Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa
File:                     D4BAE68E853311F0AC0D4852C4F9AE02.roa (raw, json)
Hash identifier:          mkKRrEx4tGN1QjkcXuh0je4kn3RhkHgRAfuqQaJKd/w=
Subject key identifier:   15:96:7F:EF:72:AB:BF:9F:1E:73:6B:11:A2:22:D7:F2:DB:46:7C:1A
Certificate issuer:       /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial:       01AA
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa
Signing time:             Thu 29 Oct 2026 05:52:48 +0000
ROA not before:           Thu 29 Oct 2026 05:52:48 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     141342
IP address blocks:        160.30.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
                          rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 04:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
        Validity
            Not Before: Oct 29 05:52:48 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ae2df30-bab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:97:8c:c1:fc:fc:c2:84:a5:7d:67:13:5b:
                    02:6e:56:a7:2a:97:5a:89:72:15:44:94:28:d1:2b:
                    ba:91:8a:02:47:27:7d:bd:a4:51:ee:d8:61:c9:88:
                    1e:3b:6b:e0:3e:75:b6:0d:97:bb:39:07:3f:d5:7e:
                    8f:8a:9b:bb:7b:00:55:d2:9e:05:9f:1f:97:8a:f5:
                    42:ba:d7:da:b6:6f:f8:3e:64:df:0b:a9:cf:bc:0c:
                    10:de:57:0b:ac:ec:15:08:be:c9:41:fe:8d:65:8b:
                    35:2c:96:f8:66:30:f9:f0:75:e5:5d:a9:6b:69:c6:
                    d3:59:86:e2:08:e8:e7:fb:0b:ee:53:89:2c:15:1a:
                    e1:70:b9:07:23:6b:5f:42:89:51:ca:aa:71:5f:4c:
                    0d:02:3a:43:c1:91:45:07:80:b0:f6:5c:77:fc:9e:
                    a8:c2:59:78:45:df:99:0c:40:e3:c4:af:a6:ff:ab:
                    65:94:94:aa:92:fd:5b:09:bc:fa:4e:5a:66:ae:56:
                    0f:7a:78:81:4e:24:cd:7b:22:8a:be:44:8d:ce:32:
                    b2:2d:58:25:fe:fa:05:35:6b:99:c2:d5:22:d6:e7:
                    9c:39:c7:ae:4f:e2:e6:f2:a0:52:c6:d1:37:22:0e:
                    14:96:02:64:2f:54:ec:e4:a8:c7:09:9a:40:d3:29:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:96:7F:EF:72:AB:BF:9F:1E:73:6B:11:A2:22:D7:F2:DB:46:7C:1A
            X509v3 Authority Key Identifier:
                keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:a9:b6:35:ec:62:18:db:1d:a5:50:e6:4f:df:27:74:c9:79:
         9b:32:13:35:08:76:84:71:07:c2:5b:9d:6a:a3:43:a3:85:fe:
         be:4e:3a:4a:b2:09:7b:db:08:17:13:48:81:58:13:5f:b4:63:
         66:86:17:c5:65:14:1a:43:a2:f4:47:c1:74:2b:60:cf:15:ea:
         11:f8:7d:e0:45:d0:6a:3f:1d:fe:f1:46:f5:3d:61:20:8c:13:
         2d:35:23:26:70:16:f6:a1:a2:19:57:76:d8:86:9a:e8:0e:4c:
         25:e0:69:da:97:eb:cd:af:b3:39:43:f6:a4:ce:d9:ed:f2:3c:
         dc:14:e5:82:5c:6e:4b:4d:68:46:e2:55:99:f3:31:f2:fa:b8:
         c0:25:d0:b0:cf:60:af:f5:2d:a7:26:2c:bb:d1:d8:ea:ce:5d:
         55:c4:14:84:a9:68:0a:6a:23:89:4e:ed:cf:3c:d2:01:81:a6:
         35:59:bd:c3:b7:5d:cb:fe:b9:d1:94:de:81:fa:5e:64:7a:bd:
         6e:46:df:c5:20:b1:90:0b:e6:d1:41:8c:e4:26:4b:ed:73:80:
         f9:2a:80:b5:6b:0b:fe:da:71:9d:cc:13:da:57:fc:ec:bd:77:
         5b:79:2d:4c:05:6c:bb:70:6e:0d:ca:61:04:3b:cd:f6:0a:b9:
         ee:41:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:34:47 2026 by rpki-client