Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/E9B1F1B8A91811F18EC286413C11F970.roa
File:                     E9B1F1B8A91811F18EC286413C11F970.roa (raw, json)
Hash identifier:          wImMWO9pGivt+ncg4d/fuAa6GL2v48XaohUBkLie4ao=
Subject key identifier:   24:63:00:63:94:89:FC:62:C8:C4:33:CC:AC:9F:27:CA:5F:39:F3:B7
Certificate issuer:       /CN=A91F53E8/serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
Certificate serial:       26
Authority key identifier: 01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/E9B1F1B8A91811F18EC286413C11F970.roa
Signing time:             Sat 05 Sep 2026 10:59:49 +0000
ROA not before:           Sat 05 Sep 2026 10:59:49 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        160.236.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl
                          rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53E8, serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
        Validity
            Not Before: Sep  5 10:59:49 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9bf625-ed62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:8b:66:22:18:b2:f1:f5:20:78:17:ba:75:
                    cc:33:7b:13:14:c9:22:b9:f8:37:83:81:8a:85:d0:
                    9f:24:57:f8:60:a1:7c:35:59:15:62:bd:1b:63:4a:
                    b7:6b:b2:fe:b5:31:06:78:c6:16:e8:f6:92:cb:3d:
                    c2:60:0b:2e:c1:bb:6b:86:52:24:c0:94:83:13:b3:
                    84:e5:68:3b:4d:c4:e3:bc:e8:a8:06:a4:b8:76:09:
                    c0:5e:10:45:24:01:29:62:87:fc:a1:f4:dd:72:16:
                    9c:db:55:ee:89:3d:61:b9:1d:ad:73:f8:f7:57:da:
                    30:2e:de:02:ba:95:46:aa:dc:f2:b6:5d:bb:77:4c:
                    d5:04:f6:b0:66:e2:38:35:2f:46:43:0f:7f:90:ad:
                    23:fb:3f:46:32:56:23:df:02:41:13:07:c4:c6:53:
                    c7:25:2c:36:01:4b:d3:ff:95:c3:98:81:bb:d2:86:
                    e0:6e:cd:1b:8a:4e:5e:f6:79:43:89:c7:9f:01:54:
                    8b:76:1f:3e:5b:77:f8:2f:73:3e:1a:06:37:f2:17:
                    16:5d:18:fc:d1:ff:fd:05:c6:9a:74:dd:df:b6:9c:
                    48:df:25:c9:6c:b0:a3:68:0c:da:f7:97:49:e5:b6:
                    a8:c6:0d:17:08:68:98:ea:03:12:67:68:2e:c9:e9:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:63:00:63:94:89:FC:62:C8:C4:33:CC:AC:9F:27:CA:5F:39:F3:B7
            X509v3 Authority Key Identifier:
                keyid:01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/E9B1F1B8A91811F18EC286413C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:a4:76:37:4d:5a:c1:82:4d:58:da:00:49:36:a9:24:ef:
         c7:b1:b1:c5:23:59:e4:bd:0a:af:1e:51:c7:18:12:e1:23:e9:
         0c:cc:63:02:16:88:b2:80:ee:21:27:2c:3d:cf:7a:0b:e1:5e:
         87:08:ee:d8:e8:c9:af:12:5c:05:e0:57:6c:88:64:4d:b9:e8:
         2c:77:1d:d8:f2:ae:fe:8c:2d:af:49:d8:82:35:dd:29:43:05:
         a2:60:58:8f:89:8b:9a:fe:fb:86:d8:d6:bc:1a:01:78:07:f1:
         46:ba:fa:a5:b1:c0:dc:07:8a:da:d5:99:ae:3e:ad:6b:bf:a2:
         8a:ec:32:a7:46:c0:c0:ea:75:e0:a5:a7:3e:5b:31:ff:5b:7f:
         c0:1d:ad:e6:d4:a5:ac:25:fc:46:b7:22:64:06:fc:5e:4c:41:
         2d:c4:a9:7a:de:d0:37:3f:4e:61:16:cd:28:c2:5d:ba:60:35:
         2e:25:9d:f0:d9:b8:00:03:31:ee:aa:ca:c9:be:a7:25:11:8a:
         0e:d7:b6:43:5d:64:a6:9a:06:7c:d8:4d:d7:32:76:ea:e4:cf:
         98:df:d4:a0:13:17:0a:0c:e6:4b:40:54:0b:c1:08:00:b4:80:
         bc:de:42:5b:a7:82:1d:b4:76:96:ec:35:90:da:05:93:36:1b:
         e8:2c:3a:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:30:24 2026 by rpki-client