Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/887E73265B9A11EF80F47C41C4F9AE02.roa
File:                     887E73265B9A11EF80F47C41C4F9AE02.roa (raw, json)
Hash identifier:          y6lsTAzxceftnb0UckbxcnuqjkGYgeTxQZKU2zv7Tfc=
Subject key identifier:   0D:DD:C3:57:47:DD:2E:3A:EC:C3:F5:03:2D:DB:9F:17:8C:14:F2:57
Certificate issuer:       /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial:       013F
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/887E73265B9A11EF80F47C41C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:34:21 +0000
ROA not before:           Tue 15 Jul 2025 06:43:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     10143
IP address blocks:        160.30.95.0/24 maxlen: 24
                          160.187.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
        Validity
            Not Before: Jul 15 06:43:18 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a591dd-a55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:05:62:7e:53:f1:4d:e9:69:12:f0:d7:a2:
                    af:3a:47:54:83:0a:eb:56:34:cf:4a:7a:69:51:ba:
                    f1:0b:db:24:da:9f:a8:84:7e:73:94:fc:5d:00:46:
                    48:df:78:59:01:f9:ab:59:7d:10:ab:fe:b7:44:5d:
                    da:ab:63:07:81:8f:ae:2b:26:bd:cc:23:7d:dc:44:
                    9d:19:89:8b:d8:a2:05:fb:11:55:21:7e:d2:fd:5e:
                    c6:d9:d6:3b:91:40:16:79:58:0b:4d:4f:ff:58:67:
                    03:cc:fa:80:26:37:7d:6b:76:ce:b4:ea:ad:eb:d8:
                    ba:a0:73:05:2a:43:2e:a0:20:90:ec:7c:aa:e3:55:
                    3c:ec:f7:70:09:31:00:4d:17:60:38:df:24:44:2f:
                    d5:8e:1e:e7:6e:13:45:37:66:83:2e:c9:1e:b7:60:
                    19:a8:9a:7e:95:84:2b:85:1a:3d:3a:1e:b2:d8:da:
                    7c:15:ac:1b:28:07:62:18:dc:23:b2:ac:a4:5d:ab:
                    60:fe:e4:2d:88:30:6a:b8:97:20:04:0b:96:03:d6:
                    c8:c4:1d:e4:7b:9e:2d:41:88:e2:81:a3:50:86:16:
                    7c:01:c5:4f:28:38:50:58:11:6b:9d:48:af:f8:ad:
                    62:8c:41:2c:c8:b7:2c:64:62:a3:9b:da:92:e5:1d:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DD:C3:57:47:DD:2E:3A:EC:C3:F5:03:2D:DB:9F:17:8C:14:F2:57
            X509v3 Authority Key Identifier:
                keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/887E73265B9A11EF80F47C41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.95.0/24
                  160.187.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:a0:c1:67:06:13:30:09:51:1f:16:2b:e9:96:06:f9:17:
         b2:38:d7:83:b4:64:1c:97:c4:27:b3:7b:96:1c:b2:8f:af:e6:
         60:18:bd:38:e1:82:f7:2f:cf:1f:ef:1f:04:09:5f:52:a9:e8:
         8b:4c:bf:ac:3d:ee:42:89:30:78:35:28:20:b0:69:6c:96:ed:
         47:1b:70:16:50:bb:aa:37:fa:81:04:22:46:f9:6f:7b:2a:75:
         d2:d4:2c:ae:7c:90:76:ff:4d:d8:3b:69:7a:b3:8b:a3:3b:ad:
         37:50:8e:57:2d:02:fa:9a:c1:1f:96:4d:ae:98:94:f7:34:63:
         1f:13:80:cc:e9:ad:8a:0d:18:10:a2:e7:d5:38:5c:9f:66:e9:
         b8:ad:60:be:72:e0:0f:11:11:20:ff:56:0b:5b:9c:fa:4b:45:
         34:4e:71:86:b1:20:2e:eb:48:25:01:63:77:56:ab:0a:7b:a3:
         5d:38:f4:6a:91:98:f9:48:59:c8:62:08:76:2e:31:bf:6e:c8:
         01:57:bc:7a:d0:af:fb:22:8a:97:69:4b:94:78:40:6b:58:e5:
         ae:02:da:42:2b:e5:7e:41:68:c1:49:c5:ec:21:36:c0:0d:38:
         f5:39:74:84:56:6c:ff:94:ac:ca:23:f2:b1:5f:bd:ff:ed:fc:
         c2:6d:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:48 2026 by rpki-client