Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/3590B0F65B9B11EFB90EBF42C4F9AE02.roa
File:                     3590B0F65B9B11EFB90EBF42C4F9AE02.roa (raw, json)
Hash identifier:          fj+mLgj2Yk2+WF3JcBpDSbdPYmQAKBNWLbe5hjRFvC8=
Subject key identifier:   AB:79:11:4A:66:DE:40:79:6A:86:C2:47:D3:34:0A:8C:09:06:4E:43
Certificate issuer:       /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial:       01A3
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/3590B0F65B9B11EFB90EBF42C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 04:55:53 +0000
ROA not before:           Thu 03 Sep 2026 04:55:53 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     153197
IP address blocks:        160.30.95.0/24 maxlen: 24
                          160.187.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
        Validity
            Not Before: Sep  3 04:55:53 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a98fdd9-43e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:52:1b:5c:2d:a9:40:49:e7:eb:1f:46:db:
                    f6:76:5a:09:c1:80:dd:61:90:88:b9:84:30:1b:3d:
                    33:1f:39:d3:b5:2b:22:a2:4f:b5:55:11:2d:b8:ef:
                    58:ed:f9:c8:b3:06:d6:ca:02:ca:aa:de:69:e8:37:
                    b5:19:63:c3:4a:ef:6c:32:38:61:03:6e:4c:d4:fe:
                    a8:11:0f:92:55:0c:3a:45:bf:05:eb:4b:0c:23:f8:
                    21:71:29:5a:d3:25:04:2c:53:13:cd:f3:bb:37:ab:
                    b4:5a:24:40:09:f5:63:17:b6:46:ba:04:b4:0f:ee:
                    42:e3:55:1a:aa:27:8e:94:44:65:dc:ed:65:09:4c:
                    e8:c1:df:a3:9f:9e:24:f8:54:2e:e0:55:9a:d2:a8:
                    8f:b7:93:04:30:0a:27:15:f2:3b:fe:53:fe:1f:78:
                    3e:9f:48:55:59:ee:4f:ca:c8:ee:00:86:98:42:e9:
                    55:c4:8b:c1:ac:33:1b:d0:d7:bb:d9:97:7c:3e:0b:
                    45:9a:d1:fe:91:1c:fe:43:40:c4:a5:3a:d4:85:f3:
                    49:67:4d:7e:b5:8f:3f:c3:87:5c:00:24:38:b9:11:
                    c1:03:c7:af:3f:82:40:03:79:22:28:65:f6:65:09:
                    a0:18:ab:a4:06:90:c1:3a:1e:9e:fc:ee:ca:0f:17:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:79:11:4A:66:DE:40:79:6A:86:C2:47:D3:34:0A:8C:09:06:4E:43
            X509v3 Authority Key Identifier:
                keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/3590B0F65B9B11EFB90EBF42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.95.0/24
                  160.187.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:5a:a4:7b:42:ce:12:a7:ff:47:5b:07:3c:d5:ad:5e:cf:cd:
         a0:a6:0c:db:16:fd:92:29:c4:52:92:35:01:cf:8f:f4:2f:11:
         01:da:62:06:cf:49:69:64:55:99:29:79:cf:a0:bd:b4:1a:6a:
         2b:26:6b:66:67:8f:99:da:20:0f:89:dc:82:7a:42:4c:c9:db:
         db:d3:61:aa:47:50:17:1b:84:99:ba:c6:ef:53:0a:1a:72:3a:
         63:39:6c:59:9a:2b:95:f0:5a:3d:0d:8d:d9:5f:96:9a:61:87:
         fb:80:43:c2:14:6a:ea:40:0f:54:fd:0b:ab:0b:2b:33:b6:74:
         d4:19:c3:c3:a0:b6:bf:9b:77:f9:53:3a:af:3b:18:1d:aa:e0:
         48:c1:30:fa:5f:d2:9f:ce:06:a1:20:08:c1:88:dd:12:62:70:
         60:16:ed:3a:64:e1:d6:44:25:ec:3c:8a:8e:dd:23:42:29:e3:
         78:d1:2c:de:90:f7:a2:51:6a:20:39:40:ac:a1:0f:72:2c:e4:
         ad:d9:c0:f7:ec:f4:4e:26:b5:36:96:01:58:b3:81:df:ab:06:
         4e:a9:d0:c4:5f:70:0f:20:e8:5a:a8:e5:25:e1:1b:21:3d:54:
         16:94:c6:8e:1d:8a:b3:69:70:7e:a5:aa:92:14:e0:d1:40:aa:
         09:36:47:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:40:37 2026 by rpki-client