Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/DF6D4464818211F097447962C4F9AE02.roa
File:                     DF6D4464818211F097447962C4F9AE02.roa (raw, json)
Hash identifier:          jhQL0W/2W5KHiOPkasyItTgEf7kv9NJDTrAi7+qfj00=
Subject key identifier:   7F:16:D2:63:B0:7E:28:F3:A6:09:C5:B4:B1:2F:A5:11:44:A6:7B:A1
Certificate issuer:       /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial:       0133
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/DF6D4464818211F097447962C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:45:40 +0000
ROA not before:           Sun 07 Sep 2025 06:42:50 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137910
IP address blocks:        160.30.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
        Validity
            Not Before: Sep  7 06:42:50 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a58673-be9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:4d:a7:ba:2e:22:d2:a7:88:e4:6e:b1:35:
                    ec:fc:8d:76:e0:22:d4:c4:4d:ca:a7:b7:2b:2a:81:
                    26:e6:9c:55:70:43:83:b3:8a:42:00:a3:31:33:0c:
                    75:08:31:3e:a7:52:cb:85:7c:0e:ec:c5:30:16:b9:
                    b2:14:9f:78:b7:83:2a:ad:ec:59:3c:44:60:01:33:
                    09:af:30:25:64:49:45:65:6a:ff:9a:68:b9:c1:fb:
                    8e:19:2d:4c:f0:e5:b1:0a:3b:19:38:e3:f1:c7:17:
                    0a:01:a0:52:b4:2e:4e:8b:81:55:66:5f:ac:d0:3d:
                    60:b6:af:6b:35:f9:a0:2d:57:59:5c:38:df:35:e0:
                    46:a8:31:3b:e5:db:ab:c0:14:bb:d9:f9:2d:91:c5:
                    dc:1a:da:8a:2d:4b:df:ed:03:f0:d1:3b:eb:07:ce:
                    23:82:d6:41:1d:3e:9b:3a:d8:9a:da:68:27:c7:d2:
                    a8:41:e4:8f:5e:2d:3f:d5:76:bc:a7:1d:04:8b:0f:
                    84:ef:ec:c7:e3:6a:8c:58:45:f0:e4:1c:4a:fe:46:
                    8a:87:d5:ad:9c:a9:0f:99:75:8e:91:8a:17:65:89:
                    8e:cc:db:50:30:87:4b:b2:07:4c:2d:5f:40:32:53:
                    41:c0:55:3f:fc:31:03:ba:03:68:e6:e9:00:19:6d:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:16:D2:63:B0:7E:28:F3:A6:09:C5:B4:B1:2F:A5:11:44:A6:7B:A1
            X509v3 Authority Key Identifier:
                keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/DF6D4464818211F097447962C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a1:b4:37:5f:aa:c7:b9:27:e0:ea:92:fb:4d:d5:dc:74:da:
         3b:e0:d9:b8:38:5f:c3:5e:ae:4e:90:19:74:38:82:76:13:50:
         ad:85:8a:9d:3a:e5:6a:c7:68:94:0a:04:e0:7d:17:05:a4:5c:
         59:74:0c:48:05:df:c4:51:e0:02:95:7d:19:ef:03:cc:9b:48:
         9b:35:81:95:91:ba:a1:35:74:cb:6b:5c:98:c1:5f:e8:aa:b6:
         a2:63:6b:b8:95:e3:fe:8e:72:5b:11:20:48:fa:08:c3:8e:7d:
         f0:f6:af:0c:bf:76:d6:bb:fc:a2:e9:b4:d1:b7:c8:bc:51:b4:
         be:58:c8:c2:ec:ba:c7:43:73:0f:a9:a5:e2:33:24:66:48:1d:
         de:a3:23:ad:48:02:1c:2a:97:4e:74:3f:f3:f5:d1:32:40:9e:
         84:70:e7:00:81:76:36:a7:ba:68:c3:ce:c2:e4:4a:7a:52:9e:
         8a:73:f0:3b:f1:ac:88:a1:0c:e2:6d:7b:75:89:48:2b:8b:71:
         ca:82:ac:51:d4:74:34:ba:82:02:68:76:b7:a0:2b:4c:ff:7a:
         bb:c0:87:04:40:54:c3:1c:21:bd:56:0c:c3:b1:cc:6a:cf:f4:
         bd:99:34:e4:a9:3d:df:a5:ac:ac:ae:71:53:d0:b9:e5:23:a4:
         d4:33:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:28:11 2026 by rpki-client