Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa
File:                     C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (raw, json)
Hash identifier:          RdQ8Kg8V0X5jAt/5w0/SSXdPPMNEPgNn/sfLhen4wYo=
Subject key identifier:   E4:3B:16:1E:5A:F1:B4:97:01:B8:31:B6:F1:34:14:1C:4F:E5:9F:82
Certificate issuer:       /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial:       0120
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:25:20 +0000
ROA not before:           Thu 11 Sep 2025 06:45:58 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132372
IP address blocks:        160.187.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
                          rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
        Validity
            Not Before: Sep 11 06:45:58 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a59dd0-743a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:77:13:ae:8d:4b:20:03:dd:ba:c0:21:ae:
                    ce:79:0c:7c:9e:10:f8:27:7b:c8:81:1d:6c:f5:ee:
                    77:d1:13:7f:41:b4:4b:92:d8:73:32:de:6d:4d:76:
                    5a:cb:12:dd:2e:b8:f6:8b:0f:01:40:33:64:9e:f9:
                    ba:dc:c0:d5:e7:08:ab:72:b7:06:49:20:cc:c9:a8:
                    ce:3f:5e:58:74:17:16:a9:bb:fb:d1:41:95:75:a4:
                    7b:e3:31:e3:8b:15:a5:27:e3:77:ab:8a:1c:05:1e:
                    07:78:ff:dc:44:96:a2:65:6e:b1:ab:dc:d3:26:3f:
                    95:77:c0:61:4d:b2:08:61:7c:ad:06:55:cd:c5:57:
                    63:a4:37:6b:13:b3:88:c6:47:d9:11:b5:56:82:60:
                    a6:f3:0a:63:78:d9:4f:68:5a:2d:0e:11:ec:e4:ea:
                    df:0c:86:5c:e9:fb:93:92:23:99:3e:fe:51:de:3c:
                    12:79:a6:f9:d7:ba:4f:75:bc:58:ec:54:c4:e2:6b:
                    59:58:03:28:eb:25:13:d8:3b:4f:b6:3c:45:cd:f1:
                    40:2d:29:d4:a9:2b:11:8f:78:eb:a3:8c:d9:d8:9c:
                    fe:36:f8:d0:ec:7f:73:ce:df:3d:f1:27:99:07:cf:
                    10:41:67:73:d8:24:2f:8c:57:31:8a:b4:d3:0c:cd:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3B:16:1E:5A:F1:B4:97:01:B8:31:B6:F1:34:14:1C:4F:E5:9F:82
            X509v3 Authority Key Identifier:
                keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:21:2f:57:d4:d4:b0:58:1c:86:12:0e:51:21:4d:b6:0b:
         ec:b8:ec:5c:00:24:e1:79:d8:f1:c3:44:92:7d:72:e1:21:7e:
         65:54:b7:c9:3d:f9:b6:6e:fd:6a:63:ea:e8:c6:30:67:56:a2:
         e5:aa:5d:77:bb:12:33:00:cc:c9:3d:4b:8f:c9:00:ea:ce:c4:
         41:04:7a:b3:84:09:2f:b9:57:57:95:36:53:58:6e:70:e3:fa:
         c3:15:cb:b0:76:e4:cc:83:0b:7f:0a:d4:39:a8:d0:0e:9a:1f:
         cd:45:8f:da:c6:be:fd:d9:69:d3:18:04:ec:3f:c5:4a:cf:77:
         fd:97:70:db:f0:ea:f4:05:b3:64:f1:52:16:8f:4f:99:93:e0:
         4a:aa:db:a5:5e:a5:03:d9:9f:4d:eb:db:cd:1c:e2:2f:ec:56:
         3c:d2:a4:fb:b8:75:02:cc:f6:dc:14:5e:16:8c:00:50:30:fb:
         71:c1:99:2c:cd:93:e2:98:e1:12:06:02:ee:6a:1b:be:1a:2e:
         bb:aa:7c:38:5a:e1:fb:30:58:25:eb:47:b3:3a:33:73:16:da:
         f7:f9:ae:d9:e8:2c:46:cb:85:06:c5:da:7d:98:9d:32:5e:d0:
         3a:db:99:45:1a:1a:d8:bc:b3:d9:8f:20:ab:01:ca:fa:11:6f:
         d4:48:0a:9c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF
RTc5NzVCMEIwHhcNMjUwOTExMDY0NTU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWRkMC03NDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnlV3E66NSyAD3brAIa7OeQx8nhD4J3vIgR1s9e530RN/QbRLkthzMt5tTXZa
yxLdLrj2iw8BQDNknvm63MDV5wircrcGSSDMyajOP15YdBcWqbv70UGVdaR74zHj
ixWlJ+N3q4ocBR4HeP/cRJaiZW6xq9zTJj+Vd8BhTbIIYXytBlXNxVdjpDdrE7OI
xkfZEbVWgmCm8wpjeNlPaFotDhHs5OrfDIZc6fuTkiOZPv5R3jwSeab517pPdbxY
7FTE4mtZWAMo6yUT2DtPtjxFzfFALSnUqSsRj3jro4zZ2Jz+NvjQ7H9zzt898SeZ
B88QQWdz2CQvjFcxirTTDM02YQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOQ7Fh5a
8bSXAbgxtvE0FBxP5Z+CMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC
RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjVBNTgvRDZGMTA1MjI3QkZEMTFFRkE3QjhFQjVDQzRGOUFFMDIvQzFCQzVDNUU3
QkZGMTFFRkEyRkNFNzc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoLthMA0GCSqGSIb3DQEBCwUAA4IBAQATwiEvV9TUsFgchhIOUSFN
tgvsuOxcACThedjxw0SSfXLhIX5lVLfJPfm2bv1qY+roxjBnVqLlql13uxIzAMzJ
PUuPyQDqzsRBBHqzhAkvuVdXlTZTWG5w4/rDFcuwduTMgwt/CtQ5qNAOmh/NRY/a
xr792WnTGATsP8VKz3f9l3Db8Or0BbNk8VIWj0+Zk+BKqtulXqUD2Z9N69vNHOIv
7FY80qT7uHUCzPbcFF4WjABQMPtxwZkszZPimOESBgLuahu+Gi67qnw4WuH7MFgl
60ezOjNzFtr3+a7Z6CxGy4UGxdp9mJ0yXtA625lFGhrYvLPZjyCrAcr6EW/USAqc
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:44 2026 by rpki-client