Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/36F0EF00FF2E11F088116B6D89EE528E.roa
File:                     36F0EF00FF2E11F088116B6D89EE528E.roa (raw, json)
Hash identifier:          asyvyY9ulZyscmgiLk0tQyl4+p5H7+mZpRKMbyfnw+c=
Subject key identifier:   6C:18:04:2D:5B:36:2B:E3:B7:E3:A9:ED:A6:18:60:28:4C:B7:F7:12
Certificate issuer:       /CN=A91612FE/serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
Certificate serial:       0124
Authority key identifier: C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/36F0EF00FF2E11F088116B6D89EE528E.roa
Signing time:             Sun 03 May 2026 06:38:43 +0000
ROA not before:           Sun 03 May 2026 06:38:43 +0000
ROA not after:            Wed 02 Sep 2026 00:00:00 +0000
asID:                     153395
IP address blocks:        160.191.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl
                          rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91612FE, serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
        Validity
            Not Before: May  3 06:38:43 2026 GMT
            Not After : Sep  2 00:00:00 2026 GMT
        Subject: CN=69f6ed73-474f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:79:74:dc:6c:cd:1b:f7:43:ad:78:a1:7d:
                    c3:1c:f1:67:a6:d3:fd:4a:ba:f6:37:95:06:17:ea:
                    02:02:56:7e:40:6d:64:2c:62:16:17:d3:df:52:cb:
                    36:a3:44:88:b4:6a:6e:a6:b7:00:fc:6f:61:e4:0e:
                    8a:e5:dc:1f:51:00:16:9e:53:08:c1:c5:54:e4:c4:
                    18:b4:c5:70:7f:f7:a0:20:c3:d9:ad:89:f3:87:0d:
                    e0:32:f5:e7:c1:4e:c7:ce:97:bc:5f:ed:a1:b5:bb:
                    7e:22:41:4c:de:b5:50:80:fb:2a:0f:f3:f7:2c:33:
                    10:71:02:4d:01:f9:74:a3:23:6e:cf:f7:41:0c:69:
                    5b:d4:7b:32:33:26:89:ea:19:61:c3:5e:5c:41:1a:
                    50:64:77:ba:cd:f3:bb:0b:4e:bb:10:cd:da:14:06:
                    18:ba:9e:50:61:58:29:ee:3f:10:37:b5:65:64:08:
                    31:dc:7b:ee:73:1d:13:d6:53:43:c2:15:94:b6:49:
                    b4:e7:c3:59:1f:3d:59:8c:da:10:3b:7f:7b:3b:3b:
                    d0:9b:dd:ab:d4:1d:67:22:3a:85:38:e7:11:8e:38:
                    8b:b3:81:da:35:46:c3:b8:25:90:a2:7e:3e:dd:d8:
                    eb:2d:9d:55:b1:5a:bb:a4:d9:34:05:03:a2:f8:6a:
                    d3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:18:04:2D:5B:36:2B:E3:B7:E3:A9:ED:A6:18:60:28:4C:B7:F7:12
            X509v3 Authority Key Identifier:
                keyid:C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/36F0EF00FF2E11F088116B6D89EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:17:29:c2:21:75:c0:f9:3c:fd:75:53:2b:b6:ab:62:c6:b5:
         79:70:45:7f:ac:e2:9b:d2:c9:da:58:c0:db:88:fa:57:de:53:
         20:a1:70:69:be:23:22:ff:f5:d1:66:86:b4:2f:ec:28:d2:d9:
         d2:83:bd:a9:f6:ef:f7:53:29:0c:5a:3f:b1:db:a9:fc:39:4f:
         83:98:b5:9c:d7:c7:2c:2a:a2:8c:de:ae:2b:5d:77:32:d6:c0:
         23:f9:51:76:e5:18:ea:4e:82:0f:eb:55:2d:ad:c2:b7:d3:97:
         d9:c0:b1:4e:c9:df:1e:63:80:7d:32:02:cb:ac:e9:6f:8a:09:
         68:d4:fb:53:40:10:80:9c:a7:07:83:c8:37:c7:04:6a:a8:6c:
         02:8e:8b:cb:27:f3:0b:08:c8:61:32:7c:56:b0:6c:f8:28:e6:
         c1:a7:7a:3c:0b:37:d7:a1:63:f9:18:4f:79:bb:b0:eb:8a:66:
         01:6b:22:b9:38:c5:c9:d2:21:2c:50:64:25:92:e1:a8:27:81:
         f0:c7:bf:1a:55:30:cc:55:8f:8a:03:46:81:9d:65:b3:f8:c4:
         7f:e5:09:8e:b8:94:8c:b2:ed:ed:a9:a2:d1:d5:8c:0f:13:73:
         80:c8:c7:1b:e5:58:25:36:39:30:4e:c8:d2:43:de:f0:df:71:
         80:98:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:29 2026 by rpki-client