Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150064/7358404260AE11F19E4758CC7B47A888/40F8C2006BAA11F18A57CEFE7347A888.roa
File:                     40F8C2006BAA11F18A57CEFE7347A888.roa (raw, json)
Hash identifier:          qtmIHHzSPkvLyZRHcieXLBroP7uYBlbuMhKLVToTAhI=
Subject key identifier:   2A:E9:6A:A9:60:F5:F3:61:84:16:FF:A9:67:E7:64:F7:66:93:22:02
Certificate issuer:       /CN=A9150064/serialNumber=EBF3DB5CC8A27F7D58B062ECA7C8CA572820427B
Certificate serial:       1A
Authority key identifier: EB:F3:DB:5C:C8:A2:7F:7D:58:B0:62:EC:A7:C8:CA:57:28:20:42:7B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6_PbXMiif31YsGLsp8jKVyggQns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150064/7358404260AE11F19E4758CC7B47A888/40F8C2006BAA11F18A57CEFE7347A888.roa
Signing time:             Sat 11 Jul 2026 10:37:17 +0000
ROA not before:           Sat 11 Jul 2026 10:37:17 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     41935
IP address blocks:        160.231.132.0/22 maxlen: 22
                          160.231.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150064/7358404260AE11F19E4758CC7B47A888/6_PbXMiif31YsGLsp8jKVyggQns.crl
                          rsync://rpki.apnic.net/member_repository/A9150064/7358404260AE11F19E4758CC7B47A888/6_PbXMiif31YsGLsp8jKVyggQns.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6_PbXMiif31YsGLsp8jKVyggQns.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150064, serialNumber=EBF3DB5CC8A27F7D58B062ECA7C8CA572820427B
        Validity
            Not Before: Jul 11 10:37:17 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a521cdd-fa7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:11:ea:6d:3f:3f:58:b4:5f:bc:ef:fc:c7:dd:
                    8c:38:42:09:92:b6:51:2f:1d:db:50:2e:df:2a:2b:
                    1d:f0:d5:8c:c2:89:55:5a:0a:0a:9b:60:f2:ad:f6:
                    51:60:08:73:48:d7:d9:87:68:e0:8e:99:7a:5c:2f:
                    a1:5e:f3:95:e6:cb:2e:23:6e:10:ff:39:cf:cb:66:
                    45:a1:78:0a:eb:a7:53:77:6e:74:f2:3f:10:2c:7b:
                    2e:50:45:ff:ea:9b:f9:64:22:30:8c:ab:18:7c:53:
                    6d:7c:ee:22:9c:40:b1:f0:16:2f:f0:01:dd:49:92:
                    96:f9:b7:56:1b:35:a1:52:25:9a:ef:6f:a6:d4:a4:
                    7c:85:e5:a3:00:eb:7a:51:d3:55:55:d5:e4:88:ff:
                    ca:09:2c:85:e0:88:08:86:d2:0e:93:23:1b:5d:17:
                    2b:71:9b:d8:77:51:c0:93:a5:89:e2:e2:28:ff:f6:
                    04:f4:af:54:c9:91:1b:0f:b9:f6:ab:d6:cf:c5:ba:
                    3f:39:1a:af:70:23:be:a9:b0:aa:ff:5f:ae:b5:78:
                    e9:f7:21:ec:2a:26:57:ab:b0:7d:74:88:68:39:6f:
                    fc:a4:35:7b:fe:03:8e:cb:1b:71:a4:79:f0:bb:82:
                    3b:66:cc:bd:bf:41:0b:ab:ea:0a:69:aa:c5:55:e6:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E9:6A:A9:60:F5:F3:61:84:16:FF:A9:67:E7:64:F7:66:93:22:02
            X509v3 Authority Key Identifier:
                keyid:EB:F3:DB:5C:C8:A2:7F:7D:58:B0:62:EC:A7:C8:CA:57:28:20:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150064/7358404260AE11F19E4758CC7B47A888/6_PbXMiif31YsGLsp8jKVyggQns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6_PbXMiif31YsGLsp8jKVyggQns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150064/7358404260AE11F19E4758CC7B47A888/40F8C2006BAA11F18A57CEFE7347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.231.132.0-160.231.139.255

    Signature Algorithm: sha256WithRSAEncryption
         35:85:ee:92:53:aa:40:28:60:82:85:3b:fc:7e:72:01:c5:78:
         70:21:61:7a:87:bc:34:ba:34:bb:01:d7:ac:17:a1:3e:32:2f:
         a6:31:93:f5:0a:49:2f:25:a7:d8:1c:d4:14:8b:ef:16:00:84:
         bb:cf:91:36:d7:5c:51:22:2e:6a:3b:b5:ed:55:e2:ac:bc:b7:
         f7:e8:8e:e8:d6:36:bd:27:e6:5d:28:ac:77:47:a6:32:c7:80:
         65:7e:16:3b:a2:60:7b:2b:6b:51:04:2e:9f:fb:94:73:23:13:
         05:fc:d0:2b:dc:93:97:c9:a5:84:5e:b7:0e:0b:d7:69:8c:15:
         73:f4:82:ba:b8:7e:63:b3:b6:d1:a3:57:46:71:cd:f9:b2:78:
         ad:f9:bf:a9:fa:04:03:d4:94:37:8f:07:d8:94:51:8d:96:65:
         db:68:d4:83:4a:9c:86:e9:ff:8f:4f:fb:ee:df:40:06:bd:a0:
         68:5a:23:9d:b8:85:56:2a:62:18:fb:82:f2:03:01:5c:48:34:
         17:88:3b:ee:0c:2a:99:88:5d:e1:e3:a1:cf:c1:7f:20:65:92:
         ba:a2:7a:d7:10:81:e0:56:47:af:35:10:e0:65:5d:2f:b3:8b:
         41:34:68:43:3d:77:a7:b0:df:37:29:df:6b:67:4f:46:f8:6a:
         38:0d:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:13:33 2026 by rpki-client