Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/DC857BE8843111F09719836AC4F9AE02.roa
File:                     DC857BE8843111F09719836AC4F9AE02.roa (raw, json)
Hash identifier:          1BOEDBKActw8l6HJnt44UOYL/MfVfznTCP7GMz9bjtk=
Subject key identifier:   0F:D0:7C:07:11:08:85:44:24:60:52:50:4C:41:80:5A:AA:68:02:A5
Certificate issuer:       /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Certificate serial:       019C
Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/DC857BE8843111F09719836AC4F9AE02.roa
Signing time:             Wed 29 Jul 2026 05:55:12 +0000
ROA not before:           Wed 29 Jul 2026 05:55:12 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152898
IP address blocks:        160.22.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
                          rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
        Validity
            Not Before: Jul 29 05:55:12 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6995c0-8ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fa:ac:f7:35:e5:a8:df:b1:2c:31:ad:f4:c8:
                    74:91:74:da:24:6b:e6:46:ad:df:9b:c7:87:9c:80:
                    19:1f:06:5b:cc:14:5c:17:af:e3:91:c0:4e:a6:26:
                    e0:5c:c8:09:f9:d2:59:70:21:17:07:e4:26:ad:32:
                    f3:df:c5:b0:e4:d0:e8:93:d9:f7:36:af:35:f3:a5:
                    a8:83:71:f6:78:78:6c:12:57:19:bb:2f:94:93:f5:
                    87:f0:12:1a:95:87:8f:82:84:3b:2d:53:ba:17:a4:
                    9b:67:7f:3c:f5:f5:1c:5e:21:b2:d7:82:63:55:09:
                    cf:3d:0d:a0:47:7d:35:0d:05:d5:76:b5:98:a0:91:
                    1e:02:08:f1:a6:c5:92:78:77:f7:2b:09:a8:4e:e5:
                    6b:62:f3:3a:09:ff:8c:1b:6c:b8:5e:59:21:22:85:
                    40:37:50:af:d4:d2:df:df:42:84:42:a0:cc:ea:9e:
                    49:a8:7b:c1:82:a4:7f:7c:74:a0:ce:f8:c4:73:38:
                    e3:fe:c0:65:65:47:bd:c2:63:c5:7a:2c:9b:37:9b:
                    d5:11:c2:61:6d:d5:9e:4b:f3:90:ba:66:8b:26:b9:
                    d6:e7:45:df:1d:93:e7:98:d2:05:96:f1:bf:b5:c2:
                    8c:3d:5f:38:f9:bb:e2:b0:c9:c0:f8:97:97:70:a4:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D0:7C:07:11:08:85:44:24:60:52:50:4C:41:80:5A:AA:68:02:A5
            X509v3 Authority Key Identifier:
                keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/DC857BE8843111F09719836AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:88:b7:96:30:a2:c5:5c:77:a2:bc:8c:e7:d8:5a:77:11:53:
         e3:e0:bc:d4:83:03:a5:8f:6d:8d:73:67:6d:13:d5:be:a0:7e:
         43:4d:0b:8f:7c:1f:fe:d9:d7:7c:a7:5b:49:bb:d9:91:75:e3:
         6e:81:82:38:bc:f1:24:28:a2:2f:64:50:e5:20:ff:6a:0c:0a:
         ad:c8:cd:71:67:5e:fb:87:9a:0e:c4:bc:06:53:28:42:c1:0c:
         a9:51:5c:2d:4a:9c:31:17:00:91:41:9e:c4:1a:6c:a4:f5:8a:
         f3:46:8d:1e:b7:98:86:1c:95:5b:3d:a2:2a:7a:19:1c:cc:86:
         44:6c:af:4e:71:e3:9e:10:bc:9c:43:e6:9c:71:5b:69:bc:a3:
         fa:7d:9e:e2:7f:6a:51:99:e2:84:77:c6:6e:39:c9:3f:bf:ff:
         b1:e1:07:47:94:84:a4:13:f6:49:51:be:6b:16:d4:7e:aa:37:
         84:9a:05:89:2c:84:e4:ea:68:1f:74:5c:b1:f8:61:7b:a4:5a:
         49:33:4a:32:f2:15:0f:bc:0b:73:0d:83:18:af:5a:2a:70:4a:
         b7:71:74:e0:df:dd:d2:45:d3:2f:f8:a2:f9:e2:43:10:1f:31:
         b8:bc:4d:11:5d:cd:33:74:c2:1c:17:bf:ea:f9:7e:64:ab:ba:
         b8:9e:9e:c8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdDQjUxMTAvBgNVBAUTKDhBRTVBRUVGMkE5MUYzREY4NjYwM0VEQzU0RkU4NEM1
QkI1NzlDMTUwHhcNMjYwNzI5MDU1NTEyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5OTVjMC04YmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7fqs9zXlqN+xLDGt9Mh0kXTaJGvmRq3fm8eHnIAZHwZbzBRcF6/jkcBOpibg
XMgJ+dJZcCEXB+QmrTLz38Ww5NDok9n3Nq8186Wog3H2eHhsElcZuy+Uk/WH8BIa
lYePgoQ7LVO6F6SbZ3889fUcXiGy14JjVQnPPQ2gR301DQXVdrWYoJEeAgjxpsWS
eHf3KwmoTuVrYvM6Cf+MG2y4XlkhIoVAN1Cv1NLf30KEQqDM6p5JqHvBgqR/fHSg
zvjEczjj/sBlZUe9wmPFeiybN5vVEcJhbdWeS/OQumaLJrnW50XfHZPnmNIFlvG/
tcKMPV84+bvisMnA+JeXcKScbwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA/QfAcR
CIVEJGBSUExBgFqqaAKlMB8GA1UdIwQYMBaAFIrlru8qkfPfhmA+3FT+hMW7V5wV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NCNS9FRkQ0N0Q1NDIy
NTYxMUVGQjc1NjFGNDZDNEY5QUUwMi9pdVd1N3lxUjg5LUdZRDdjVlA2RXhidFhu
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2l1V3U3eXFSODktR1lEN2NWUDZFeGJ0WG5CVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjdDQjUvRUZENDdENTQyMjU2MTFFRkI3NTYxRjQ2QzRGOUFFMDIvREM4NTdCRTg4
NDMxMTFGMDk3MTk4MzZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBYyMA0GCSqGSIb3DQEBCwUAA4IBAQCRiLeWMKLFXHeivIzn2Fp3
EVPj4LzUgwOlj22Nc2dtE9W+oH5DTQuPfB/+2dd8p1tJu9mRdeNugYI4vPEkKKIv
ZFDlIP9qDAqtyM1xZ177h5oOxLwGUyhCwQypUVwtSpwxFwCRQZ7EGmyk9YrzRo0e
t5iGHJVbPaIqehkczIZEbK9OceOeELycQ+accVtpvKP6fZ7if2pRmeKEd8ZuOck/
v/+x4QdHlISkE/ZJUb5rFtR+qjeEmgWJLITk6mgfdFyx+GF7pFpJM0oy8hUPvAtz
DYMYr1oqcEq3cXTg393SRdMv+KL54kMQHzG4vE0RXc0zdMIcF7/q+X5kq7q4np7I
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:53:19 2026 by rpki-client