Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/1E110D7E1DA011EFBC90D55EC4F9AE02.roa
File:                     1E110D7E1DA011EFBC90D55EC4F9AE02.roa (raw, json)
Hash identifier:          CIdgKiWKc4mMdw08M1pwhFCtHHk4y+8zMM6sElC687o=
Subject key identifier:   53:BC:DE:B1:C8:0A:C8:F5:C3:CB:50:BF:9D:59:61:3E:4A:9C:4D:14
Certificate issuer:       /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Certificate serial:       014E
Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/1E110D7E1DA011EFBC90D55EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:29:21 +0000
ROA not before:           Tue 03 Jun 2025 06:05:21 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152882
IP address blocks:        160.20.132.0/24 maxlen: 24
                          160.20.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
                          rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4091, serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
        Validity
            Not Before: Jun  3 06:05:21 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a582a1-e632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:e1:fe:45:0d:c0:4f:74:d5:c7:c9:48:13:
                    75:12:c7:b8:e0:50:07:57:49:19:98:f3:33:c0:73:
                    ef:e6:4e:cd:63:03:21:5d:fc:6e:00:64:f2:f3:9d:
                    c7:c6:76:12:fb:09:c2:6f:c6:69:4f:21:5b:fd:8e:
                    6d:be:80:93:73:bb:35:f5:56:4b:b8:93:5b:1a:06:
                    be:88:74:98:8e:46:a9:7f:23:26:46:95:a6:ac:40:
                    ef:cd:35:4f:52:1f:14:06:e3:23:a7:0d:c2:65:5b:
                    72:72:be:cb:83:fe:31:0a:de:f8:33:91:1a:2c:8f:
                    1d:ad:17:f3:00:6c:92:84:52:e9:4d:34:4b:a8:0b:
                    a4:1c:5a:1e:33:b8:11:63:30:39:cd:b3:f6:b3:a5:
                    e4:8f:74:8a:c3:49:df:4f:98:12:f8:49:d1:f6:9f:
                    16:b8:16:c9:1c:0f:f2:61:32:19:48:29:e6:7b:a1:
                    a4:a8:3c:93:89:a6:b1:9c:02:24:d7:35:a6:04:3b:
                    15:0f:43:0a:0c:cf:b7:7a:52:13:66:90:9b:1a:f1:
                    a1:ef:2d:ac:45:d0:3c:7b:eb:dd:6d:e5:b8:bc:db:
                    fd:39:08:4f:bd:7f:d0:3b:ea:96:2a:28:12:a8:37:
                    61:09:7a:ca:1b:a5:c5:e8:18:5f:8e:e9:56:00:c4:
                    73:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BC:DE:B1:C8:0A:C8:F5:C3:CB:50:BF:9D:59:61:3E:4A:9C:4D:14
            X509v3 Authority Key Identifier:
                keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/1E110D7E1DA011EFBC90D55EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:de:e5:63:e1:7a:e7:45:4f:c4:38:f9:13:23:62:43:ca:93:
         6d:16:7e:70:9b:78:25:33:72:52:93:6d:a3:35:e7:32:6b:de:
         37:61:1f:c1:7c:f1:b5:9f:4a:d2:9f:e9:d3:ea:bf:24:fb:eb:
         fb:ca:f5:5b:4b:22:d4:35:f8:dc:b5:bb:34:d4:e9:1b:81:fb:
         ac:0b:f8:36:37:67:40:a7:fd:64:2d:29:0e:77:19:88:8e:b4:
         18:ea:2a:06:63:96:ff:24:63:39:0d:86:21:f4:ef:f6:1f:96:
         81:23:1f:21:7b:6b:cc:65:37:f3:87:e2:3c:d9:25:aa:af:17:
         c0:bb:72:bb:05:65:a9:4c:c1:3a:af:3b:63:16:73:cd:b0:c6:
         69:c6:ae:7d:19:6f:09:ce:7d:56:60:f2:19:ca:b8:62:bb:49:
         60:74:39:18:c7:27:45:5d:72:f7:29:d9:2b:83:89:97:51:ad:
         09:ca:82:bb:3c:e0:7e:d4:db:f4:cb:a3:90:fa:4c:91:fa:d0:
         af:0c:8b:66:ea:bc:ba:d6:6a:d4:0e:a0:33:a3:6e:98:b8:28:
         f1:61:2f:10:00:b1:0c:ba:14:30:87:ee:d6:e9:73:79:96:f5:
         1a:c4:b3:51:3c:69:8e:b9:6f:11:fb:01:be:c3:69:81:d0:46:
         4a:a5:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:54:50 2026 by rpki-client