Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/E02064A0C9E911EFABA90568C4F9AE02.roa
File:                     E02064A0C9E911EFABA90568C4F9AE02.roa (raw, json)
Hash identifier:          S1aFdcC/LrHbZUoN74Vum9zuMT2KNx5IAF9Hxxp+yWk=
Subject key identifier:   CF:C0:90:25:C8:66:52:D2:F2:7D:08:34:23:56:BC:C0:11:33:94:5E
Certificate issuer:       /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Certificate serial:       0160
Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/E02064A0C9E911EFABA90568C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:07:43 +0000
ROA not before:           Mon 15 Sep 2025 06:13:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152928
IP address blocks:        160.22.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
                          rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
        Validity
            Not Before: Sep 15 06:13:54 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a7bf-9d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:37:87:d0:c6:e8:c7:f6:dd:c7:b6:39:b2:
                    c8:e4:73:cd:c6:dd:66:c7:c4:33:a5:9c:1e:01:54:
                    86:0c:95:a6:67:fb:0d:4a:3f:80:7a:f7:10:7f:57:
                    67:9b:8c:e5:8a:da:70:31:f6:8b:4b:f1:17:4e:23:
                    61:2b:77:a7:d2:5e:c3:7f:fb:86:21:e1:c5:47:d8:
                    e6:9a:d1:fd:0e:9d:10:9d:f0:b5:af:a7:79:ef:59:
                    4b:53:ae:36:fb:56:3b:d9:5f:9a:0c:4a:4a:b2:58:
                    d2:2f:8c:c2:8a:cf:ef:6b:4e:cb:a4:5a:fc:d8:06:
                    85:87:6a:e4:e9:90:ca:10:be:61:91:e9:8f:5d:8d:
                    0c:1d:00:a8:32:88:07:73:1c:ae:e6:a4:d9:30:41:
                    1f:ef:e3:b0:e9:04:a3:9e:5e:db:e3:a8:7b:92:fa:
                    ed:a4:73:67:49:79:eb:b4:8e:43:85:51:ab:b3:e2:
                    f0:5d:f6:f8:bb:78:8d:97:f1:7f:c9:9a:ed:12:14:
                    0a:85:df:20:34:4e:1b:82:e6:e7:6b:c3:d2:e3:0b:
                    60:a1:6d:0a:72:62:c2:0f:45:74:c6:c5:e6:d6:20:
                    1d:50:96:ac:f9:64:2c:82:d0:b8:60:86:7b:5d:36:
                    dc:52:cd:e9:ff:4e:eb:44:be:49:c2:22:f6:e4:c3:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C0:90:25:C8:66:52:D2:F2:7D:08:34:23:56:BC:C0:11:33:94:5E
            X509v3 Authority Key Identifier:
                keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/E02064A0C9E911EFABA90568C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:49:19:ed:1e:1b:ad:aa:d1:c8:57:26:7f:50:66:97:2a:40:
         d1:97:d7:67:1e:fd:10:30:a5:21:e1:87:be:d3:93:f8:0e:f8:
         66:27:fb:03:7c:20:55:89:08:4a:e6:44:bc:ac:1c:86:f8:a3:
         c1:a3:06:79:42:5d:f9:42:1c:78:0d:97:7b:8e:ad:ea:f2:e6:
         79:2e:ac:67:46:60:ff:40:4d:41:1e:16:1b:f4:f0:f2:ff:8c:
         c5:59:0c:11:14:f9:4e:34:9d:56:d2:5d:7f:1b:fa:dc:cb:99:
         77:88:02:5a:22:69:bb:67:92:e4:f6:7b:2a:6b:c0:96:cf:51:
         d7:c9:a3:9f:c1:b6:f6:65:ef:4e:cb:0b:2b:1f:30:3a:11:b3:
         29:4e:f6:5e:8a:d6:d4:2f:2a:73:fe:d9:70:af:d9:60:11:23:
         29:eb:40:78:bd:fa:25:b3:85:28:f5:e7:b1:81:a3:55:34:5f:
         8b:c3:bb:2b:a5:82:43:ee:ab:e7:19:a3:bd:16:0d:c2:68:4f:
         f7:78:b5:60:c3:83:9a:1e:a2:88:11:d2:09:3e:c1:7e:af:39:
         e9:8d:cf:78:07:45:75:9a:b2:d5:bc:39:68:20:80:a6:ef:3a:
         07:23:93:0d:66:e5:06:61:fa:dd:2e:ec:45:3e:1f:24:24:d4:
         10:98:75:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:02 2026 by rpki-client