Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/083E1314A0A111EF84620260C4F9AE02.roa
File:                     083E1314A0A111EF84620260C4F9AE02.roa (raw, json)
Hash identifier:          mSukAUMe5Lr3KzZ1M4lKG8ZcBcOq+sE7NJI6nlUpRwI=
Subject key identifier:   6F:0D:FD:FF:0F:41:CE:DA:88:D4:2B:6F:06:B6:04:73:D2:F0:E8:BB
Certificate issuer:       /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Certificate serial:       0102
Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/083E1314A0A111EF84620260C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:33:41 +0000
ROA not before:           Mon 11 Aug 2025 06:46:58 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135426
IP address blocks:        160.30.148.0/23 maxlen: 23
                          160.30.148.0/24 maxlen: 24
                          160.30.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
                          rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
        Validity
            Not Before: Aug 11 06:46:58 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a583a4-3af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:a6:c5:d1:91:b3:be:c2:dd:a1:bd:df:9e:
                    cc:bd:0c:07:37:3e:16:87:61:9e:1f:32:ac:d0:e2:
                    7f:9f:e1:a4:89:0a:db:ff:a8:80:0e:d5:ae:75:19:
                    e8:50:87:56:88:0a:45:43:8d:54:94:96:17:39:ce:
                    c9:89:d0:95:e5:93:a3:b5:a4:34:9f:0e:39:d0:a7:
                    40:f5:fd:03:8d:f5:d6:b5:a6:30:58:11:e9:e7:2f:
                    69:32:bc:b2:9e:3b:f0:83:55:2a:75:8f:84:06:24:
                    77:f2:b1:9f:f4:ac:50:74:a0:a0:1a:d4:c3:37:2f:
                    f6:ef:71:29:31:e8:b1:66:13:13:83:cd:d0:52:d1:
                    86:0c:89:d1:eb:9e:7e:91:37:62:e0:df:3f:42:30:
                    9c:87:37:8a:40:68:1a:a6:9e:8d:b6:38:b6:d6:81:
                    51:df:30:01:1a:fc:ed:e7:63:da:5a:a5:d9:e5:53:
                    0d:ae:f4:de:13:ab:39:81:30:29:53:1f:55:40:58:
                    e5:5f:76:52:e4:9e:43:78:02:a1:e5:40:9e:63:6a:
                    9c:0e:92:fe:97:f7:03:ba:bc:5b:3c:ff:9d:56:cb:
                    a4:4c:ee:98:37:76:ab:7f:ea:3b:d7:62:90:39:9e:
                    32:c4:80:ba:0b:9c:e2:8a:5e:5a:65:33:79:94:c4:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0D:FD:FF:0F:41:CE:DA:88:D4:2B:6F:06:B6:04:73:D2:F0:E8:BB
            X509v3 Authority Key Identifier:
                keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/083E1314A0A111EF84620260C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:ed:cb:6c:36:04:2b:6e:66:f4:ff:b4:e6:5e:fb:9a:90:33:
         48:52:7c:87:33:11:b9:3a:95:a4:16:84:c3:20:27:21:6f:00:
         38:d8:06:2c:a4:ce:88:99:b9:52:92:c1:d9:1f:8d:28:7a:1d:
         05:e7:cd:e1:73:59:3a:06:2e:14:c4:0c:bb:33:18:f0:0e:79:
         a8:60:11:56:3c:04:a5:9e:c0:3b:7c:2f:6d:e9:70:92:00:72:
         13:27:0d:49:86:8a:cb:3a:9c:92:e7:6b:6d:e0:23:71:10:87:
         99:3a:83:68:4f:17:e7:82:65:7a:d3:78:1f:ad:f7:c0:de:61:
         6a:bf:9f:3c:f2:a8:76:93:62:19:41:44:3f:52:ab:4c:1d:44:
         a8:5a:0d:79:e6:40:15:95:74:80:42:92:d6:d0:ea:68:b4:0f:
         24:93:54:13:2b:ad:8b:d2:ba:11:dd:c3:06:64:df:54:8a:9d:
         b6:48:2d:6f:c8:4b:22:e7:1e:67:e0:bf:39:3a:c3:c6:79:5f:
         2a:4d:f2:1b:22:b2:0f:8c:86:7b:ab:a6:48:31:59:58:50:c9:
         27:61:d0:0f:e6:fc:04:d7:2b:d4:fd:37:8a:c0:f8:cf:35:7a:
         ad:9c:03:41:fa:22:af:4c:9f:a3:01:4a:d7:59:ca:f0:7f:f0:
         c5:66:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:57 2026 by rpki-client