Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/24142938343C11EFA0165876C4F9AE02.roa
File:                     24142938343C11EFA0165876C4F9AE02.roa (raw, json)
Hash identifier:          cZdtKnw4eHifsUm3U5oL2ZEURjpZCo9PDtjWNEmuKMc=
Subject key identifier:   B4:4C:3F:D5:2F:5A:82:DF:14:75:D1:E4:E3:E1:49:02:C2:4A:82:CB
Certificate issuer:       /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324
Certificate serial:       0141
Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/24142938343C11EFA0165876C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:44:32 +0000
ROA not before:           Wed 21 May 2025 05:17:04 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152916
IP address blocks:        160.22.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324
        Validity
            Not Before: May 21 05:17:04 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a250-c9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:e3:03:27:bb:24:3e:9f:88:f3:ea:94:8a:
                    af:0b:41:b9:51:e5:31:a1:aa:46:0c:c3:e3:14:79:
                    d8:67:f0:52:e6:27:a9:c0:0c:36:ea:f6:5a:a7:a7:
                    4b:bf:65:91:18:3a:e6:5b:77:56:d4:46:18:fc:9c:
                    9b:ed:43:60:f5:de:f7:fe:b1:de:81:60:f0:da:f5:
                    b5:00:e4:e9:29:f3:57:0e:c5:b9:e7:99:10:ff:ef:
                    d1:50:38:a7:52:47:fe:c8:de:9e:be:b9:c3:e7:d7:
                    87:85:95:42:1e:4f:0c:12:5a:c6:b8:45:71:f1:19:
                    01:62:3c:b0:d3:18:2c:cc:d7:a3:ba:71:c4:38:dd:
                    35:32:90:56:a4:c0:68:87:99:a9:6d:e1:93:01:a3:
                    12:1f:d0:a9:c6:0f:d9:db:02:de:e4:7a:ef:1e:92:
                    12:9a:d6:26:d1:64:ca:73:1e:bf:67:c4:f2:b8:5c:
                    63:86:c8:aa:bd:37:88:bf:41:f1:df:be:23:77:4e:
                    2d:73:6b:1e:0b:71:f8:5d:5f:62:d8:78:f2:0f:92:
                    7a:b7:24:fa:33:53:39:c5:f4:71:95:02:b5:f6:c8:
                    34:bc:af:72:6a:ce:3f:db:91:97:4f:89:b6:8c:9f:
                    5c:cf:f5:18:54:07:6f:28:31:39:e9:29:0e:9c:1b:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4C:3F:D5:2F:5A:82:DF:14:75:D1:E4:E3:E1:49:02:C2:4A:82:CB
            X509v3 Authority Key Identifier:
                keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/24142938343C11EFA0165876C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:19:e4:cb:51:8b:49:83:ea:a6:fc:e7:ce:de:b3:57:35:83:
         f7:8e:28:06:a9:67:20:47:24:ee:64:33:df:18:64:d2:09:81:
         ab:3f:92:51:2f:74:4f:78:46:46:9c:74:51:d6:9f:cc:70:06:
         e9:ef:46:3f:a8:c0:1d:2e:d6:ae:76:22:d7:55:6c:7c:87:3f:
         11:9a:d6:74:b7:ea:53:8c:e2:bb:a8:59:22:2f:27:c3:ee:af:
         e1:0d:77:07:d1:67:8f:bb:94:e3:77:c2:93:b7:b7:2b:85:ca:
         0e:85:12:05:b6:1b:1a:b0:7d:9d:00:2a:2d:87:8b:0c:f1:ba:
         b4:1a:de:58:dc:c7:4f:91:23:e9:92:c7:59:1e:0f:8e:ce:bb:
         a9:2a:2f:67:b3:72:21:80:1b:19:57:f2:29:02:97:e6:18:e0:
         90:c8:aa:a4:89:12:ef:c3:42:5a:32:43:d4:33:1c:5b:65:2b:
         c5:e7:98:d4:c1:a5:b8:6d:91:8b:88:ce:83:ee:c2:2b:f3:a6:
         6b:6c:16:ea:7d:b7:4a:7b:75:2b:02:19:5a:37:e0:f1:11:9b:
         52:8d:f1:b2:ba:22:78:e3:e7:00:d1:e5:42:fb:c1:27:66:27:
         03:69:21:8a:96:bd:a3:46:dd:4a:ce:2a:6a:7d:88:a9:32:6a:
         b1:16:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:16 2026 by rpki-client