Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/EEE0092A646611EFA25D167EC4F9AE02.roa
File:                     EEE0092A646611EFA25D167EC4F9AE02.roa (raw, json)
Hash identifier:          Cz53IM9XrwFo5eiOhKbMpefJ/4LPJaT0jFu6dU8OhL0=
Subject key identifier:   0A:D8:5D:89:99:70:D9:AA:E3:3B:4A:23:BE:ED:9E:DB:18:71:98:1C
Certificate issuer:       /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Certificate serial:       0124
Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/EEE0092A646611EFA25D167EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:17:31 +0000
ROA not before:           Fri 27 Jun 2025 06:30:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     142159
IP address blocks:        160.30.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C18, serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
        Validity
            Not Before: Jun 27 06:30:55 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5aa0b-cc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:67:33:ab:62:77:20:76:be:0d:dc:21:a7:8f:
                    98:ef:43:1c:13:72:cc:87:d8:ec:32:28:40:29:94:
                    5f:51:12:ee:ec:f8:4b:ac:a7:4c:a6:57:91:a8:78:
                    96:42:6d:e1:1d:0a:b2:7a:4a:28:b0:b5:4a:7c:11:
                    d8:f7:7c:ec:03:a9:fb:f9:5d:a5:7c:00:c0:2f:5a:
                    e7:18:6f:05:34:c9:bb:10:3a:db:81:e5:13:1b:c9:
                    d6:65:e1:9d:57:46:73:f3:2b:4b:09:5f:45:56:f1:
                    88:28:53:c1:1c:9c:07:4b:b6:3e:7e:ba:92:5d:f1:
                    e0:5c:4f:a7:68:79:3f:1b:94:4d:f2:32:f2:5f:92:
                    ec:3b:47:f4:83:25:ad:cf:e6:80:77:44:12:ea:0f:
                    ef:22:3e:12:6c:21:c7:db:47:03:1d:53:8c:95:33:
                    d4:26:6e:76:91:b1:77:0e:f8:f0:88:7f:ef:3e:75:
                    3e:31:f2:24:52:96:2e:ec:68:a2:52:95:c5:3b:87:
                    a5:db:6b:cb:df:48:b3:25:30:7c:01:7e:82:a9:d7:
                    aa:e0:8c:db:d1:ec:ef:a2:9d:c2:8a:c7:01:70:6a:
                    16:f7:7a:e9:db:55:8c:69:17:79:37:6c:00:f4:9f:
                    07:56:e4:5f:e4:b0:1b:51:44:24:67:a8:70:98:bf:
                    60:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D8:5D:89:99:70:D9:AA:E3:3B:4A:23:BE:ED:9E:DB:18:71:98:1C
            X509v3 Authority Key Identifier:
                keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/EEE0092A646611EFA25D167EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:be:32:ec:4d:ea:12:d0:73:f7:41:a5:c6:41:dd:4b:cd:31:
         1d:03:86:3d:66:75:1c:f3:75:4c:a7:df:1f:fb:2c:16:1c:09:
         5a:f3:5b:7e:4b:be:59:c1:3f:d7:09:f5:05:17:a8:19:da:da:
         1d:a0:d1:c0:e3:76:54:5c:26:ca:a9:5c:51:47:c0:9e:34:ed:
         33:2a:01:14:cc:99:d6:ee:76:0f:88:c4:9b:92:3f:46:45:32:
         c8:ba:fd:6f:53:4a:9f:1a:06:7b:76:26:e4:a3:37:3a:98:c0:
         d2:f4:cb:43:e2:bb:07:99:33:9d:3a:72:9f:57:39:46:91:9c:
         0f:72:f0:3d:7b:91:30:8f:38:07:9b:c3:d7:8d:cf:93:78:45:
         c8:42:a7:2d:5c:d7:50:f1:a1:0e:0d:31:e0:16:27:60:10:af:
         f2:d2:5e:ac:88:21:e4:b9:5f:1f:2a:f2:79:c1:e3:28:58:b2:
         7c:68:d3:95:41:d9:cd:58:80:6e:f3:b0:d7:f4:41:3e:5b:89:
         a8:6a:73:99:53:f1:0b:bc:8d:47:24:cf:e2:b4:7b:8f:8f:c4:
         a9:71:bf:9b:66:91:c4:b4:9a:b0:96:1f:26:9c:67:9b:72:c6:
         31:3a:a8:ae:3b:fe:28:fc:64:19:29:4b:ca:4e:19:f5:0e:71:
         c6:82:80:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:49:23 2026 by rpki-client