Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/360B184E061911F1B00F359F223D8C67.roa
File:                     360B184E061911F1B00F359F223D8C67.roa (raw, json)
Hash identifier:          rhazAhjFaM5Rj9hfb4dKJv0EkD//If3Ns4QMkbfwdkY=
Subject key identifier:   FA:2D:09:CC:E1:25:86:F4:A3:C0:06:2C:14:6C:B8:7A:8A:37:3A:2F
Certificate issuer:       /CN=A916E1C6/serialNumber=930EF095B0C68DC8A37C91FF8F1337070EA9CA40
Certificate serial:       A7
Authority key identifier: 93:0E:F0:95:B0:C6:8D:C8:A3:7C:91:FF:8F:13:37:07:0E:A9:CA:40
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/360B184E061911F1B00F359F223D8C67.roa
Signing time:             Fri 18 Sep 2026 18:13:44 +0000
ROA not before:           Fri 18 Sep 2026 18:13:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133014
IP address blocks:        161.139.0.0/20 maxlen: 20
                          161.139.16.0/20 maxlen: 20
                          161.139.32.0/20 maxlen: 20
                          161.139.48.0/20 maxlen: 20
                          161.139.64.0/20 maxlen: 20
                          161.139.80.0/20 maxlen: 20
                          161.139.96.0/20 maxlen: 20
                          161.139.112.0/20 maxlen: 20
                          161.139.128.0/20 maxlen: 20
                          161.139.128.0/21 maxlen: 21
                          161.139.136.0/21 maxlen: 21
                          161.139.144.0/20 maxlen: 24
                          161.139.160.0/20 maxlen: 24
                          161.139.176.0/20 maxlen: 20
                          161.139.192.0/20 maxlen: 20
                          161.139.208.0/20 maxlen: 20
                          161.139.208.0/21 maxlen: 21
                          161.139.216.0/21 maxlen: 21
                          161.139.224.0/20 maxlen: 20
                          161.139.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.crl
                          rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E1C6, serialNumber=930EF095B0C68DC8A37C91FF8F1337070EA9CA40
        Validity
            Not Before: Sep 18 18:13:44 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6aad7f58-6204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:27:c5:2c:d7:69:12:66:33:04:27:7e:0b:ba:
                    61:4a:9e:6e:81:a0:d2:91:c7:ac:9a:4f:45:50:7c:
                    8a:31:44:5c:bd:26:3a:d8:e4:a3:56:0d:d4:f2:24:
                    58:f1:41:b0:0b:77:1d:fd:84:f5:cb:5d:83:ae:6e:
                    8f:e0:ab:d0:db:c8:93:c3:42:20:fd:a2:cb:62:5a:
                    3e:fc:0e:9c:1d:31:34:47:37:20:f4:fd:51:d4:7d:
                    8f:f6:f8:8a:52:f0:b7:99:62:39:f7:4d:70:c7:44:
                    c9:6c:f0:ce:0e:52:6c:27:82:80:93:1e:13:c7:1d:
                    19:4f:da:3e:1c:2e:69:98:3a:8a:66:b2:88:f7:5d:
                    ca:06:58:7f:1f:9a:ef:aa:ed:f2:d0:1c:39:49:5e:
                    5d:a8:fa:0d:a7:c1:3e:3a:99:97:43:6d:39:e1:2b:
                    af:4a:bb:d4:86:6e:82:d6:9a:1b:21:36:6f:3a:22:
                    79:85:1b:f3:f1:43:d2:ba:0a:2e:5b:d7:8f:7e:c6:
                    e9:ad:67:02:7e:96:23:89:b9:fd:38:6f:0e:4e:14:
                    11:84:07:0c:f2:d8:52:e7:0e:6e:bf:52:96:97:fb:
                    f4:bd:ae:3a:5a:51:1b:f2:ff:28:42:e7:2f:d3:0a:
                    98:0f:3a:8f:77:82:b6:a7:41:33:10:ba:df:3a:5c:
                    1b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2D:09:CC:E1:25:86:F4:A3:C0:06:2C:14:6C:B8:7A:8A:37:3A:2F
            X509v3 Authority Key Identifier:
                keyid:93:0E:F0:95:B0:C6:8D:C8:A3:7C:91:FF:8F:13:37:07:0E:A9:CA:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/360B184E061911F1B00F359F223D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.139.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:f4:9f:4d:7a:65:55:90:28:4d:ff:47:ee:fe:c9:83:bf:
         8d:72:f8:b2:59:5c:84:a3:34:45:40:2f:b4:c9:02:41:b9:be:
         11:93:4c:60:f2:3a:21:a8:40:67:57:9c:94:f2:ff:93:f6:a1:
         7d:81:2a:47:e7:9e:42:ec:f1:23:dc:cb:04:69:5e:be:d0:4c:
         28:1f:18:a0:21:96:3c:48:9d:a9:c5:25:64:0b:4e:fc:40:b1:
         57:e7:82:fe:b9:67:c9:13:ac:7e:45:bd:3e:0a:83:47:23:e8:
         96:ea:59:72:ae:0a:22:40:04:d4:cf:76:98:fa:a1:8e:70:c0:
         c1:85:d8:b9:68:b7:de:94:aa:d6:69:e4:7b:40:a8:8b:de:e0:
         59:71:99:87:43:81:8c:d4:bc:6b:b0:b4:c9:ea:d6:3d:49:9b:
         64:a8:7c:27:6e:2e:19:17:63:83:c0:e4:6e:ba:c1:7d:19:94:
         1a:79:c6:fe:de:75:6c:1f:f6:49:be:fd:cc:fb:2c:39:2a:a4:
         a0:b4:c9:87:61:82:c8:c9:2b:c4:dd:36:59:5d:8a:6c:20:f5:
         12:e7:54:36:35:61:d0:2c:ec:14:fd:35:41:1e:e7:88:35:bb:
         10:07:23:71:93:a1:bd:fb:97:a6:41:6f:23:dc:c4:38:bd:41:
         e2:c2:00:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 28 13:19:49 2026 by rpki-client