Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/31A0A22E803B11F0BAF8A92DC4F9AE02.roa
File:                     31A0A22E803B11F0BAF8A92DC4F9AE02.roa (raw, json)
Hash identifier:          Al5ElKvZHBtfdI6rpl/GjF/sUz2GZFxlszTkQNtD+b8=
Subject key identifier:   8B:A0:B9:07:AF:BA:EE:66:AB:23:C9:6B:28:7E:D0:9E:2D:CC:83:CC
Certificate issuer:       /CN=A9127B24/serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691
Certificate serial:       0109
Authority key identifier: 4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/31A0A22E803B11F0BAF8A92DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:13:13 +0000
ROA not before:           Wed 15 Oct 2025 09:32:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153336
IP address blocks:        160.187.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl
                          rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691
        Validity
            Not Before: Oct 15 09:32:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a59af9-1a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:09:25:23:2b:a9:97:a7:d8:ef:f4:9f:82:
                    9d:70:64:16:a5:1d:74:85:f2:df:ee:7e:2f:f6:61:
                    50:83:6a:33:a8:30:96:7a:15:ec:80:65:71:23:ae:
                    73:10:23:bc:00:cc:b5:52:bf:de:b0:66:e2:64:89:
                    94:26:f1:a0:59:de:fe:bc:0b:fa:8f:c7:a5:04:c3:
                    42:02:0e:a4:b6:12:8b:9f:0c:09:ca:96:19:36:5e:
                    8c:ce:b4:9d:6c:be:69:d9:09:d2:bd:70:7b:c9:b2:
                    ca:be:7b:8b:21:24:e7:8c:c2:54:a9:12:03:26:fe:
                    a4:3b:94:d3:c3:25:35:46:6d:92:16:ea:fb:5b:5d:
                    1b:8f:ea:32:2c:28:f2:4b:a8:f9:07:8f:53:a4:b3:
                    e9:b4:ae:67:60:83:f7:f8:3d:87:8e:5d:1c:cf:fa:
                    fb:00:83:72:45:ca:93:d8:e0:67:4b:9a:50:12:c0:
                    63:76:ae:91:17:43:bf:ae:7b:b8:51:59:14:41:38:
                    69:0f:5a:42:34:f0:c7:cb:c0:fa:02:58:f9:b5:6f:
                    5c:09:d3:3e:00:7f:2f:d6:1b:5b:9d:8f:68:bb:e0:
                    ef:8d:cf:cb:d1:7f:34:af:e8:bd:ed:b8:44:3b:d7:
                    23:17:ad:37:1e:69:23:bd:9b:fa:f9:c1:9f:c1:3f:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A0:B9:07:AF:BA:EE:66:AB:23:C9:6B:28:7E:D0:9E:2D:CC:83:CC
            X509v3 Authority Key Identifier:
                keyid:4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/31A0A22E803B11F0BAF8A92DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:9d:f8:43:11:7b:03:5c:6c:3e:6c:51:a9:55:9b:2b:da:
         05:f7:07:34:b2:8b:d1:73:8f:40:7b:20:c5:7c:84:f8:35:4d:
         83:38:ee:5d:93:76:a0:1c:74:05:22:b2:f5:13:d9:76:37:5a:
         a8:89:2e:4b:66:22:e7:69:a4:fb:b0:b2:6a:a2:9a:9b:d6:f9:
         50:a3:98:33:91:ac:2b:a6:8c:46:d8:a4:e0:5f:b6:26:3d:b3:
         7a:ec:60:c7:9c:e5:7f:41:73:35:2a:ac:d0:25:f5:b0:d5:2e:
         70:60:d1:28:56:37:74:34:24:4c:3c:4b:be:6a:65:26:c3:ca:
         01:db:43:d3:d6:c8:32:31:a2:d7:ee:ef:6a:0e:17:5b:83:57:
         4f:46:79:d1:05:92:81:20:6f:20:1d:69:4b:86:85:6d:d1:6b:
         d7:15:4b:26:be:bc:9a:b5:03:53:aa:43:e3:75:4e:97:b8:10:
         24:cf:4b:b1:b4:50:7f:d7:7a:7a:ee:27:a9:6e:a1:e3:b7:11:
         f1:78:3e:a3:54:26:d6:82:4e:60:30:68:3f:3d:7a:e7:05:a6:
         42:f9:65:99:d8:ab:78:81:2c:0d:25:93:2c:d5:02:b4:95:ea:
         c4:8a:ef:a9:68:52:b7:56:83:3d:c9:3e:2f:30:5b:d1:72:36:
         9c:2f:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:32 2026 by rpki-client