Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/5BE5B706DB8211F1BD8754B42C66CEF9.roa
File:                     5BE5B706DB8211F1BD8754B42C66CEF9.roa (raw, json)
Hash identifier:          /zhHXzWLW9ZaPbY9nNdyKIZ6lptK/n3+Ymk8gPq5HmI=
Subject key identifier:   51:21:0E:8C:53:5B:E1:1B:83:5F:85:8F:9C:65:6B:3B:5E:54:E3:54
Certificate issuer:       /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial:       06F8
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/5BE5B706DB8211F1BD8754B42C66CEF9.roa
Signing time:             Sun 08 Nov 2026 14:40:36 +0000
ROA not before:           Sun 08 Nov 2026 14:40:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        150.107.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
                          rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 22:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1784 (0x6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
        Validity
            Not Before: Nov  8 14:40:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6af089e4-40a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:0f:b0:8e:27:f7:be:7f:47:8e:74:b4:41:
                    1b:2a:c7:2d:2d:10:6d:01:55:0f:71:ef:3c:90:81:
                    16:62:84:52:5e:b0:af:3c:e2:c4:49:c2:d8:eb:a3:
                    a2:1b:2a:cd:1a:03:78:6f:19:ce:59:2f:c9:93:3a:
                    9f:cd:a8:7e:15:5a:4b:5d:5c:00:70:1c:0c:1f:f7:
                    4d:d1:e6:ef:47:f7:3c:46:0d:ef:7f:59:9e:28:19:
                    51:ad:b8:31:15:7d:1f:7e:e2:53:55:98:9a:c7:a7:
                    4f:da:43:7b:14:75:ae:c0:05:4a:af:3c:2a:e5:f2:
                    94:b4:ac:b8:ab:34:d4:a2:95:a1:11:19:d0:b8:8c:
                    d2:39:b7:0a:de:2b:62:40:05:76:3f:a7:ab:7d:c9:
                    9f:aa:d2:7a:13:60:3e:14:75:96:e7:5d:a4:63:5c:
                    c7:f9:0b:98:64:05:a7:14:2e:b2:85:28:5f:56:f9:
                    ae:81:57:c6:c7:24:05:c9:14:bb:62:a5:d5:33:69:
                    6d:6e:9f:fc:2b:cc:fb:02:93:5e:34:e3:9e:5d:da:
                    cc:9a:78:e5:bd:54:a4:52:7b:58:97:77:94:d3:90:
                    54:52:83:2b:b0:f6:5d:89:49:9c:4f:6d:3e:5d:35:
                    4f:95:b0:3f:4f:68:0b:43:e9:96:cb:3d:77:d6:0d:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:21:0E:8C:53:5B:E1:1B:83:5F:85:8F:9C:65:6B:3B:5E:54:E3:54
            X509v3 Authority Key Identifier:
                keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/5BE5B706DB8211F1BD8754B42C66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e9:9a:04:e0:41:4f:85:cc:1d:80:40:05:f9:7f:fd:de:73:
         c1:5e:c0:6e:5b:54:ed:9c:bc:93:58:be:25:ae:e3:7a:31:e9:
         75:d3:d5:01:a8:19:64:e2:0b:b5:51:68:c2:4b:03:87:ba:86:
         fa:bf:38:ed:dc:31:1d:72:57:be:c4:23:fd:99:38:43:8b:f7:
         49:e4:f1:ec:a2:ba:c0:79:0c:9d:9f:dc:76:b1:39:6b:0d:86:
         3b:9c:96:1e:2d:55:9a:ab:47:71:02:f4:cd:6e:6a:2e:51:7d:
         40:36:29:56:68:62:f3:da:6c:42:1a:69:ee:8a:cb:ac:39:33:
         10:ea:80:ec:af:11:cb:8a:88:a1:bb:04:21:70:2e:f3:d0:9b:
         37:94:6a:5e:b9:53:fa:ca:bd:ca:a8:33:46:f4:84:46:e8:92:
         b0:fe:61:da:cc:9a:4d:ca:7c:3f:07:2b:71:53:1b:60:52:8c:
         6e:6c:14:4b:48:82:68:b5:4b:17:e1:a2:56:07:58:4c:ab:d7:
         cb:f5:72:13:2a:36:a5:1f:99:65:c8:4b:2e:0b:fe:9e:02:a9:
         89:a7:18:38:98:71:ac:ec:58:01:7a:6f:52:57:bf:07:7a:bd:
         8f:cc:6a:1a:bf:2e:e5:9e:1b:bf:29:16:4a:fb:de:84:e7:be:
         70:4c:b1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:12 2026 by rpki-client