Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa
File:                     0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (raw, json)
Hash identifier:          dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=
Subject key identifier:   7A:E8:80:C0:55:62:4E:16:53:DF:F5:54:E4:6B:37:50:61:1F:75:2C
Certificate issuer:       /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial:       DF
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:17:26 +0000
ROA not before:           Wed 03 Dec 2025 04:34:56 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134602
IP address blocks:        160.191.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
                          rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
        Validity
            Not Before: Dec  3 04:34:56 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a59bf6-d9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:8f:c5:6b:0e:cc:7b:54:44:be:44:9a:4f:
                    9b:9d:1a:19:22:ec:70:71:28:1c:2c:60:df:40:cd:
                    ac:fb:3b:3b:91:a8:65:50:fa:56:ec:77:98:d1:9c:
                    71:3b:18:5d:92:1d:ba:c8:68:81:e6:d5:3d:12:75:
                    b7:47:85:c6:73:a3:2a:e6:bf:cb:12:43:9d:59:b9:
                    dd:ea:ee:bf:e4:42:e3:a2:b5:90:be:3b:aa:e0:35:
                    84:29:12:fe:c9:f6:73:27:98:d3:d7:25:74:d7:86:
                    12:c2:7c:1e:93:5e:2c:62:8b:c4:73:14:94:b7:4a:
                    be:c1:f8:65:6f:1f:c1:91:05:dd:c4:5e:b1:39:d0:
                    be:6f:9a:00:59:5f:db:26:d0:7a:7c:40:73:b4:68:
                    8f:b1:d8:34:55:40:14:ae:d3:be:c2:8b:6e:77:56:
                    47:38:5b:17:bb:fb:c4:e6:69:4c:e7:1a:c3:be:b9:
                    e7:d3:fe:12:35:75:88:e9:fe:50:82:33:b7:4a:59:
                    ac:55:24:46:2c:d3:14:54:7e:69:33:73:e2:a4:66:
                    18:7d:bf:5b:3c:0e:84:ff:21:a2:c6:d0:56:74:59:
                    b6:22:c4:8c:73:5e:93:42:f5:bd:7c:33:e4:cb:c4:
                    b9:fd:33:98:be:7e:f3:90:95:d2:41:97:e6:eb:2b:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E8:80:C0:55:62:4E:16:53:DF:F5:54:E4:6B:37:50:61:1F:75:2C
            X509v3 Authority Key Identifier:
                keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:33:9e:fb:2e:73:d4:e0:0d:7f:10:cd:c1:1f:24:cf:42:a1:
         7d:56:33:8d:c1:c1:2b:42:10:80:6b:4a:a1:9f:7a:86:0e:9e:
         9c:11:a6:c9:e9:07:27:34:af:e0:41:8e:1c:ad:86:42:ce:f8:
         70:b0:d2:d3:26:25:90:82:3b:b4:66:d1:71:c5:6f:11:06:c7:
         bb:60:75:e8:f5:b2:33:c5:53:12:ee:57:37:73:a9:0c:ef:6a:
         a3:64:e8:d4:52:3e:eb:2c:cf:31:3f:ed:8e:63:59:82:b2:6c:
         f8:56:18:29:b4:85:93:c2:4d:e4:f7:58:80:a1:ba:f1:0d:d7:
         66:30:8c:9a:16:a7:7d:43:8e:26:e1:41:22:bc:98:68:b7:95:
         aa:d6:c0:2f:4f:d1:11:e7:fb:de:9e:ca:54:a7:5d:8a:ca:b7:
         9f:77:55:27:a8:7c:1d:d8:89:eb:0c:7b:a7:34:8a:ee:ca:b3:
         1c:37:13:df:16:e5:35:a1:35:cc:9b:52:5e:87:e5:6d:f1:6f:
         7b:6e:2f:91:e2:69:28:b4:0f:9e:1f:cc:40:c0:d1:b1:15:be:
         c7:f4:75:e0:c9:e6:30:85:10:96:86:cd:34:ee:2c:0d:6f:03:
         4f:3f:03:2f:d9:5f:3c:b3:0a:0f:94:7f:05:50:9d:64:63:f7:
         cd:39:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:55:22 2026 by rpki-client