Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/144D9AA823F011F0B0D6F263C4F9AE02.roa
File:                     144D9AA823F011F0B0D6F263C4F9AE02.roa (raw, json)
Hash identifier:          LLzDHWFeR7YGgtQNekPvZqfbxMpDLnmmSQTfiW3fryQ=
Subject key identifier:   D1:61:5A:6E:72:F4:3E:B8:24:52:29:6A:C5:D7:29:C4:C2:F1:AA:25
Certificate issuer:       /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial:       01BA
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/144D9AA823F011F0B0D6F263C4F9AE02.roa
Signing time:             Mon 21 Sep 2026 04:55:37 +0000
ROA not before:           Mon 21 Sep 2026 04:55:37 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     140288
IP address blocks:        160.30.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
        Validity
            Not Before: Sep 21 04:55:37 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab0b8c9-65b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:5f:b4:db:3c:37:f8:23:8c:be:0c:79:73:
                    fc:c1:72:86:39:6b:8c:c5:74:39:54:59:de:78:38:
                    82:8a:3f:d4:32:98:65:d7:67:2e:19:31:3a:9f:d1:
                    9e:8a:21:2b:49:07:f6:13:25:26:24:c1:f8:f9:50:
                    5f:ef:c9:b8:ae:98:c0:2c:49:c0:40:19:73:c8:ac:
                    6b:d0:3c:b2:76:3a:bb:82:b2:1d:7c:f1:7c:39:82:
                    03:a8:ad:2b:11:e7:c4:a3:59:94:4c:69:35:5e:7a:
                    47:f3:f9:f1:46:fd:45:0d:3c:6b:18:1b:0e:b7:41:
                    4b:f6:9e:dd:2f:f7:50:8c:00:65:ba:6f:a7:a8:af:
                    03:07:b3:02:53:78:3f:19:4d:20:8e:62:d7:f1:4e:
                    cb:3d:73:b2:a5:b7:44:8b:22:fc:4c:70:8c:c1:bd:
                    8b:fb:19:9e:a0:29:0f:11:48:f9:c8:fd:1f:c4:74:
                    2f:32:4b:9a:a4:9d:2d:fd:8d:fb:8b:a8:30:c4:47:
                    8f:f2:43:c0:7b:55:c5:29:23:26:e2:e1:47:77:b9:
                    9e:80:4a:86:e6:f9:6e:6b:39:e4:07:e2:03:e3:89:
                    6f:6f:e5:e1:1c:81:87:20:ba:0d:43:cf:a1:d4:01:
                    21:20:99:d9:36:88:9b:b9:5b:bd:1e:37:a0:fc:79:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:61:5A:6E:72:F4:3E:B8:24:52:29:6A:C5:D7:29:C4:C2:F1:AA:25
            X509v3 Authority Key Identifier:
                keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/144D9AA823F011F0B0D6F263C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:65:1a:1c:93:92:5e:97:e1:55:55:f2:27:23:59:0d:c1:75:
         b6:10:2c:59:c6:f9:99:60:f7:f9:1f:f2:d0:bf:3b:b9:58:2a:
         97:82:43:8c:c6:08:04:f1:13:9d:99:9f:3d:91:c8:45:5c:16:
         f7:03:3d:a5:2b:0c:13:65:a1:08:a1:4a:db:80:1d:03:4d:fe:
         48:91:f6:2c:38:3f:37:a8:1d:30:6a:22:28:82:8f:be:8b:71:
         c1:65:ce:13:41:bf:66:f8:5e:11:7a:67:b3:bf:25:e8:e3:0e:
         4d:93:73:71:bb:56:04:7b:57:71:49:a2:fc:47:c1:39:91:bb:
         e6:f0:fa:e7:54:85:7d:c1:91:57:8f:3d:8e:91:1b:9c:68:3c:
         f7:60:b8:72:75:d5:5f:be:d9:5b:47:3e:2b:3c:7c:1f:23:ab:
         42:4b:a3:c5:b2:62:62:4b:09:1e:ff:53:c7:b6:84:78:21:91:
         02:16:9f:ac:f6:81:af:ea:73:56:c6:15:30:3b:ca:20:78:8a:
         8b:e2:7f:d9:41:74:4b:e4:bf:c9:f4:ac:68:41:86:01:2d:3c:
         7b:7f:f0:d3:7e:33:6a:5a:a2:ff:56:32:83:84:51:bb:b9:88:
         87:f3:f5:40:b9:a6:f0:58:81:a1:4b:2e:dc:22:c8:49:14:b2:
         df:2b:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:59:49 2026 by rpki-client