Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa
File:                     E36214403D0011EFAD623342C4F9AE02.roa (raw, json)
Hash identifier:          8MuuN2f/dvQUl/EAeCIlck+3ljnjnHw7GSO4P2gdCpM=
Subject key identifier:   8F:90:6B:B1:29:BE:8F:E7:4F:14:B1:4E:B9:AB:73:45:D0:BA:38:9C
Certificate issuer:       /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial:       0185
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 06:34:32 +0000
ROA not before:           Thu 09 Jul 2026 06:34:32 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     152919
IP address blocks:        160.22.184.0/23 maxlen: 23
                          160.22.184.0/24 maxlen: 24
                          160.22.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
                          rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
        Validity
            Not Before: Jul  9 06:34:32 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4f40f8-d8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:f4:ac:ce:3c:47:ab:3f:76:a1:c7:78:85:
                    18:1a:f3:f5:d3:9d:38:90:2c:37:1c:22:69:bf:7a:
                    2f:e1:98:e1:9a:0a:0c:17:2c:3d:07:b7:8a:aa:32:
                    17:81:4e:ff:62:d9:00:a7:c9:a6:1a:1e:16:50:cc:
                    82:cc:c2:9a:61:02:6d:f1:bb:a6:df:a5:8e:7a:9e:
                    2a:6d:64:e3:64:b6:93:4c:2d:6e:c5:c0:52:81:7f:
                    17:d1:1b:c4:ae:f7:25:38:ff:bf:93:1b:9f:0f:58:
                    56:c8:f3:5e:bc:a1:b1:de:ee:2c:cb:00:5c:2e:5c:
                    d1:2b:80:e5:fa:81:a1:dc:e6:8c:50:ac:9c:86:98:
                    ed:dd:2e:cc:36:9d:8a:b3:d5:90:51:6c:9e:1f:82:
                    3b:1d:5b:21:3b:ca:e0:e1:2c:77:c1:0f:1c:68:77:
                    8c:7a:4d:78:1d:de:a8:68:96:76:2d:f3:38:40:3c:
                    56:1d:c1:06:70:ac:d7:ef:f3:1c:45:df:f2:01:94:
                    ee:9c:5c:79:90:21:76:5a:e5:c9:7d:22:45:56:5a:
                    a3:86:b2:d8:30:89:29:11:e8:dd:92:9f:24:35:98:
                    e1:ba:7f:5b:da:f0:79:13:39:11:e8:8e:d1:c2:fa:
                    b0:26:5a:b3:7d:65:a3:a3:d3:b2:76:c3:e7:75:d2:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:90:6B:B1:29:BE:8F:E7:4F:14:B1:4E:B9:AB:73:45:D0:BA:38:9C
            X509v3 Authority Key Identifier:
                keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:a0:66:d1:16:87:1b:fc:71:8d:d1:ef:a4:b0:fd:da:c6:
         6b:01:ca:dd:b0:82:79:db:0a:01:6b:ca:07:c7:c0:9d:99:78:
         c2:e1:7f:48:19:9f:3e:01:09:d2:9a:af:c3:80:a2:43:f6:e5:
         5b:11:55:d0:3d:7e:03:71:c9:76:5c:a9:15:4c:ac:af:db:9d:
         eb:68:96:91:51:a6:1d:ec:3b:3b:a9:8c:54:6f:cb:7a:c9:ec:
         76:22:28:b8:5a:65:77:59:b6:1e:bc:64:73:f8:77:a1:32:14:
         22:58:9f:bb:53:d7:68:e9:fa:05:3b:70:f6:9a:87:a2:11:3f:
         42:19:83:59:b3:84:97:28:55:03:62:44:11:ba:bd:fb:29:c3:
         e6:5e:fa:3d:6c:a9:0f:8c:00:1b:02:cb:4b:af:2e:ac:9a:87:
         d2:21:9b:b7:86:be:4c:f5:0e:a5:a0:90:62:c7:95:f2:ba:5d:
         73:48:25:d5:ef:80:76:49:fe:15:45:06:6f:74:99:3e:7a:ef:
         22:55:21:d1:43:fc:cd:ba:bd:12:1f:93:fa:3e:a4:7d:11:f4:
         34:28:fd:02:72:9c:2d:a3:7b:33:17:eb:54:db:c5:4d:48:c0:
         96:01:07:62:cd:0e:8f:03:d4:d3:2f:b9:bf:1e:56:d7:e2:73:
         51:47:59:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE2MDQxMTAvBgNVBAUTKEYyMkNGOEVGNzZBREZERjJDRjlFRkVEQkVDMTIxMzQ4
ODYzNTZGNEQwHhcNMjYwNzA5MDYzNDMyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmNDBmOC1kOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5v0rM48R6s/dqHHeIUYGvP10504kCw3HCJpv3ov4ZjhmgoMFyw9B7eKqjIX
gU7/YtkAp8mmGh4WUMyCzMKaYQJt8bum36WOep4qbWTjZLaTTC1uxcBSgX8X0RvE
rvclOP+/kxufD1hWyPNevKGx3u4sywBcLlzRK4Dl+oGh3OaMUKychpjt3S7MNp2K
s9WQUWyeH4I7HVshO8rg4Sx3wQ8caHeMek14Hd6oaJZ2LfM4QDxWHcEGcKzX7/Mc
Rd/yAZTunFx5kCF2WuXJfSJFVlqjhrLYMIkpEejdkp8kNZjhun9b2vB5EzkR6I7R
wvqwJlqzfWWjo9OydsPnddLZxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI+Qa7Ep
vo/nTxSxTrmrc0XQujicMB8GA1UdIwQYMBaAFPIs+O92rf3yz57+2+wSE0iGNW9N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8wOUExMTIzNDND
RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9mTFBudjdiN0JJVFNJWTFi
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhpejQ3M2F0X2ZMUG52N2I3QklUU0lZMWIwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE2MDQvMDlBMTEyMzQzQ0VCMTFFRjk0RTI0RjU5QzRGOUFFMDIvRTM2MjE0NDAz
RDAwMTFFRkFENjIzMzQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBa4MA0GCSqGSIb3DQEBCwUAA4IBAQBKCqBm0RaHG/xxjdHvpLD9
2sZrAcrdsIJ52woBa8oHx8CdmXjC4X9IGZ8+AQnSmq/DgKJD9uVbEVXQPX4Dccl2
XKkVTKyv253raJaRUaYd7Ds7qYxUb8t6yex2Iii4WmV3WbYevGRz+HehMhQiWJ+7
U9do6foFO3D2moeiET9CGYNZs4SXKFUDYkQRur37KcPmXvo9bKkPjAAbAstLry6s
mofSIZu3hr5M9Q6loJBix5Xyul1zSCXV74B2Sf4VRQZvdJk+eu8iVSHRQ/zNur0S
H5P6PqR9EfQ0KP0Ccpwto3szF+tU28VNSMCWAQdizQ6PA9TTL7m/HlbX4nNRR1kU
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:31:17 2026 by rpki-client