Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/C12E80FC84AC11F188069C008EA30FBC.roa
File:                     C12E80FC84AC11F188069C008EA30FBC.roa (raw, json)
Hash identifier:          WPKl0RmubRsg2zOYR5o/LCEZKLKwHEqKhd2tRJMYw50=
Subject key identifier:   B1:81:3A:11:76:38:06:D8:BB:DF:4C:71:BD:AE:17:D2:5E:6C:F7:EA
Certificate issuer:       /CN=A91629D4/serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Certificate serial:       04
Authority key identifier: CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/C12E80FC84AC11F188069C008EA30FBC.roa
Signing time:             Tue 21 Jul 2026 02:34:54 +0000
ROA not before:           Tue 21 Jul 2026 02:34:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154018
IP address blocks:        160.236.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl
                          rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629D4, serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
        Validity
            Not Before: Jul 21 02:34:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a5edace-d5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5e:40:ec:05:15:51:9c:24:d1:1f:32:91:21:
                    c2:62:30:d1:e0:f8:0a:f2:17:28:05:9f:93:11:f9:
                    90:8e:55:2c:97:3a:ea:3b:3a:8c:4e:f5:2f:85:b2:
                    4b:cc:40:0c:c2:95:cb:b6:05:52:19:0e:18:93:54:
                    ad:b8:c1:39:ea:87:b7:b1:1d:9b:a9:35:8d:51:4c:
                    88:07:b6:f6:93:88:e9:22:d2:99:9e:b5:b6:9b:e0:
                    82:e0:7c:67:57:70:bf:ac:84:a0:ac:01:da:0f:40:
                    75:3b:48:64:21:6a:58:3a:0c:a5:bd:10:a5:7c:18:
                    79:49:3a:d9:c5:d9:ca:57:bf:85:cb:52:27:21:9d:
                    23:dc:44:73:8c:e0:6e:c7:2f:09:79:65:df:8f:c7:
                    d6:9c:f1:24:de:b8:0c:02:33:f0:03:d5:15:0f:64:
                    58:16:e4:ee:9c:fd:8d:d6:d8:3c:9a:13:80:c5:4b:
                    66:20:8b:17:83:3a:bd:c6:93:b6:a4:12:73:8c:af:
                    5e:72:1e:97:c2:2c:47:74:c7:22:45:3c:9f:e4:25:
                    76:78:97:bb:86:01:f2:38:d8:32:79:38:c2:f3:72:
                    91:c7:51:ab:23:f7:90:49:71:b5:38:16:6b:17:93:
                    1f:98:9f:bf:42:01:7e:80:96:4e:1b:43:4e:bf:de:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:81:3A:11:76:38:06:D8:BB:DF:4C:71:BD:AE:17:D2:5E:6C:F7:EA
            X509v3 Authority Key Identifier:
                keyid:CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/C12E80FC84AC11F188069C008EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:dd:12:d6:fa:43:a1:4b:d1:22:4e:31:af:bc:50:9a:fa:26:
         46:75:62:f2:0f:f3:53:89:87:34:27:96:eb:bd:b3:1d:a0:0c:
         f6:7f:c8:00:0f:08:f2:ec:8e:07:87:80:27:60:b4:04:33:f1:
         01:83:e4:84:14:f7:2b:1a:9e:0a:9f:89:df:c8:c9:ac:39:08:
         26:79:68:a5:e8:67:0a:e0:eb:14:52:dd:57:49:f0:ae:96:43:
         0e:22:e2:8e:dd:60:cb:8e:fd:dd:f0:08:33:60:3b:48:33:1b:
         99:da:db:4e:2a:c0:5f:f3:58:2e:8b:8f:ac:2b:c6:d4:73:ac:
         d0:a8:b5:84:65:d9:1f:e2:99:99:47:62:0d:88:0a:3a:86:1a:
         d9:24:85:04:22:0b:0a:52:3f:b5:f6:89:53:66:c6:40:1e:97:
         1b:f9:c2:56:2e:57:0e:3a:de:92:fa:44:ed:a3:5a:8d:2d:ba:
         33:2e:cf:b9:73:f2:78:b0:f4:b1:65:68:6b:3e:1e:66:d8:3d:
         7f:a3:a8:f2:b5:d2:b7:8a:2f:5c:15:04:59:2b:9c:61:6c:f2:
         9f:bb:6b:2c:4d:76:25:b0:ba:0d:8d:0e:cc:21:38:47:df:fa:
         b3:06:a6:ef:49:9c:65:97:f8:af:32:30:a2:22:54:0a:64:14:
         b5:0b:27:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:28 2026 by rpki-client