Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/C06D45B6961611F0870D4413C4F9AE02.roa
File:                     C06D45B6961611F0870D4413C4F9AE02.roa (raw, json)
Hash identifier:          hIpv58h7Px9PA6uLUl6YRPJ1ini2ySNj91INQdwC5XY=
Subject key identifier:   3F:56:5A:D4:15:05:5B:4A:B9:B1:41:10:B9:CE:8E:60:A6:44:35:1F
Certificate issuer:       /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial:       0153
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/C06D45B6961611F0870D4413C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:03:44 +0000
ROA not before:           Sat 20 Sep 2025 11:41:31 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        160.22.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
                          rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
        Validity
            Not Before: Sep 20 11:41:31 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a6d0-46c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:33:c0:59:87:5c:71:f7:3c:fd:d2:df:3d:
                    db:0a:b7:a0:64:45:80:a7:e6:5f:02:8d:70:55:37:
                    84:c1:da:80:a3:9f:ad:6d:8e:56:7b:d6:cf:41:82:
                    ff:2b:2a:c1:ff:8a:ef:9b:a8:eb:89:29:a9:6a:55:
                    2f:b3:47:4d:86:c9:38:14:2f:3b:7e:66:e7:bc:91:
                    e9:96:7b:ce:b3:27:0e:40:1d:88:3e:56:03:53:8b:
                    2d:78:0b:05:ff:03:1e:f3:49:ce:5a:8f:29:f8:40:
                    d5:40:fe:9e:76:96:a2:a2:0d:33:81:e5:c8:37:06:
                    59:96:17:6f:4a:cf:6a:7b:94:d0:89:26:7a:0a:04:
                    c0:46:40:d4:9e:39:54:01:21:55:e5:58:58:f8:47:
                    81:dc:d1:ab:96:2e:53:dc:49:90:87:3f:ca:41:17:
                    86:91:03:8b:f0:da:e9:ab:3c:22:db:84:b8:38:02:
                    c4:93:81:36:24:6f:f1:88:8f:d4:02:1f:64:72:cf:
                    ba:21:6f:5c:d9:44:32:d0:72:10:fd:c3:00:b0:4e:
                    f4:3b:db:7b:a9:74:4b:50:e6:8c:77:48:52:b7:59:
                    0b:b7:9d:a2:20:96:5f:f3:33:41:21:32:0f:96:01:
                    35:b0:bc:5d:c0:c9:3e:8e:6a:56:9c:01:8e:1c:bb:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:56:5A:D4:15:05:5B:4A:B9:B1:41:10:B9:CE:8E:60:A6:44:35:1F
            X509v3 Authority Key Identifier:
                keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/C06D45B6961611F0870D4413C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ef:fc:c4:b7:fb:e0:cb:a9:fc:d5:f4:d0:79:3d:d2:19:fe:
         5d:bb:ce:71:32:7a:ac:79:27:dd:b7:e6:21:33:d2:99:e5:62:
         a1:ce:0a:28:fb:9a:13:4d:a7:8e:bc:30:3d:03:09:04:35:9c:
         f8:72:cb:ec:58:eb:73:e8:a3:70:92:7c:f4:aa:bc:21:cf:3a:
         65:5a:ed:b8:08:9b:8a:45:a2:ad:18:5d:73:24:e0:ba:50:1b:
         4c:ca:26:b6:61:59:38:25:b5:0d:2a:00:21:62:38:01:66:92:
         a5:12:5f:a1:76:e7:a0:cf:b3:61:43:25:15:a5:fb:03:58:e7:
         54:49:ae:9a:51:f0:2f:c7:75:7e:ce:47:3f:15:2e:a8:92:ae:
         72:0b:e9:c6:dc:0e:53:40:33:e4:74:a1:36:83:89:0c:f1:52:
         04:79:1a:2b:5b:2f:05:02:10:1f:5a:47:f3:66:52:66:12:d3:
         9f:29:6c:2d:21:85:f8:bf:ed:87:60:ee:4d:32:30:78:38:f0:
         6d:98:94:df:ed:0e:f1:11:df:58:78:98:ab:31:f5:f4:1d:e1:
         74:b9:4f:34:4b:8f:fe:69:9d:50:99:05:f5:13:0c:28:2f:d8:
         96:e5:1a:c2:67:29:cb:62:d7:03:ab:dd:79:e8:8c:cd:cb:f6:
         fc:78:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:20 2026 by rpki-client