Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/27AEE7D0979D11EFB1426839C4F9AE02.roa
File:                     27AEE7D0979D11EFB1426839C4F9AE02.roa (raw, json)
Hash identifier:          twgsz5Q6iiubd4EibPhLRim99/LcmTZJUiWIqWZR1Xw=
Subject key identifier:   13:9B:62:9B:5C:77:25:D4:B4:9F:24:F0:EC:DA:11:A7:00:56:C4:8D
Certificate issuer:       /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
Certificate serial:       0138
Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/27AEE7D0979D11EFB1426839C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:51:37 +0000
ROA not before:           Tue 23 Sep 2025 06:25:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131108
IP address blocks:        160.30.62.0/23 maxlen: 23
                          160.30.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl
                          rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
        Validity
            Not Before: Sep 23 06:25:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a595e9-0cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:0b:48:45:2a:1a:d7:48:2a:ee:ed:30:78:
                    c6:09:ef:0a:82:38:40:fc:a4:4a:36:10:30:75:99:
                    2f:2a:23:4d:61:dc:f6:d2:b7:0b:51:f3:5a:27:45:
                    50:68:f4:fd:61:bc:b3:cd:17:64:e6:f9:8b:c9:9f:
                    8a:b4:34:55:6d:91:2d:ac:20:b8:23:b2:17:da:37:
                    09:c2:29:db:24:d4:48:3c:b5:94:33:22:8d:f5:e0:
                    36:71:7f:38:e1:4d:2a:42:eb:01:0d:36:a7:79:3c:
                    37:c9:70:e7:4f:84:f6:d3:a3:7c:b3:05:de:2f:d7:
                    e4:fc:ce:51:49:53:3e:c3:52:80:36:ff:4f:af:84:
                    6d:e9:dd:78:05:41:ff:0e:17:22:5c:22:9e:aa:b4:
                    18:ab:00:de:59:f1:2e:e8:7b:9e:8c:d6:1e:05:8a:
                    c1:29:61:0d:64:d0:ce:22:4b:00:2d:c7:33:70:a8:
                    05:ca:9d:84:a6:c2:cf:13:5c:d3:88:38:4b:44:55:
                    51:f9:8b:a4:74:bd:59:bc:de:d2:57:3c:8e:72:d3:
                    b9:54:c5:c9:a3:83:0c:eb:f8:d7:20:40:ac:70:ab:
                    b5:f5:1d:04:13:d7:d7:a3:ab:24:8a:f9:f5:49:e7:
                    3d:20:d8:17:cf:59:99:26:ab:e2:95:26:4a:a1:57:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9B:62:9B:5C:77:25:D4:B4:9F:24:F0:EC:DA:11:A7:00:56:C4:8D
            X509v3 Authority Key Identifier:
                keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/27AEE7D0979D11EFB1426839C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:73:d1:eb:38:cb:b9:be:e4:72:f2:30:e4:dd:de:1e:cb:80:
         be:77:3a:95:80:9d:ad:06:f6:65:d7:97:cd:c2:0d:9e:c1:cc:
         14:3a:97:58:3e:fd:b0:33:54:af:d9:8b:ad:fc:ba:44:8a:cb:
         90:cc:61:54:8f:94:f0:aa:e2:7e:89:7e:79:15:cc:14:b4:fe:
         60:c8:56:9f:e7:e4:ba:d6:47:94:d0:43:7b:82:a7:b4:4c:39:
         67:15:87:0f:68:11:fa:8d:71:05:88:fa:5f:bd:2b:2f:95:8e:
         c1:f4:93:53:55:5e:a1:5c:36:00:81:cd:0f:d7:33:70:b9:15:
         6a:fd:e6:e8:2e:7b:dd:e1:8d:da:39:36:42:61:47:e2:f8:07:
         9b:2f:c8:43:94:0c:04:2d:90:ed:d5:3e:2b:bc:ff:55:48:f2:
         d8:af:c0:fa:37:d8:21:76:47:37:45:4d:95:8b:d6:8c:6f:83:
         04:fc:1f:b8:a1:00:3b:94:4d:1a:0f:7c:36:36:00:cc:a0:a9:
         b7:6c:b5:26:9d:3d:00:2d:ce:68:3e:51:b9:77:5d:c3:24:86:
         b0:b3:aa:79:db:54:f9:b8:e3:cc:5f:c4:ee:94:f8:1b:38:71:
         f3:02:da:a3:7b:24:1f:93:52:13:69:5d:c8:d3:c0:26:b0:15:
         61:f0:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:38 2026 by rpki-client