Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/EA8CF7A8CB5311EF91F1081BC4F9AE02.roa
File:                     EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (raw, json)
Hash identifier:          4FvToQacfGL/R01Xqon86uwwcxEvS/mvSJCHSiC6W9c=
Subject key identifier:   75:CF:D3:25:7A:01:3C:6A:6B:03:6A:07:B6:99:B6:0A:8B:22:78:6B
Certificate issuer:       /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Certificate serial:       E1
Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/EA8CF7A8CB5311EF91F1081BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:08:21 +0000
ROA not before:           Thu 25 Sep 2025 07:25:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131266
IP address blocks:        160.30.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
        Validity
            Not Before: Sep 25 07:25:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a58bc5-679c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:c9:03:23:87:02:9d:e0:1d:50:28:35:2d:
                    40:34:cc:3b:1a:58:e2:39:d3:f5:66:86:23:e8:ae:
                    61:5d:9b:1f:0a:f8:a2:f2:5e:c4:97:8e:06:86:38:
                    1c:f6:f6:11:90:e0:df:c7:67:6a:16:19:17:fe:64:
                    a0:da:c1:87:58:e9:e2:d6:e7:0b:e4:97:0a:27:cd:
                    22:e1:3c:5c:18:9f:ad:2c:52:5f:5e:b5:a1:47:5a:
                    fe:d2:2e:51:d8:7b:91:a9:c6:54:6c:3b:da:49:01:
                    3f:49:97:b4:f3:b7:ed:9e:e9:89:76:2e:96:c5:2b:
                    76:5e:62:8b:49:b7:5c:20:a1:56:80:91:91:7d:fe:
                    90:ba:f0:d7:d4:dc:2d:71:a6:95:11:78:b2:a9:40:
                    6e:96:aa:d7:ff:ae:33:a5:9a:a1:23:5b:68:1d:ef:
                    cd:6b:c5:c0:58:e9:b4:cc:4e:ea:f5:44:1b:a1:1d:
                    4f:88:7f:43:7b:e5:4a:1c:44:a0:4d:97:db:01:08:
                    2d:0f:ef:73:cb:a4:f4:da:30:8f:75:b0:62:1d:f1:
                    83:4b:04:09:e0:14:d0:c7:3a:ea:c3:ed:53:50:48:
                    59:31:58:e8:af:29:0e:90:d3:9e:eb:d4:65:4d:5a:
                    33:a3:07:6f:0a:00:9c:e2:2c:c8:c4:1f:e7:d1:54:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CF:D3:25:7A:01:3C:6A:6B:03:6A:07:B6:99:B6:0A:8B:22:78:6B
            X509v3 Authority Key Identifier:
                keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/EA8CF7A8CB5311EF91F1081BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:87:9f:9e:9f:08:93:b7:3f:2f:7e:bb:87:55:fb:42:a9:
         32:90:03:af:1b:ab:2a:34:60:cf:a1:5a:8f:8d:9b:77:fa:8b:
         c2:40:a7:fe:25:4f:4b:35:da:4f:49:93:ed:35:66:a7:1c:4d:
         0c:be:41:3e:f5:ac:a7:ba:6b:8e:2e:6f:3f:1b:37:c0:68:e9:
         72:92:ef:d2:e4:67:fc:fd:b8:e3:53:58:cd:ac:cb:ce:0e:02:
         f8:0d:83:51:e0:2e:c6:00:10:f8:95:de:94:0f:15:30:28:0c:
         7d:18:60:e4:f0:81:52:c5:ed:5f:94:16:c2:2d:36:a5:ee:88:
         ad:b5:64:c0:2a:f6:ae:cb:47:fa:03:db:2a:a6:48:17:ea:6c:
         f9:1b:8c:46:44:a2:6e:bf:a5:b4:b1:1c:37:91:e0:00:31:e0:
         0c:9e:51:a1:ea:1b:69:bc:d3:51:c7:06:20:6b:05:5c:d5:2f:
         00:1a:c3:eb:a2:55:98:51:00:e4:11:45:18:bc:08:cc:c4:a5:
         a8:0e:14:b3:70:87:b8:d2:6e:75:fe:98:9d:13:21:00:8e:a6:
         52:a1:43:fc:9d:5d:b3:8f:dc:09:a6:fe:8e:9a:ad:60:5d:2a:
         24:2b:40:9e:de:ec:39:10:7e:60:ae:a0:06:be:ed:1e:c3:4c:
         d8:30:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:56:59 2026 by rpki-client