Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/212E0B520DFE11F0B266963AC4F9AE02.roa
File:                     212E0B520DFE11F0B266963AC4F9AE02.roa (raw, json)
Hash identifier:          0Pd2RnR3Fb00tGS21BR3ZHRM+0PBa1aIDio+p3wBXao=
Subject key identifier:   40:48:37:AC:4D:B8:AC:DA:3A:AC:E7:20:EB:36:48:EF:5C:53:40:2E
Certificate issuer:       /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83
Certificate serial:       BB
Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/212E0B520DFE11F0B266963AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:56:01 +0000
ROA not before:           Fri 31 Oct 2025 07:21:16 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153322
IP address blocks:        160.187.14.0/23 maxlen: 23
                          160.187.14.0/24 maxlen: 24
                          160.187.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl
                          rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83
        Validity
            Not Before: Oct 31 07:21:16 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a588e1-48cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:26:26:02:22:0a:04:6c:ac:4f:9c:2f:50:
                    2e:f3:49:c0:4b:e8:bf:c3:79:18:f2:0f:d1:9f:cb:
                    35:ea:aa:89:1c:66:23:64:77:86:8b:2c:70:6c:d1:
                    1d:98:74:ef:2b:9f:f2:de:1b:93:90:c2:b6:87:1e:
                    a5:ee:81:b3:14:22:db:6a:34:db:1a:74:65:f2:03:
                    d2:d1:68:5a:3d:fe:15:8c:44:aa:58:17:7d:48:30:
                    cc:af:5e:d8:91:f3:2d:8a:3a:aa:d2:4b:45:c4:3a:
                    92:f6:93:29:b3:97:5c:02:a7:c2:cb:54:8c:e6:2b:
                    1e:66:e6:16:79:ff:11:4a:5e:a1:11:69:ff:76:7a:
                    79:42:6d:18:92:de:a5:20:18:05:5d:cf:4c:7e:44:
                    48:95:e4:a7:9c:c8:79:af:8b:7f:8a:26:bd:d7:04:
                    9c:3c:20:72:c5:d0:01:b1:08:24:97:65:e5:3b:2c:
                    34:e1:30:92:cd:56:5c:49:57:40:a6:4b:f9:02:55:
                    b6:1b:46:6e:02:c9:ab:5e:cf:3e:75:aa:d4:34:d5:
                    b9:95:a4:56:3f:52:38:84:57:d3:96:1d:52:6b:f6:
                    01:03:95:57:38:55:bc:ef:02:67:95:0c:fb:8b:ec:
                    d7:5c:1f:67:51:95:38:8b:bb:2c:4a:06:a8:77:cc:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:48:37:AC:4D:B8:AC:DA:3A:AC:E7:20:EB:36:48:EF:5C:53:40:2E
            X509v3 Authority Key Identifier:
                keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/212E0B520DFE11F0B266963AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:70:74:3d:37:22:e8:6c:a8:fe:05:27:60:75:54:aa:88:51:
         1e:62:4d:95:b3:7c:ee:ff:7d:8c:c0:0b:e5:df:82:f4:79:6d:
         2e:5b:66:e3:aa:52:72:0c:70:c9:4d:27:a3:7c:f7:47:74:28:
         59:4f:11:06:81:ad:78:fe:4e:02:bc:3e:34:19:fd:07:94:58:
         bd:b9:de:cc:19:d7:2a:2d:a6:35:fc:f0:21:31:8e:65:fc:80:
         aa:2c:df:40:3b:cf:1f:98:0f:7b:1c:07:b4:b4:fc:d3:3b:20:
         19:28:29:91:66:e5:64:7f:81:61:55:c5:35:c7:db:f5:72:e7:
         51:93:a9:bc:4a:db:56:7f:d9:b3:40:c6:c8:87:9d:71:e8:44:
         c6:98:f0:88:c4:c6:4e:45:9c:69:c3:80:4e:21:e5:93:69:e8:
         51:63:c1:f9:bb:36:e1:01:d4:b4:d8:25:7c:c4:9d:ec:6c:a5:
         5b:ab:97:79:e3:9a:4f:58:ad:7f:ed:2c:19:c1:4d:bc:a4:c0:
         52:3d:78:04:d9:49:cb:b6:5a:7e:d7:b3:97:d5:82:04:22:e3:
         c1:40:60:4a:39:98:0e:aa:44:17:54:6e:4f:87:ed:1c:1a:47:
         d7:fe:43:6a:9c:4e:72:f1:2d:1a:6f:78:22:95:b8:0d:0e:b2:
         06:03:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:54 2026 by rpki-client