Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa
File:                     C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (raw, json)
Hash identifier:          nnr6N7gsoMtV6N+GfW2wiOurQdubrWp+eixXKsMow9E=
Subject key identifier:   25:9F:12:CD:DF:FF:4B:4C:E7:CB:C9:C7:01:AF:63:77:53:A7:8D:28
Certificate issuer:       /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial:       0117
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:30:26 +0000
ROA not before:           Fri 21 Nov 2025 03:51:24 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153341
IP address blocks:        160.187.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
                          rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
        Validity
            Not Before: Nov 21 03:51:24 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a590f2-631f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:07:f3:0c:86:8b:87:38:d4:62:6f:1c:a6:
                    d9:ac:c4:3b:39:cf:98:ed:44:17:60:95:f4:2f:bb:
                    2b:80:f2:ae:59:ef:8f:59:c3:96:72:fc:f7:95:de:
                    08:0b:9b:44:4b:46:fc:e5:ab:6b:e5:38:dd:ef:2f:
                    fc:0c:36:c6:24:7c:f1:eb:0d:96:32:5c:db:9d:93:
                    9a:3d:60:80:8b:c0:f8:80:d7:1f:97:fc:1e:c3:7b:
                    46:ae:6b:37:4e:49:84:3c:ac:06:ef:bc:b6:e5:fe:
                    c2:33:43:2f:a4:20:dc:66:b7:aa:6e:af:16:9a:5e:
                    9a:95:f2:58:56:9d:aa:51:1a:8e:32:d8:a8:0c:24:
                    ad:b5:15:71:49:db:14:94:54:be:e9:69:a1:eb:e0:
                    dd:45:09:3b:4b:fb:e3:5d:f6:67:93:77:b0:54:e8:
                    d8:f8:21:cc:e0:71:5f:4f:d1:2f:6f:d8:7d:ae:97:
                    df:73:02:ed:e2:ae:91:e1:96:2a:2d:cd:c1:f4:ad:
                    03:3b:ff:d2:7f:c8:6d:32:2c:0f:71:a5:74:33:95:
                    07:39:63:d7:c1:f9:ad:66:66:c4:b0:1c:2c:11:a4:
                    6c:fa:49:75:a7:cc:33:ca:a6:ba:40:3e:63:40:3c:
                    31:78:a7:35:e6:a1:8d:d7:8e:29:f6:85:23:5f:97:
                    92:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9F:12:CD:DF:FF:4B:4C:E7:CB:C9:C7:01:AF:63:77:53:A7:8D:28
            X509v3 Authority Key Identifier:
                keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:1d:df:9e:9b:20:2c:9c:c2:bd:90:ad:42:fb:af:e2:37:23:
         31:64:65:a5:f0:cb:36:c0:97:7c:3b:52:62:d2:28:44:08:c0:
         fc:31:dc:5a:a1:4d:9f:b6:03:b2:0a:ab:11:a8:57:55:12:ed:
         11:a2:22:f3:2a:e3:7d:05:95:fa:e6:1e:52:d1:b4:4b:dc:73:
         f6:58:f2:ba:92:f0:87:44:67:ce:6d:e5:ff:5a:65:97:d9:96:
         02:04:21:e2:61:5f:95:cb:7e:e8:df:01:dc:ba:1f:99:3a:0a:
         c8:da:12:33:4a:9f:7e:86:fc:3b:4f:f5:af:a5:fe:aa:93:39:
         b8:08:71:b2:a8:a7:69:95:43:47:1c:ad:e0:60:fe:75:c7:35:
         f0:6d:24:6a:e7:89:60:ad:9c:32:a8:71:07:59:e4:b6:d6:d4:
         f9:33:21:95:40:cf:28:72:75:4d:d2:99:19:be:be:b8:5d:6d:
         10:11:4e:69:de:5d:2c:e0:c4:74:44:3c:e6:9f:ed:d9:9f:8d:
         0f:d1:3e:d1:4d:52:ef:06:10:e0:7b:a1:59:a3:02:7a:e2:b1:
         ea:cd:9c:bc:d0:57:b1:bb:1e:b9:ad:c0:05:9d:26:b6:ca:1a:
         51:da:aa:b7:af:94:c9:c4:49:2b:11:61:aa:d8:03:33:46:f2:
         99:a6:55:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:20 2026 by rpki-client