Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/A409C5D2746611F187F6609D76A30FBC.roa
File:                     A409C5D2746611F187F6609D76A30FBC.roa (raw, json)
Hash identifier:          b9Kx8HZq0zMs0AyS6Dbt8bMXNKwWP5zX6/W0xwn9etY=
Subject key identifier:   92:60:A3:E9:B8:B0:6A:3C:06:93:C2:FA:A4:39:4A:2E:A1:5C:33:40
Certificate issuer:       /CN=A91FE40B/serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43
Certificate serial:       03
Authority key identifier: 4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/A409C5D2746611F187F6609D76A30FBC.roa
Signing time:             Tue 30 Jun 2026 09:32:41 +0000
ROA not before:           Tue 30 Jun 2026 09:32:41 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136911
IP address blocks:        160.236.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl
                          rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 18:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE40B, serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43
        Validity
            Not Before: Jun 30 09:32:41 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a438d39-89e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5c:90:6d:72:d5:1d:d0:d7:8d:24:83:ed:e3:
                    06:5f:e8:bb:a0:9f:d3:7a:51:10:f4:31:c2:31:08:
                    87:eb:6f:45:9d:5e:a6:9a:d4:3f:81:73:60:84:09:
                    00:80:65:dd:3b:e8:94:36:63:60:88:b0:77:0c:c7:
                    fa:34:41:31:1d:58:4d:c4:a7:82:0c:f3:5e:13:c1:
                    96:c3:fc:8d:a2:3e:5d:10:d2:12:a1:1f:91:2f:23:
                    0f:78:22:e4:5a:96:6d:32:7e:f3:7f:4d:1b:4e:f2:
                    a7:cc:42:f6:b5:58:0f:a5:6d:60:06:f6:89:49:18:
                    7c:b1:4d:90:0a:26:94:61:15:93:f0:1a:e4:fe:71:
                    74:57:59:76:e7:35:85:bb:d5:e3:e6:12:d7:79:d0:
                    27:ac:0b:af:10:6a:4b:c2:07:69:d8:51:8a:b5:0b:
                    86:e3:77:b0:61:08:7d:c0:e2:26:14:9c:c2:f4:57:
                    63:c4:12:df:4b:62:73:77:a9:ca:9d:5d:da:18:32:
                    7b:61:d5:44:6b:89:cd:51:d1:0b:73:2d:01:15:08:
                    63:11:16:c8:bb:e8:ce:30:e3:0f:e4:4d:00:8f:8f:
                    1d:1f:52:32:f4:65:03:79:fc:02:7f:3c:35:87:81:
                    79:bc:a1:a6:1e:3d:b3:08:c4:6b:83:50:a9:b1:2f:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:60:A3:E9:B8:B0:6A:3C:06:93:C2:FA:A4:39:4A:2E:A1:5C:33:40
            X509v3 Authority Key Identifier:
                keyid:4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/A409C5D2746611F187F6609D76A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d1:ef:2a:c5:c7:86:4e:e6:5f:b4:11:a8:1e:e1:de:1e:89:
         7e:81:80:8b:94:8b:c8:60:34:01:06:69:2e:3c:c1:2b:37:eb:
         52:20:b3:52:94:dd:b2:f3:de:a0:44:52:48:7e:53:4e:d3:48:
         68:e0:8d:d6:f2:e9:c7:c8:77:5d:ee:f7:b9:6b:a3:83:39:d1:
         48:7d:c8:9e:74:9b:17:45:e3:41:e5:5c:be:d8:86:af:09:77:
         60:3a:0f:b9:9a:25:fe:ee:a8:cd:c0:23:90:eb:9a:9d:95:53:
         62:1e:80:dc:a9:84:1b:b3:9d:f9:a7:70:9d:dc:df:ed:56:ad:
         ff:a5:91:b8:0e:2a:6b:b4:92:0b:1f:e0:0f:20:18:da:9e:1f:
         8b:31:c4:68:f5:ba:c4:7e:ea:91:74:38:86:0d:e9:ab:05:81:
         e2:d0:3a:a8:6b:45:bc:6a:f5:2f:35:31:64:91:26:29:f6:7e:
         ea:0d:85:ad:6d:d4:14:d8:7f:fc:3a:54:3a:4b:82:62:72:be:
         8d:88:c1:3d:7c:b0:3d:f6:62:68:ca:aa:c9:9c:a9:f3:90:ab:
         e2:08:50:79:50:0e:65:55:8a:f7:e8:2e:bb:ea:b9:11:c4:67:
         5f:dc:4e:f9:35:52:a9:df:07:e6:dc:96:01:25:73:f3:80:89:
         8a:fa:7d:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:25 2026 by rpki-client