Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/10DAF9348C2D11EFB9CC3812C4F9AE02.roa
File:                     10DAF9348C2D11EFB9CC3812C4F9AE02.roa (raw, json)
Hash identifier:          aeq83y3UDmIZ+hHdv0UR/7vvLe8gLWVcHYM4gtGf+AA=
Subject key identifier:   38:CA:6E:B4:6D:51:A1:75:EC:D2:11:20:54:26:86:07:D3:41:1A:11
Certificate issuer:       /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Certificate serial:       016B
Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/10DAF9348C2D11EFB9CC3812C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 00:44:20 +0000
ROA not before:           Fri 31 Jul 2026 00:44:20 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     146948
IP address blocks:        160.187.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
                          rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
        Validity
            Not Before: Jul 31 00:44:20 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a6befe4-eaea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:ba:04:15:49:41:ad:64:7d:a1:89:16:29:
                    19:1f:4f:74:fa:66:a4:ac:51:bb:11:f9:a7:35:eb:
                    b1:89:05:23:96:2d:92:47:05:9f:c7:a5:f5:85:a4:
                    f1:e2:52:b5:cb:50:e0:04:bd:af:c5:93:c9:79:73:
                    18:3d:b2:1d:4d:ce:7b:f4:d7:72:2e:2c:57:16:09:
                    bc:31:0b:38:29:24:e0:61:59:21:60:db:74:37:2b:
                    19:b8:4e:83:b8:4d:73:2f:2a:51:49:8b:2c:5b:85:
                    de:dd:e1:03:a1:2e:ed:9e:ba:05:a6:9d:d2:db:67:
                    a6:fa:d5:6e:bf:63:80:8c:04:09:5a:58:b3:b5:cb:
                    1f:5a:f6:6d:91:4f:f3:73:6b:8e:f1:24:c3:8d:8e:
                    d2:28:67:89:6b:28:39:a9:dc:81:d7:47:d1:a5:2b:
                    96:5d:f9:7c:05:b7:db:70:bc:ea:b0:5d:17:85:7e:
                    7b:96:6b:7a:fb:f3:84:b3:f2:b6:1a:26:37:b7:22:
                    7b:57:fe:1c:2b:8d:b1:53:c2:e2:dd:ba:f3:79:17:
                    7a:32:04:27:f9:01:7c:f3:3b:2d:a3:a7:90:5e:72:
                    b3:61:1c:fb:b6:80:b1:1c:6f:ca:13:14:66:48:bf:
                    f8:4c:42:2d:73:60:83:45:d3:89:e1:ee:34:fa:da:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CA:6E:B4:6D:51:A1:75:EC:D2:11:20:54:26:86:07:D3:41:1A:11
            X509v3 Authority Key Identifier:
                keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/10DAF9348C2D11EFB9CC3812C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:74:29:8a:54:72:c3:5e:b4:1f:a0:0d:d3:eb:8d:81:d3:7c:
         0f:88:10:7c:89:ba:c4:21:f7:9a:5f:11:22:d0:8f:fd:57:0f:
         0c:fe:5f:1f:26:59:10:f9:ef:a2:0e:d0:9f:6e:ae:ca:c8:61:
         f4:66:70:3a:5d:22:33:45:3f:a1:96:d3:18:07:df:58:6f:42:
         43:77:5f:15:e4:50:54:2a:f4:7e:e6:8c:81:51:21:7c:00:3f:
         6e:fb:23:31:1f:99:56:f7:0e:a1:b7:2a:2e:25:76:b5:79:61:
         5b:4a:af:51:ad:03:0d:49:6e:1c:18:27:42:1a:c6:13:3f:93:
         02:96:2a:c2:9b:63:2a:47:53:52:dd:62:ef:4e:d1:8f:7e:2e:
         28:f9:47:b3:41:cc:7b:83:5e:2f:0b:b2:75:2d:43:12:bf:32:
         10:6c:0c:95:b7:5a:dc:4d:fd:e9:dc:a7:58:5e:4e:e9:94:1c:
         77:b9:16:01:22:1f:b7:9e:85:34:ac:0d:93:bf:5c:8f:48:b2:
         7f:df:52:49:5a:85:75:55:06:46:ee:dc:5c:5f:c9:ee:b5:1b:
         8c:e8:f3:02:6e:10:0c:73:35:85:79:6f:b6:59:d4:02:55:e1:
         3c:59:e0:11:96:a7:ea:26:a6:9f:f9:c0:f9:1a:18:5f:5b:b2:
         33:ac:ef:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:06:38 2026 by rpki-client