Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/C7500EC88C2F11EF82B2F55CC4F9AE02.roa
File:                     C7500EC88C2F11EF82B2F55CC4F9AE02.roa (raw, json)
Hash identifier:          wRT9sM0qBqJTw3W+Zz9nGxaklW3kwpSgScv5I5RXTWo=
Subject key identifier:   98:68:AE:A9:51:B4:B0:A3:C2:28:A3:AE:B5:D6:02:71:86:69:60:54
Certificate issuer:       /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Certificate serial:       010C
Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/C7500EC88C2F11EF82B2F55CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:22:08 +0000
ROA not before:           Fri 21 Nov 2025 03:51:41 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     399861
IP address blocks:        160.187.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl
                          rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
        Validity
            Not Before: Nov 21 03:51:41 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a58f00-022a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:ea:45:70:3e:01:b8:03:0d:ff:a3:a1:c3:
                    29:55:95:fc:ed:f8:1a:d6:7c:18:31:3b:d9:7f:89:
                    51:47:78:35:a2:cf:b2:43:c1:0f:f1:67:ee:c2:f7:
                    ff:c8:78:43:3a:83:f0:62:c0:ac:3d:41:2c:1b:7b:
                    eb:7d:0d:51:32:bb:a6:5e:9c:f6:2a:f3:05:45:68:
                    36:a1:f3:90:61:e2:f0:4e:45:c0:d0:3a:9b:25:f2:
                    4b:f3:90:e5:00:77:aa:1b:b5:8a:c8:ea:71:0a:ba:
                    06:96:7c:04:88:99:38:d0:5d:52:a1:d7:43:7c:ec:
                    81:bf:a0:41:53:43:fd:7e:54:bd:b5:f9:64:cb:2e:
                    06:6e:47:fb:a2:4a:04:28:a3:3b:6c:0d:d8:79:e1:
                    69:a7:5e:e8:94:73:95:83:08:4a:dc:bd:3e:d5:93:
                    26:7b:24:25:94:4a:10:0f:ce:fc:b5:27:04:ed:55:
                    a9:a9:a8:5b:61:b1:60:ba:bf:98:2f:2d:7f:16:b1:
                    85:47:a5:6c:e4:b8:e0:a5:98:0d:c5:bb:cd:93:5a:
                    b1:71:44:96:0f:c1:6a:1c:38:72:24:8d:62:09:f4:
                    6d:3f:a7:29:17:a2:cb:2f:f1:18:b6:bc:17:42:0b:
                    30:d6:97:d0:ac:e9:68:82:2c:94:89:04:b2:a6:f0:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:68:AE:A9:51:B4:B0:A3:C2:28:A3:AE:B5:D6:02:71:86:69:60:54
            X509v3 Authority Key Identifier:
                keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/C7500EC88C2F11EF82B2F55CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:1d:19:fd:75:00:69:30:f0:96:6f:d9:a0:9b:84:55:3a:
         96:e6:fa:30:37:42:8f:84:22:f3:5d:2e:4c:75:b1:e3:5a:95:
         80:25:92:81:c9:25:61:18:61:9f:a1:4f:eb:e8:db:a2:81:49:
         98:ca:47:01:db:af:38:b7:96:d0:25:37:9b:a0:b3:3b:5f:9c:
         2f:20:e2:7d:1d:6f:9b:d6:f5:dc:ba:78:11:68:9e:9f:49:8f:
         9f:b1:23:4a:5c:00:77:21:52:8b:f0:41:3d:68:8b:4d:77:2a:
         4e:67:31:36:a4:c0:57:36:ff:09:e2:a5:db:d7:00:61:98:6d:
         61:ee:6a:bb:4c:0c:99:58:58:e0:41:09:cc:b2:92:79:3a:f5:
         16:38:03:08:69:90:74:6a:bc:54:6f:72:78:2b:38:78:a0:46:
         fc:1d:80:73:f0:99:f5:ee:f7:fb:f2:3b:d7:81:a2:5c:ce:7f:
         40:7a:02:a5:20:0b:be:dc:cf:64:5b:9e:74:56:5f:aa:31:f3:
         fd:6e:a1:d2:6a:66:f6:25:1b:41:df:b1:78:15:de:16:36:97:
         0e:88:6c:ad:1c:af:2f:f4:4f:ce:6b:c3:99:32:a8:17:55:f4:
         85:95:7c:c3:e4:46:f1:ed:46:54:af:67:da:e1:11:53:55:11:
         e1:4c:06:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUzMTkxMTAvBgNVBAUTKDFERDMzQTY4QkMwQjVDOTMxMEZGRjUyQUQ3Mzk0MTIw
RDEwMkE2MjcwHhcNMjUxMTIxMDM1MTQxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OGYwMC0wMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/3qRXA+AbgDDf+jocMpVZX87fga1nwYMTvZf4lRR3g1os+yQ8EP8Wfuwvf/
yHhDOoPwYsCsPUEsG3vrfQ1RMrumXpz2KvMFRWg2ofOQYeLwTkXA0DqbJfJL85Dl
AHeqG7WKyOpxCroGlnwEiJk40F1SoddDfOyBv6BBU0P9flS9tflkyy4Gbkf7okoE
KKM7bA3YeeFpp17olHOVgwhK3L0+1ZMmeyQllEoQD878tScE7VWpqahbYbFgur+Y
Ly1/FrGFR6Vs5LjgpZgNxbvNk1qxcUSWD8FqHDhyJI1iCfRtP6cpF6LLL/EYtrwX
Qgsw1pfQrOlogiyUiQSypvBE7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJhorqlR
tLCjwiijrrXWAnGGaWBUMB8GA1UdIwQYMBaAFB3TOmi8C1yTEP/1Ktc5QSDRAqYn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS9GOTRENDFDODhD
MkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhKTVFfX1VxMXpsQklORUNw
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0hkTTZhTHdMWEpNUV9fVXExemxCSU5FQ3BpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzUzMTkvRjk0RDQxQzg4QzJDMTFFRjgxMjJFQzExQzRGOUFFMDIvQzc1MDBFQzg4
QzJGMTFFRjgyQjJGNTVDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLuiMA0GCSqGSIb3DQEBCwUAA4IBAQBGnR0Z/XUAaTDwlm/ZoJuE
VTqW5vowN0KPhCLzXS5MdbHjWpWAJZKBySVhGGGfoU/r6NuigUmYykcB2684t5bQ
JTeboLM7X5wvIOJ9HW+b1vXcungRaJ6fSY+fsSNKXAB3IVKL8EE9aItNdypOZzE2
pMBXNv8J4qXb1wBhmG1h7mq7TAyZWFjgQQnMspJ5OvUWOAMIaZB0arxUb3J4Kzh4
oEb8HYBz8Jn17vf78jvXgaJczn9AegKlIAu+3M9kW550Vl+qMfP9bqHSamb2JRtB
37F4Fd4WNpcOiGytHK8v9E/Oa8OZMqgXVfSFlXzD5Ebx7UZUr2fa4RFTVRHhTAZs
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:19 2026 by rpki-client