Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/710957A8559411EFA07E1C5AC4F9AE02.roa
File:                     710957A8559411EFA07E1C5AC4F9AE02.roa (raw, json)
Hash identifier:          0+v8nCnfAC3GP9GgjNFUSOIX0YHSrKCcLJqYU8ao0Gs=
Subject key identifier:   54:B8:AA:30:72:4D:E5:F0:E2:69:C4:4B:27:02:FB:06:96:38:F1:C6
Certificate issuer:       /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Certificate serial:       014B
Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/710957A8559411EFA07E1C5AC4F9AE02.roa
Signing time:             Fri 01 May 2026 00:32:10 +0000
ROA not before:           Fri 01 May 2026 00:32:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136451
IP address blocks:        160.30.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C, serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
        Validity
            Not Before: May  1 00:32:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3f48a-e379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:b1:ac:d0:6e:de:8b:70:12:c0:a4:4e:b3:
                    f2:16:33:48:b7:2a:e2:e3:d6:91:f6:0d:bc:8e:df:
                    25:1b:0f:12:a8:cb:13:bb:47:f1:b0:af:8a:9f:54:
                    1e:6a:43:ea:7a:9a:d5:e3:35:c2:78:91:a4:5b:28:
                    05:d8:b5:5c:4b:6b:1b:c2:2b:5e:b8:3a:ba:c1:d7:
                    d9:e2:34:4c:2f:95:8a:8c:63:8d:a6:03:5a:f7:8a:
                    7e:bb:cc:90:cc:12:dd:6a:08:91:a3:c7:76:4b:c9:
                    4a:68:d3:2b:81:11:4d:7d:c5:dd:42:ea:fd:d5:7b:
                    40:10:a8:a9:d1:59:95:f1:41:08:bb:70:a5:ed:cf:
                    21:58:9f:50:02:11:97:c3:28:c2:8e:a4:25:bf:1c:
                    cc:15:07:cd:e4:39:9f:3d:30:fa:b4:51:fc:b7:d3:
                    41:6a:36:98:31:6c:bc:e8:d9:af:9a:8f:f9:c1:cd:
                    5d:6a:c7:c5:22:3a:4f:c7:66:c5:84:82:80:33:fd:
                    c4:81:58:b4:91:1d:0e:60:bb:41:8c:3a:97:95:57:
                    b4:d3:43:09:fb:2a:ef:eb:c2:ee:63:48:68:46:3c:
                    6f:ee:e2:cc:5d:2d:d2:5a:48:e0:e3:ba:85:28:52:
                    bc:67:3a:77:6a:b8:12:4c:3b:76:a6:39:53:aa:d1:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B8:AA:30:72:4D:E5:F0:E2:69:C4:4B:27:02:FB:06:96:38:F1:C6
            X509v3 Authority Key Identifier:
                keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/710957A8559411EFA07E1C5AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:6d:7c:76:65:79:42:02:77:c2:66:f5:f4:18:7a:2b:f2:79:
         b7:c1:61:12:3d:dd:f3:95:1a:24:ec:0f:40:5f:75:5d:c8:8a:
         3e:b6:6e:53:65:72:56:da:50:8d:fe:48:4e:23:ca:69:6c:a3:
         50:ab:da:e8:31:d4:a0:14:6a:27:f2:e8:08:78:d2:2c:f7:f4:
         0d:3d:28:9e:e8:01:ce:85:79:eb:cb:a6:4d:92:f1:fe:16:fa:
         54:5b:8c:4e:8a:14:05:6a:8d:b4:05:36:78:fb:ff:4c:e1:14:
         21:2b:42:d6:89:da:d9:50:37:e5:02:27:d4:1a:95:8a:b9:16:
         ba:5c:9f:5d:87:21:16:e6:79:99:95:72:41:b7:e6:ff:f1:9b:
         2b:3e:18:a8:5e:f8:ff:3d:f7:74:d5:be:9c:c0:01:3f:18:5d:
         c3:03:6e:28:dd:a9:ee:a5:23:39:30:27:0a:d2:dd:02:56:c2:
         ff:1b:e0:e3:da:8c:63:0c:c6:d8:d2:e8:d5:ab:57:e7:84:73:
         61:9e:18:10:74:ce:90:3b:ab:7e:95:a8:2f:84:c8:52:88:d0:
         1a:74:4f:eb:9b:55:e3:92:8d:31:a3:f6:95:76:cd:7b:4a:36:
         aa:ca:ab:0d:94:b9:c9:8d:70:b8:de:c2:46:74:7b:58:59:af:
         07:77:46:29
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRDN0MxMTAvBgNVBAUTKDA4QUI1NDc5QUFGMEM4NDhBNTE0MkQ2RkU0REM5OTE2
MkI0NUMzMzcwHhcNMjYwNTAxMDAzMjEwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYzZjQ4YS1lMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzVSxrNBu3otwEsCkTrPyFjNItyri49aR9g28jt8lGw8SqMsTu0fxsK+Kn1Qe
akPqeprV4zXCeJGkWygF2LVcS2sbwiteuDq6wdfZ4jRML5WKjGONpgNa94p+u8yQ
zBLdagiRo8d2S8lKaNMrgRFNfcXdQur91XtAEKip0VmV8UEIu3Cl7c8hWJ9QAhGX
wyjCjqQlvxzMFQfN5DmfPTD6tFH8t9NBajaYMWy86Nmvmo/5wc1dasfFIjpPx2bF
hIKAM/3EgVi0kR0OYLtBjDqXlVe000MJ+yrv68LuY0hoRjxv7uLMXS3SWkjg47qF
KFK8Zzp3argSTDt2pjlTqtH55wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFS4qjBy
TeXw4mnESycC+waWOPHGMB8GA1UdIwQYMBaAFAirVHmq8MhIpRQtb+TcmRYrRcM3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy9BNEMxNDYyODU1
NDkxMUVGODJCNUQzNkZDNEY5QUUwMi9DS3RVZWFyd3lFaWxGQzF2NU55WkZpdEZ3
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0NLdFVlYXJ3eUVpbEZDMXY1TnlaRml0Rnd6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkRDN0MvQTRDMTQ2Mjg1NTQ5MTFFRjgyQjVEMzZGQzRGOUFFMDIvNzEwOTU3QTg1
NTk0MTFFRkEwN0UxQzVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoB5GMA0GCSqGSIb3DQEBCwUAA4IBAQCgbXx2ZXlCAnfCZvX0GHor
8nm3wWESPd3zlRok7A9AX3VdyIo+tm5TZXJW2lCN/khOI8ppbKNQq9roMdSgFGon
8ugIeNIs9/QNPSie6AHOhXnry6ZNkvH+FvpUW4xOihQFao20BTZ4+/9M4RQhK0LW
idrZUDflAifUGpWKuRa6XJ9dhyEW5nmZlXJBt+b/8ZsrPhioXvj/Pfd01b6cwAE/
GF3DA24o3anupSM5MCcK0t0CVsL/G+Dj2oxjDMbY0ujVq1fnhHNhnhgQdM6QO6t+
lagvhMhSiNAadE/rm1Xjko0xo/aVds17SjaqyqsNlLnJjXC43sJGdHtYWa8Hd0Yp
-----END CERTIFICATE-----
Generated at Wed May 13 12:03:21 2026 by rpki-client