Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/F0CEC2E2663811F089040A3DC4F9AE02.roa
File:                     F0CEC2E2663811F089040A3DC4F9AE02.roa (raw, json)
Hash identifier:          aBUOBXMTWZ/Y7J/bfOJPKGZIcDfm4L0bUXS0vlJaRmA=
Subject key identifier:   9E:D4:70:65:E1:ED:93:A1:6B:E9:E8:82:C1:D0:49:C0:A5:28:A2:E9
Certificate issuer:       /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial:       01BB
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/F0CEC2E2663811F089040A3DC4F9AE02.roa
Signing time:             Mon 21 Sep 2026 04:55:39 +0000
ROA not before:           Mon 21 Sep 2026 04:55:39 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     153307
IP address blocks:        160.30.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
        Validity
            Not Before: Sep 21 04:55:39 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab0b8cb-3110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c5:a2:ad:a1:cb:81:af:a2:49:bd:03:fc:51:
                    85:6e:6f:07:3b:20:33:c2:4c:a7:76:b7:e5:29:5a:
                    20:b2:91:fb:4b:18:fa:aa:0b:f7:ea:ec:f3:39:26:
                    2a:c0:2d:99:f2:8b:a4:a4:7e:1d:5c:31:5d:21:c0:
                    fa:5a:1e:c4:0e:5b:10:87:fa:e8:62:fd:86:fc:01:
                    e3:6d:61:b4:7f:f7:14:d3:8e:e6:70:30:12:22:b0:
                    72:df:9b:bd:e5:9a:a9:02:10:d4:7a:d3:a1:71:24:
                    da:45:cd:78:67:4c:86:b2:f4:dd:80:35:46:8f:ce:
                    f7:c9:02:67:a5:16:62:9a:38:fa:ce:43:76:f6:2f:
                    0b:4f:13:25:8d:f7:75:20:32:27:95:da:1a:be:94:
                    51:ca:f2:f7:74:50:3d:c5:5a:a0:3d:b4:75:6e:52:
                    8b:bc:f2:ed:11:e2:51:b1:06:76:95:38:0e:14:c7:
                    90:f3:de:32:84:a5:a3:45:62:ff:dd:44:f3:84:ab:
                    1c:81:d5:5d:29:0e:12:5f:f8:1f:af:c0:a1:b7:a4:
                    26:71:f0:ab:a1:f8:64:a1:1a:9e:95:6a:02:17:9c:
                    29:2a:58:67:ee:02:d9:fe:33:cd:b6:35:57:31:51:
                    41:01:af:1b:f1:3d:f2:46:50:bb:f6:b1:26:6f:9c:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D4:70:65:E1:ED:93:A1:6B:E9:E8:82:C1:D0:49:C0:A5:28:A2:E9
            X509v3 Authority Key Identifier:
                keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/F0CEC2E2663811F089040A3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:7f:8b:3f:28:b6:98:dd:eb:a2:b8:c5:82:d1:cb:61:92:
         a1:ed:4f:00:c9:e7:8a:26:b4:32:27:1d:3e:ac:64:54:e4:68:
         e0:d5:39:ff:02:a2:3e:b5:fc:a0:10:3c:3f:aa:90:03:c8:af:
         dc:77:51:4b:82:bf:09:b8:e1:dc:e8:d0:7a:04:b5:84:76:5d:
         bb:a9:35:03:ae:40:39:f7:79:3a:9a:29:cd:4c:9a:95:80:15:
         e7:3d:09:61:6e:95:a1:1c:79:1c:59:a0:ad:e3:af:2c:0b:4c:
         5b:d5:71:37:b4:96:94:b8:f1:11:6f:ee:11:83:13:6d:bb:bf:
         0f:1c:00:94:26:37:7f:14:a4:14:d2:d9:e1:bd:4d:18:dd:95:
         4c:bf:a1:05:8e:fc:c2:dc:1a:94:58:b4:1f:88:15:bd:2a:c3:
         0b:fb:4a:81:9e:b5:40:98:1f:14:c3:36:a4:35:35:bb:e6:2c:
         19:1f:1f:62:cc:29:fc:05:96:f3:0e:16:93:38:46:4e:e0:92:
         45:17:cd:67:cb:95:30:da:40:00:4b:9f:c9:0d:36:0a:72:2f:
         96:7a:37:a8:55:97:80:60:83:21:33:b2:34:be:08:5e:fb:7b:
         e0:ab:7c:34:14:f4:ca:d8:52:4d:8e:79:d1:a6:9d:3e:90:dd:
         02:0a:69:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:23:03 2026 by rpki-client