Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/9FFE9026751F11F1BBCD6C1F74A30FBC.roa
File:                     9FFE9026751F11F1BBCD6C1F74A30FBC.roa (raw, json)
Hash identifier:          XrIZ022hr5ecAsAKZgLQvfOGr3m4kyUdyD7IG0BaLXY=
Subject key identifier:   C5:16:5D:39:3D:2C:0D:A4:72:F9:DB:4E:40:FC:8D:3B:0A:0C:5E:A0
Certificate issuer:       /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Certificate serial:       0160
Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/9FFE9026751F11F1BBCD6C1F74A30FBC.roa
Signing time:             Wed 01 Jul 2026 07:36:51 +0000
ROA not before:           Wed 01 Jul 2026 07:36:51 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     133551
IP address blocks:        160.30.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
                          rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
        Validity
            Not Before: Jul  1 07:36:51 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a44c393-fe84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:4c:24:74:8b:c7:71:0f:f4:f2:bf:f8:7b:
                    15:27:b3:6e:7f:57:aa:36:aa:8a:f2:97:55:c6:de:
                    36:54:3b:8a:18:0e:fb:41:1a:3b:66:e5:18:58:13:
                    ad:e4:46:c2:67:a1:6b:ca:a4:10:41:b7:91:96:24:
                    ec:6e:37:29:4a:5e:fd:3b:ee:c5:f6:95:12:3e:c1:
                    4d:cb:03:da:74:dc:f5:f9:e5:3e:f8:03:3d:68:49:
                    c3:e9:9c:ef:a9:3b:a9:4c:5a:27:ae:88:b2:98:b2:
                    f6:d3:e8:cc:75:b7:a2:94:bc:f9:3a:90:17:1d:7c:
                    d3:0b:bf:6e:0b:96:32:b6:91:e4:eb:1b:24:e8:b6:
                    04:7b:4e:23:77:28:f8:0d:ed:2d:07:95:ed:c3:e0:
                    66:e7:2c:5f:05:d8:92:f3:ae:98:55:3b:01:e1:aa:
                    55:fb:1b:45:32:56:ce:17:ff:ea:ce:9d:a9:67:74:
                    bd:4b:85:6e:a9:02:43:ac:4e:53:1b:81:2e:19:3e:
                    74:ea:70:4b:8c:45:62:c5:b1:0b:78:9e:a3:83:a8:
                    51:22:83:5c:6b:c4:d6:95:00:39:b9:b7:b2:50:90:
                    af:3c:ea:89:56:44:1f:14:90:90:e2:0a:2d:81:87:
                    4a:69:c5:29:e9:e0:df:7c:75:90:72:e2:69:b6:de:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:16:5D:39:3D:2C:0D:A4:72:F9:DB:4E:40:FC:8D:3B:0A:0C:5E:A0
            X509v3 Authority Key Identifier:
                keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/9FFE9026751F11F1BBCD6C1F74A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:d3:ce:f0:41:3c:3d:f3:c5:17:13:1e:65:e1:74:b2:61:
         38:41:fa:49:58:94:f7:e9:59:05:8a:05:2a:6f:fb:6c:db:30:
         89:89:f5:73:4e:d0:20:61:9e:cf:ac:a7:cf:78:ab:b4:f1:86:
         5a:56:29:be:52:c7:3d:c8:35:20:5c:5c:bc:da:d1:e3:6f:8d:
         ce:34:f7:1e:80:89:79:96:c6:1c:25:25:85:2a:61:5f:ea:ca:
         cb:60:13:ff:d8:45:66:8d:50:00:78:24:5f:b6:15:89:5c:30:
         b9:22:af:54:e7:99:28:43:a5:1d:6d:6d:76:4b:55:23:41:c3:
         26:fe:83:d8:4f:8f:f4:a5:58:26:fb:87:e8:fc:14:ea:af:6e:
         7e:73:17:24:0d:ba:68:a4:e7:31:66:a9:f3:72:1a:72:10:df:
         d4:4f:63:8e:17:1c:89:a6:ce:cf:7b:8f:9e:af:e6:ee:55:c4:
         c1:34:04:84:db:9f:99:a7:d7:bc:7d:eb:e9:ff:ec:19:fd:63:
         9c:f9:ed:cf:a9:ca:22:8a:0d:0d:57:c8:0e:11:dc:da:f0:22:
         46:26:9e:ae:28:78:56:9d:01:95:42:99:59:9f:a1:74:e3:8c:
         aa:e2:f6:f2:9a:3f:ae:ee:91:54:7c:16:ca:25:ac:b5:58:f6:
         ca:61:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:23:38 2026 by rpki-client