Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa
File:                     B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (raw, json)
Hash identifier:          2GXcGnF9Hnk+FPg8WEW+/EUmPpkB7ugokbrO1JSFDnc=
Subject key identifier:   46:53:2C:9D:2B:75:42:A5:03:82:D7:72:90:56:EE:99:DF:6D:8B:4E
Certificate issuer:       /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
Certificate serial:       014F
Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:36:30 +0000
ROA not before:           Sat 19 Jul 2025 06:11:45 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136030
IP address blocks:        160.22.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl
                          rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
        Validity
            Not Before: Jul 19 06:11:45 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5925e-2768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:73:cc:18:9a:d3:13:09:e7:7f:a2:49:c5:
                    fe:58:d5:b0:e7:e3:4d:f5:2f:cf:99:92:24:57:91:
                    e1:32:ae:02:f0:1c:47:51:43:11:04:10:7c:84:ab:
                    54:f9:f3:87:59:b0:1e:4e:20:e9:7e:a3:3e:82:45:
                    77:c4:8f:38:61:16:5a:1a:da:34:e9:59:78:df:84:
                    40:c5:51:4f:44:60:a8:a0:ad:d0:44:24:b0:05:57:
                    8b:e8:cb:93:95:ab:de:90:ea:e5:6a:79:a1:c0:4d:
                    54:8f:d6:68:7f:c7:f3:b2:29:2a:80:ac:ed:95:f1:
                    ef:f3:c9:3b:e9:4b:49:0c:35:38:60:b1:9f:18:df:
                    1a:12:ef:62:06:3e:42:b9:d7:fe:4d:f2:e2:f4:39:
                    5e:46:44:b2:6c:2e:82:13:17:e6:40:8b:dd:23:02:
                    ee:9a:c7:8f:02:7d:8c:0f:ca:b7:e0:79:53:b1:e4:
                    44:ed:46:54:01:04:96:1f:22:85:17:2c:c5:d9:24:
                    47:9f:56:db:ab:0a:a2:99:1c:d0:6f:95:79:11:c9:
                    cc:dd:fd:8b:c8:a2:1d:1c:b1:97:5d:e2:12:17:44:
                    ad:b9:ea:c6:c9:79:86:f5:4c:de:19:7e:4b:f3:d9:
                    40:f0:ca:26:ab:43:02:5b:ef:fc:64:22:6d:7c:68:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:53:2C:9D:2B:75:42:A5:03:82:D7:72:90:56:EE:99:DF:6D:8B:4E
            X509v3 Authority Key Identifier:
                keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:44:cf:96:b3:cf:14:15:97:f2:8c:31:b2:18:73:39:8b:96:
         d4:51:0b:69:3f:58:76:e2:70:21:60:74:4d:63:bb:db:72:91:
         88:09:f5:cb:29:45:15:52:5a:a3:7f:00:ad:1f:c6:e0:c3:e6:
         44:eb:1c:52:ec:2f:4b:75:29:ce:92:bd:94:90:17:81:25:eb:
         a1:2d:67:02:38:ee:d2:db:a8:3a:2b:f9:ab:ad:d0:a0:85:3e:
         cc:67:6d:6f:6c:cd:c5:96:1d:8a:b9:8f:33:25:44:1d:0a:f6:
         6d:88:aa:48:c0:40:1d:a5:7e:8e:ab:26:bd:ff:c7:2b:99:1c:
         e0:11:7f:45:bf:5c:90:41:96:bd:8c:ef:3f:2a:92:b0:79:f2:
         8a:00:3a:56:82:ec:85:58:69:54:20:79:44:db:57:08:c6:1f:
         bb:c9:d6:e0:89:bf:05:3f:7d:8a:2d:c7:ca:3d:65:c0:54:b6:
         63:6d:20:a3:79:28:8a:d3:a0:e9:21:d7:c2:61:08:5f:82:d0:
         d3:b8:c5:68:2a:91:41:4f:90:57:6a:f0:9d:ba:c2:e9:d7:ef:
         78:9d:79:37:3e:90:53:ba:61:12:22:0c:26:4f:9c:3f:8d:11:
         98:a3:05:cf:0e:08:1e:f3:e4:fb:3f:99:23:4b:c4:59:87:9f:
         b1:12:6d:3c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD
OUEzQjZCOTgwHhcNMjUwNzE5MDYxMTQ1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTI1ZS0yNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJ9zzBia0xMJ53+iScX+WNWw5+NN9S/PmZIkV5HhMq4C8BxHUUMRBBB8hKtU
+fOHWbAeTiDpfqM+gkV3xI84YRZaGto06Vl434RAxVFPRGCooK3QRCSwBVeL6MuT
lavekOrlanmhwE1Uj9Zof8fzsikqgKztlfHv88k76UtJDDU4YLGfGN8aEu9iBj5C
udf+TfLi9DleRkSybC6CExfmQIvdIwLumsePAn2MD8q34HlTseRE7UZUAQSWHyKF
FyzF2SRHn1bbqwqimRzQb5V5EcnM3f2LyKIdHLGXXeISF0StuerGyXmG9UzeGX5L
89lA8Momq0MCW+/8ZCJtfGirzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEZTLJ0r
dUKlA4LXcpBW7pnfbYtOMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB
RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDYwQ0YvRTUzNjA4RjAyQUZDMTFFRkEwMjQzQzRBQzRGOUFFMDIvQjU2RjQwREVF
OURCMTFFRkJERDhCRDI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBaMMA0GCSqGSIb3DQEBCwUAA4IBAQC9RM+Ws88UFZfyjDGyGHM5
i5bUUQtpP1h24nAhYHRNY7vbcpGICfXLKUUVUlqjfwCtH8bgw+ZE6xxS7C9LdSnO
kr2UkBeBJeuhLWcCOO7S26g6K/mrrdCghT7MZ21vbM3Flh2KuY8zJUQdCvZtiKpI
wEAdpX6Oqya9/8crmRzgEX9Fv1yQQZa9jO8/KpKwefKKADpWguyFWGlUIHlE21cI
xh+7ydbgib8FP32KLcfKPWXAVLZjbSCjeSiK06DpIdfCYQhfgtDTuMVoKpFBT5BX
avCdusLp1+94nXk3PpBTumESIgwmT5w/jRGYowXPDgge8+T7P5kjS8RZh5+xEm08
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:31:38 2026 by rpki-client