Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/A947EC6ED0BA11EFB7A6B027C4F9AE02.roa
File:                     A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (raw, json)
Hash identifier:          rcro9dP46E34GMHce4QAeTN8arZ/RvTtUrO6lFBK5gg=
Subject key identifier:   B8:07:A5:4C:A0:D8:4F:62:2E:A6:0A:7B:DE:12:5E:CB:F9:36:3E:E3
Certificate issuer:       /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Certificate serial:       DE
Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/A947EC6ED0BA11EFB7A6B027C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:16:46 +0000
ROA not before:           Sat 15 Nov 2025 04:22:05 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132714
IP address blocks:        160.191.38.0/24 maxlen: 24
                          160.191.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
                          rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
        Validity
            Not Before: Nov 15 04:22:05 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a59bce-5052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:40:37:90:c3:62:b6:5a:c5:9e:ae:c6:c4:
                    66:ca:43:84:d6:a2:7a:f7:bc:87:41:1c:69:de:f7:
                    f9:de:dc:26:5f:e8:da:42:49:a4:1e:e9:b2:19:39:
                    ea:ed:a1:51:e9:87:ce:0e:83:0e:c3:a9:de:79:34:
                    71:ec:25:14:d8:fb:24:bc:0b:2a:93:a7:0e:1b:6d:
                    e1:01:fa:38:cc:81:81:89:8e:1f:e3:fd:47:2c:5c:
                    eb:5d:81:d2:8d:23:95:84:04:58:d7:61:48:85:47:
                    0b:07:01:b9:8c:5b:dc:35:56:24:ce:d2:60:85:bd:
                    b0:b5:29:12:35:49:0f:7f:34:bd:ec:ea:e5:52:06:
                    bf:41:d6:13:e8:f6:a8:43:08:c6:5c:38:e4:af:21:
                    81:c6:eb:36:78:d6:16:12:03:3d:71:1a:02:67:24:
                    d1:af:69:6a:39:75:6f:8e:bc:9b:92:a9:5c:c3:69:
                    a1:98:70:ac:9c:67:4c:47:97:28:2a:b7:ee:5b:3a:
                    9b:c5:02:32:fc:9a:ea:37:fd:b4:b7:04:d4:0e:70:
                    9a:bf:e5:e3:6b:20:0a:05:b9:d7:7b:c8:28:41:00:
                    b1:ca:e7:b0:c3:60:3f:cc:a9:98:8e:0d:d6:ea:74:
                    ab:99:db:d2:fc:57:55:18:65:9c:ab:80:f1:82:73:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:A5:4C:A0:D8:4F:62:2E:A6:0A:7B:DE:12:5E:CB:F9:36:3E:E3
            X509v3 Authority Key Identifier:
                keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/A947EC6ED0BA11EFB7A6B027C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:f3:be:25:3a:d4:0d:cd:68:d0:ad:e8:f9:a8:52:89:5b:f8:
         e1:01:29:38:e7:b0:56:91:6e:09:a6:74:48:f5:d4:57:56:fe:
         ab:e2:45:b7:e1:39:64:bc:79:ef:e7:92:1d:ef:63:05:b3:1c:
         a7:f4:af:d4:ba:e5:bd:71:06:6b:d8:e1:55:e1:a2:6f:2c:a8:
         53:55:18:40:b3:20:c4:cd:a2:4d:2c:b7:84:e4:dd:6a:89:23:
         05:5d:c8:94:a4:90:7e:5e:46:fa:6f:bd:37:68:e6:46:f7:89:
         bb:cc:b1:1b:fe:5c:fc:96:6b:16:d1:c6:82:63:81:b4:0a:37:
         fa:89:ca:93:fe:b6:e5:57:e0:e3:4b:2d:16:b3:86:05:92:89:
         72:e4:ff:03:3c:e6:60:a6:26:d7:09:fc:e5:e0:64:05:0a:4c:
         67:9c:f6:3e:5c:49:38:fb:0e:4d:67:97:a6:64:7b:17:92:95:
         bb:6d:75:70:7c:de:d0:db:91:68:43:03:f4:49:e4:bb:1c:c4:
         ee:e7:12:aa:3a:69:e7:52:19:b8:6b:11:48:32:ad:07:19:6c:
         27:49:09:15:60:14:ae:93:a2:b2:6e:fd:9f:73:09:df:b9:7d:
         3f:52:27:f9:f6:ef:ad:80:0b:9b:6e:0a:2e:4b:5b:89:29:bb:
         85:5e:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:12 2026 by rpki-client