Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/5C824FC6DB8211F1BD8754B42C66CEF9.roa
File:                     5C824FC6DB8211F1BD8754B42C66CEF9.roa (raw, json)
Hash identifier:          AapSKmxP9GCMyHnzDTlm1AoU5uQ77Wb0aYuDU0kgPQo=
Subject key identifier:   E2:DA:23:3D:2F:60:E8:81:C3:3F:B7:01:AA:96:A5:06:C2:87:D8:39
Certificate issuer:       /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial:       06F9
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/5C824FC6DB8211F1BD8754B42C66CEF9.roa
Signing time:             Sun 08 Nov 2026 14:40:37 +0000
ROA not before:           Sun 08 Nov 2026 14:40:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216138
IP address blocks:        150.107.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
                          rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785 (0x6f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
        Validity
            Not Before: Nov  8 14:40:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6af089e5-0af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:19:a8:cd:c4:61:5e:71:97:3c:7a:3d:bd:
                    ca:10:f8:d7:10:40:dc:49:62:9e:b9:cf:b1:b7:3c:
                    29:82:2e:b3:8c:cd:5b:83:4b:e9:12:e0:e2:f0:ae:
                    c5:22:60:93:b6:47:ab:df:00:b1:76:ea:24:90:53:
                    93:1a:d6:68:d8:bd:ff:6d:18:92:fe:80:c3:43:37:
                    b5:d6:f0:bc:d6:a7:c7:08:49:03:22:67:35:b4:fb:
                    63:97:e4:b3:fc:47:68:5f:08:6d:80:a2:70:5e:42:
                    54:5e:0f:61:5a:a2:7d:63:0d:4a:16:7e:c4:1f:77:
                    c6:11:11:32:e5:96:d2:29:e3:70:ab:a5:4b:ff:c4:
                    c1:68:46:ae:b8:18:94:96:91:03:e0:5a:91:ce:f0:
                    85:2a:79:6d:71:bc:4e:6e:ea:2c:c1:6f:b5:db:17:
                    46:1f:6a:c4:48:fa:c0:1f:5c:b5:dd:84:02:8e:be:
                    de:5e:83:d6:fa:ba:0c:d9:e8:b1:da:42:04:bb:6d:
                    a6:a6:66:3d:85:4d:7f:c7:48:ea:f0:c5:b7:87:66:
                    26:50:6f:e3:e7:33:75:86:d4:6f:9a:fe:08:9c:c8:
                    ab:cc:d3:2a:7e:75:6c:0f:a4:2b:0b:82:7a:b2:74:
                    6d:e1:2a:b9:15:77:d2:5e:11:67:c7:ea:6c:03:54:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DA:23:3D:2F:60:E8:81:C3:3F:B7:01:AA:96:A5:06:C2:87:D8:39
            X509v3 Authority Key Identifier:
                keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/5C824FC6DB8211F1BD8754B42C66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:40:20:3d:85:36:91:56:85:fd:13:84:ab:a2:1d:ed:6c:d4:
         17:ef:4d:1c:bf:99:ae:4e:59:71:d8:af:34:77:e1:53:5f:44:
         5d:97:41:5f:26:52:3d:38:63:0d:fe:f0:e8:be:e2:f1:85:28:
         91:7d:81:20:27:8e:fe:81:80:73:f9:af:3c:e8:af:e3:20:64:
         5b:ab:98:f9:c3:b5:05:d3:84:da:88:33:ef:35:7f:a3:45:26:
         a4:83:08:cc:f7:0b:be:5f:49:4c:c6:41:d9:b9:72:92:cd:3c:
         e9:c4:ce:79:db:8b:4a:33:ad:4b:ae:42:f4:da:26:a0:44:28:
         9f:f1:c1:79:97:db:33:e2:79:63:b7:4e:95:10:54:37:18:42:
         44:86:26:6a:18:a2:41:a5:45:37:1f:da:80:d4:72:5d:dc:71:
         92:e3:c2:e7:61:44:71:be:9e:19:88:19:78:d6:0a:de:5d:9c:
         34:7a:a6:a4:32:5b:bb:b2:ac:c2:76:5e:b1:84:94:c1:92:1d:
         d2:8c:07:96:56:cc:ae:9f:9a:e4:c2:99:ef:5a:ff:74:b2:91:
         7d:cd:21:f8:07:f4:52:00:c2:fb:30:ab:d8:ce:15:ac:6d:00:
         01:08:4e:08:0d:08:75:ee:18:39:e1:b1:1f:c1:68:dc:19:f0:
         e2:3c:0f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:17:21 2026 by rpki-client