:6a:fa:9f:42:70:3f:95:ce:13:d2:08:
                    18:e8:95:1e:91:1c:ed:69:49:10:13:98:31:48:1d:
                    f2:22:81:6b:30:20:b3:23:fe:9b:59:6b:cc:e9:4b:
                    67:18:78:b0:2b:dc:ad:ac:53:32:8d:a3:cc:fb:5d:
                    c4:b5:ce:c3:20:95:19:24:a2:a7:25:85:7d:1a:c8:
                    28:d7:5f:7f:11:89:22:35:a7:b7:27:e3:eb:86:b8:
                    fc:eb:ee:7a:63:26:85:30:8f:4a:1f:cb:2f:80:45:
                    a3:a1:e2:61:4a:c7:a2:df:52:38:87:f4:81:16:bd:
                    93:cc:98:02:95:c4:34:a9:09:d8:da:73:ad:02:7e:
                    0c:7c:c2:9c:ce:5a:04:7b:82:0c:2b:3a:54:57:bd:
                    af:56:1d:3b:0f:82:22:6b:63:91:d4:53:db:71:47:
                    70:2e:23:e1:92:72:ba:76:85:ad:94:e3:16:04:03:
                    14:9a:df:b3:3f:de:51:3a:3e:70:c8:62:c7:43:0c:
                    46:77:60:40:87:94:bc:a8:d1:ab:8b:fd:34:fa:ae:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F4:ED:C0:CF:46:0C:4A:BA:D4:22:E7:E7:12:71:4A:ED:DF:D0:E1
            X509v3 Authority Key Identifier:
                keyid:B2:B4:41:33:72:48:4E:E3:CE:C2:B3:CF:F0:30:B0:37:AB:F6:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/3E61693479DD11F18DA5FBFE64A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:5d:66:4e:4c:a9:60:e2:d0:f1:c2:8b:ac:fb:29:44:84:5a:
         3e:31:52:1f:c0:92:12:40:f0:58:17:cb:e5:a9:bb:f2:ae:32:
         ee:51:c0:40:14:29:a9:ec:8b:46:70:ba:21:12:0b:f0:75:1c:
         bb:91:eb:c4:16:3d:1e:79:92:08:9d:58:83:2d:3f:ff:fb:e3:
         6b:1b:6b:76:5d:ae:82:d5:72:c8:ad:7e:5d:26:c7:a6:be:8b:
         d7:c8:81:83:3b:93:5f:53:2a:97:80:f8:0d:26:2d:52:b6:07:
         fc:5d:82:9b:c5:0e:20:cd:18:e3:7f:57:b6:f2:2a:98:3e:2f:
         75:7f:0d:eb:06:6d:d5:ec:53:91:b3:90:1f:9d:6f:b0:e9:62:
         7a:9c:8e:5f:e6:a1:3b:7d:d3:aa:a5:04:3c:06:f4:48:26:a7:
         f0:ac:97:b8:ce:de:93:5c:15:02:91:dd:eb:52:23:91:12:0a:
         aa:09:e4:bd:c5:16:12:aa:c1:8d:d4:42:52:a9:3a:4e:d5:1d:
         d7:43:4e:9d:43:e8:11:4c:6e:2f:81:c3:72:5d:b5:cc:a8:cf:
         61:9b:30:21:31:b1:dc:bb:b5:04:5a:d3:49:49:06:7c:9f:7c:
         8b:65:04:59:27:c7:e4:9b:d7:67:92:58:bd:6f:c4:d5:df:a7:
         71:26:4c:f0
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QkQ0MTExMC8GA1UEBRMoQjJCNDQxMzM3MjQ4NEVFM0NFQzJCM0NGRjAzMEIwMzdB
QkY2RjgyRTAeFw0yNjA3MDcwODI0MTdaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNGNiN2IxLTgwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCOmC6sBzX6tYfJk75M6a8KnSEvBGUL6USwOdrgsDMAnBxoqIokdXh+iSPLsUhn
/QNq+p9CcD+VzhPSCBjolR6RHO1pSRATmDFIHfIigWswILMj/ptZa8zpS2cYeLAr
3K2sUzKNo8z7XcS1zsMglRkkoqclhX0ayCjXX38RiSI1p7cn4+uGuPzr7npjJoUw
j0ofyy+ARaOh4mFKx6LfUjiH9IEWvZPMmAKVxDSpCdjac60Cfgx8wpzOWgR7ggwr
OlRXva9WHTsPgiJrY5HUU9txR3AuI+GScrp2ha2U4xYEAxSa37M/3lE6PnDIYsdD
DEZ3YECHlLyo0auL/TT6rmmtAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUhfTtwM9G
DEq61CLn5xJxSu3f0OEwHwYDVR0jBBgwFoAUsrRBM3JITuPOwrPP8DCwN6v2+C4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCRDQxL0MzNkFFNDk0NzlE
QzExRjE4MTVFNEJGRTYzQTMwRkJDL3NyUkJNM0pJVHVQT3dyUFA4REN3TjZ2Mi1D
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvc3JSQk0zSklUdVBPd3JQUDhEQ3dONnYyLUM0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkQ0MS9DMzZBRTQ5NDc5REMxMUYxODE1RTRCRkU2M0EzMEZCQy8zRTYxNjkzNDc5
REQxMUYxOERBNUZCRkU2NEEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGg7EgwDQYJKoZIhvcNAQELBQADggEBACBdZk5MqWDi0PHCi6z7KUSE
Wj4xUh/AkhJA8FgXy+Wpu/KuMu5RwEAUKansi0ZwuiESC/B1HLuR68QWPR55kgid
WIMtP//742sba3ZdroLVcsitfl0mx6a+i9fIgYM7k19TKpeA+A0mLVK2B/xdgpvF
DiDNGON/V7byKpg+L3V/DesGbdXsU5GzkB+db7DpYnqcjl/moTt906qlBDwG9Egm
p/Csl7jO3pNcFQKR3etSI5ESCqoJ5L3FFhKqwY3UQlKpOk7VHddDTp1D6BFMbi+B
w3Jdtcyoz2GbMCExsdy7tQRa00lJBnyffItlBFknx+Sb12eSWL1vxNXfp3EmTPA=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:08 2026 by rpki-client