Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa
File:                     AF75682A101911F09363D44DC4F9AE02.roa (raw, json)
Hash identifier:          Yc/a5kzN1S+i861++mE7mShXzSmH/he0caVJdxP2DHc=
Subject key identifier:   F5:03:67:7A:CB:65:02:5F:04:5D:96:A3:3C:1C:27:27:4A:72:1E:25
Certificate issuer:       /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial:       F8
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa
Signing time:             Tue 21 Jul 2026 08:34:02 +0000
ROA not before:           Tue 21 Jul 2026 08:34:02 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139645
IP address blocks:        160.187.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
        Validity
            Not Before: Jul 21 08:34:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5f2ef9-ae50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:9f:ec:f5:a5:eb:61:3c:04:b6:30:2c:fd:
                    80:a3:09:f2:b9:88:fb:12:69:2d:62:be:19:57:70:
                    5c:6e:b0:28:b9:a5:6d:2f:a0:b7:4d:de:81:8b:f3:
                    ab:91:bc:19:1a:80:72:9a:2d:8f:7d:7a:a2:5e:bd:
                    17:40:bf:bc:51:8b:fa:bd:0d:49:66:47:5b:e2:d5:
                    88:5c:9c:1f:12:b2:eb:70:f2:0f:34:52:76:41:2e:
                    41:e4:49:ac:47:d3:e1:ec:29:40:1f:8a:af:0f:74:
                    c9:73:39:d3:71:63:e1:0b:e9:3e:9e:51:4f:bc:8e:
                    84:b6:1c:5a:34:f0:f2:62:13:82:ac:81:4f:19:9e:
                    03:e5:27:73:35:52:f2:9c:27:b4:60:68:a8:12:33:
                    89:67:97:4d:67:f8:a7:79:3d:68:2c:60:96:22:6f:
                    8c:85:94:21:99:71:c4:8c:90:21:96:01:ca:2d:a0:
                    7f:0b:75:2a:b1:88:07:1d:54:1f:33:4d:27:39:40:
                    af:7e:8f:6c:ad:f4:a7:2d:55:90:c1:56:e7:82:00:
                    5d:b0:b6:ca:01:50:c0:9f:e6:b2:f3:a8:c9:ab:e9:
                    e1:50:45:0e:9a:4b:a2:32:63:c9:a9:c5:4b:1c:30:
                    55:da:c4:04:b7:94:06:4e:8f:3d:94:c9:3a:21:94:
                    d8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:03:67:7A:CB:65:02:5F:04:5D:96:A3:3C:1C:27:27:4A:72:1E:25
            X509v3 Authority Key Identifier:
                keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/AF75682A101911F09363D44DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:7a:8a:30:b1:81:1b:27:0c:9c:a8:e7:cc:61:62:e8:3e:0e:
         41:5e:18:a8:ce:c6:75:e6:bd:32:b8:e0:77:c3:9b:0e:f4:a7:
         d0:19:d8:d8:43:e1:f0:bf:54:95:70:02:d7:36:21:0d:18:c7:
         89:a6:1c:35:84:39:0e:80:10:e8:73:80:22:2f:68:ec:09:8a:
         ea:00:75:69:e9:1e:ab:85:34:99:de:02:51:f2:38:fd:1c:01:
         c1:92:c7:91:47:d1:ce:3e:78:1c:54:87:e2:f9:a5:3c:bf:ae:
         77:71:12:ea:1a:4a:67:fa:e3:37:4f:8a:e9:ad:c0:e1:27:02:
         f2:0d:fa:2c:c4:c5:b2:f4:96:c4:56:73:00:79:d6:fe:42:87:
         4a:c8:45:30:a8:51:27:a7:29:29:17:7f:61:85:d4:cb:80:df:
         f2:9b:ea:b0:a9:9f:b4:d3:4b:ba:3a:65:35:26:79:77:9d:71:
         13:86:cd:07:f6:13:3d:51:89:81:05:84:35:cb:47:ad:fd:73:
         ce:d3:51:e9:42:42:60:25:35:92:1e:2c:dc:43:e5:b8:03:93:
         3b:ea:8e:ec:4d:a6:78:1b:a1:ba:28:74:40:42:76:67:4a:c0:
         eb:21:95:87:51:45:ff:98:cf:8c:17:cd:2a:9a:72:f6:87:0c:
         b1:08:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:37 2026 by rpki-client