Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/328CBC1A948D11F1A5BE36406611F970.roa
File:                     328CBC1A948D11F1A5BE36406611F970.roa (raw, json)
Hash identifier:          1F7cx/vFo7/QfoO4QwD2fE5604MofvsFO/wXSVuF0sA=
Subject key identifier:   D9:E6:29:7F:17:97:F2:0B:C0:07:6B:00:47:8D:40:05:56:6F:37:3A
Certificate issuer:       /CN=A91C7836/serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3
Certificate serial:       10
Authority key identifier: D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/328CBC1A948D11F1A5BE36406611F970.roa
Signing time:             Mon 10 Aug 2026 07:29:18 +0000
ROA not before:           Mon 10 Aug 2026 07:29:18 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45117
IP address blocks:        160.236.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl
                          rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7836, serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3
        Validity
            Not Before: Aug 10 07:29:18 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a797dce-3e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:03:7b:83:e6:eb:43:35:9e:2e:4d:cf:96:f1:
                    87:54:b9:46:e9:af:68:dd:3a:b2:5e:e8:da:f0:57:
                    3b:ad:da:c0:23:ae:97:77:05:bb:9a:86:8f:14:42:
                    1d:5e:99:e9:d4:36:29:08:ea:25:aa:c7:9a:aa:d5:
                    ad:5c:27:80:cd:34:d7:2c:7e:87:b4:68:3e:bd:7b:
                    3e:a6:e1:69:0e:06:bd:31:4b:88:ce:13:fc:03:b6:
                    32:c5:15:44:17:19:7b:25:70:af:49:a0:bd:73:09:
                    88:b7:df:dc:59:2d:21:14:dc:99:cc:15:4e:37:e5:
                    34:2a:83:1d:12:3f:ee:0f:0e:b7:49:30:29:d4:a9:
                    03:50:da:8a:fe:b2:5f:6b:98:12:1d:a0:43:65:12:
                    44:d9:28:e3:60:a4:6e:25:0e:52:e6:fa:11:ad:41:
                    9c:27:dd:1c:21:83:f4:24:02:8d:c9:64:3b:e6:23:
                    63:bd:c0:e4:b8:54:0a:5b:8a:1f:04:f8:d5:60:e7:
                    82:2f:11:c3:54:14:f3:dc:68:ba:20:aa:a6:07:f1:
                    ac:1d:9d:5d:ef:ad:53:82:58:f3:f5:53:5c:0f:ac:
                    2f:6d:d3:ed:de:9e:df:9d:74:f1:ff:5e:49:8a:fc:
                    76:98:7d:f4:e2:73:05:aa:f9:b2:25:d0:0e:05:58:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E6:29:7F:17:97:F2:0B:C0:07:6B:00:47:8D:40:05:56:6F:37:3A
            X509v3 Authority Key Identifier:
                keyid:D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/328CBC1A948D11F1A5BE36406611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:9c:5b:5a:60:26:26:10:06:ed:50:bb:55:a2:4c:85:61:
         68:d9:0a:cd:13:ad:2a:70:6d:f9:89:b1:68:db:23:a4:f6:6f:
         71:23:14:f6:82:e6:76:b8:07:fc:1f:7a:8b:51:46:6d:52:a9:
         df:12:d9:8a:69:fc:49:68:86:e9:07:02:71:25:b2:62:a7:49:
         96:46:8b:27:f4:56:95:b4:62:b7:f1:bf:46:fe:55:5f:4d:cf:
         0b:22:28:56:24:a7:9f:fa:40:2c:ea:e5:26:b1:e2:50:51:ed:
         c1:fd:90:f8:6c:8d:59:5b:23:57:48:43:6b:7d:9b:35:c2:61:
         40:17:19:9e:d0:33:39:ec:d5:0c:e0:97:4c:fb:20:ff:c1:99:
         4a:63:30:e3:fd:fa:0d:8c:2a:37:2e:78:be:4d:83:6f:75:83:
         9d:62:f7:60:68:8b:ce:de:a9:54:61:32:95:b4:8f:26:74:04:
         52:d7:f0:34:70:69:83:d0:29:86:be:4c:d1:16:23:18:2c:10:
         f7:8a:01:c7:96:2f:36:fa:f0:d3:a2:22:61:06:7b:7d:d5:a2:
         fc:6e:d8:17:6f:3c:01:d9:05:07:3c:63:8c:20:57:cc:6d:d1:
         3a:39:08:9d:51:9b:77:ca:c0:f9:00:85:99:8c:ea:89:73:40:
         d2:0a:98:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:55 2026 by rpki-client