Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/38891D6C159111EEA7190965C4F9AE02.roa
File:                     38891D6C159111EEA7190965C4F9AE02.roa (raw, json)
Hash identifier:          tadv1xqP3nb6G3HOlaFfSggQWJOGlx//7euYB9t2R9E=
Subject key identifier:   D6:CE:7A:FB:AA:5E:15:42:C7:C8:3F:A6:52:9C:68:58:1D:BB:1B:2D
Certificate issuer:       /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial:       021E
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/38891D6C159111EEA7190965C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:00:15 +0000
ROA not before:           Tue 03 Feb 2026 02:23:07 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     59349
IP address blocks:        157.120.160.0/19 maxlen: 19
                          157.120.160.0/24 maxlen: 24
                          157.120.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
        Validity
            Not Before: Feb  3 02:23:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4385f-84db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:f3:40:72:a3:de:fc:70:f6:ee:02:fa:c7:
                    42:73:fd:58:4b:96:a2:5a:ec:3a:49:52:49:92:a2:
                    b4:da:d8:a5:ad:88:c8:ca:9e:46:d4:21:3c:1f:d2:
                    cb:8a:e8:3c:3c:4b:79:48:00:c3:ad:fd:5a:b6:fa:
                    55:ec:37:50:e4:7e:17:f2:a7:19:be:ee:de:2e:41:
                    6a:cf:2e:af:75:21:94:13:c7:d3:1f:79:c7:e8:15:
                    c2:d8:2e:df:55:fd:de:29:cf:94:08:aa:8d:18:e6:
                    f5:d9:67:20:92:fc:0f:16:73:a8:18:f1:5d:30:6d:
                    3d:2d:6f:1a:60:66:63:3c:57:17:bc:56:80:aa:1b:
                    41:b2:fa:c9:60:c2:df:1c:85:02:e0:45:1d:e1:01:
                    5a:6c:a8:e9:ff:5c:a1:d9:78:dd:58:6d:8e:1b:93:
                    8c:6b:fa:69:08:30:f9:08:d1:59:84:8d:22:0b:9f:
                    ed:71:63:0b:45:ff:4a:57:f2:17:ba:5c:67:da:ce:
                    8f:68:52:a8:f2:de:e3:b9:9a:1d:07:a1:0d:a2:0e:
                    f1:5e:92:71:c8:98:06:f8:f4:a2:82:4f:88:15:e9:
                    2c:fe:6e:fc:7e:47:91:22:ec:f1:b1:84:ea:5b:72:
                    de:a7:99:fb:64:23:2f:f2:c5:bd:0e:49:3b:be:1a:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CE:7A:FB:AA:5E:15:42:C7:C8:3F:A6:52:9C:68:58:1D:BB:1B:2D
            X509v3 Authority Key Identifier:
                keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/38891D6C159111EEA7190965C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:a4:10:4a:43:54:18:47:d4:21:0b:29:a6:03:ed:dc:ec:a6:
         b1:fc:4d:5d:52:dd:4d:ab:37:5e:37:46:86:b2:41:7f:19:6a:
         e1:63:8c:6f:ea:85:97:97:fa:7d:f2:14:30:d5:84:9d:97:61:
         37:f8:8b:3e:69:bb:38:c3:07:3e:bd:4a:32:24:fc:d9:73:f8:
         4e:99:39:cd:cd:33:77:5b:ea:65:b1:f7:86:9d:70:3e:09:51:
         47:fc:12:c0:bb:1d:18:18:46:d1:34:75:eb:96:2e:34:19:c0:
         13:90:14:7d:7d:ea:9a:f5:1b:8a:b3:91:c7:e2:83:d1:97:ef:
         2a:94:fd:18:2d:0f:da:63:c4:2a:15:3e:6f:fd:7d:9b:5a:2e:
         86:db:0c:65:dc:17:c7:4a:05:d4:74:f4:26:61:af:4d:b6:67:
         cb:fc:b4:d0:0f:54:0b:f3:18:7d:41:bc:79:7f:1f:ae:c6:f1:
         cd:85:22:f1:c6:af:65:5c:7d:8e:5d:22:da:97:26:df:6c:27:
         f1:4b:66:0d:26:ac:60:82:cd:44:27:48:20:b6:3c:1d:87:44:
         33:da:9b:af:fa:8c:72:2e:bb:25:48:4e:6a:a5:37:50:c9:f0:
         aa:f4:fd:aa:e3:3a:2c:86:91:96:4c:e9:a4:9d:af:88:b1:e5:
         9d:aa:af:09
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3
NEI3Qjk2MjIwHhcNMjYwMjAzMDIyMzA3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Mzg1Zi04NGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1E3zQHKj3vxw9u4C+sdCc/1YS5aiWuw6SVJJkqK02tilrYjIyp5G1CE8H9LL
iug8PEt5SADDrf1atvpV7DdQ5H4X8qcZvu7eLkFqzy6vdSGUE8fTH3nH6BXC2C7f
Vf3eKc+UCKqNGOb12WcgkvwPFnOoGPFdMG09LW8aYGZjPFcXvFaAqhtBsvrJYMLf
HIUC4EUd4QFabKjp/1yh2XjdWG2OG5OMa/ppCDD5CNFZhI0iC5/tcWMLRf9KV/IX
ulxn2s6PaFKo8t7juZodB6ENog7xXpJxyJgG+PSigk+IFeks/m78fkeRIuzxsYTq
W3Lep5n7ZCMv8sW9Dkk7vhoXQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNbOevuq
XhVCx8g/plKcaFgduxstMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0
OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjYxMjMvMTBCRTlFMjJGNDhDMTFFREE4ODk1NDUzQzRGOUFFMDIvMzg4OTFENkMx
NTkxMTFFRUE3MTkwOTY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFnXigMA0GCSqGSIb3DQEBCwUAA4IBAQCjpBBKQ1QYR9QhCymmA+3c
7Kax/E1dUt1NqzdeN0aGskF/GWrhY4xv6oWXl/p98hQw1YSdl2E3+Is+abs4wwc+
vUoyJPzZc/hOmTnNzTN3W+plsfeGnXA+CVFH/BLAux0YGEbRNHXrli40GcATkBR9
feqa9RuKs5HH4oPRl+8qlP0YLQ/aY8QqFT5v/X2bWi6G2wxl3BfHSgXUdPQmYa9N
tmfL/LTQD1QL8xh9Qbx5fx+uxvHNhSLxxq9lXH2OXSLalybfbCfxS2YNJqxggs1E
J0ggtjwdh0Qz2puv+oxyLrslSE5qpTdQyfCq9P2q4zoshpGWTOmkna+IseWdqq8J
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:52 2026 by rpki-client