Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/900E2938699411F19844B5108747A888.roa
File:                     900E2938699411F19844B5108747A888.roa (raw, json)
Hash identifier:          jizyqkTyH+zkwQWvqzJaFbEht/vGvHvuFyzL4PcRYxY=
Subject key identifier:   AA:42:D2:3B:DD:E8:5A:0B:C9:DF:26:52:FF:56:31:24:C4:02:C1:0C
Certificate issuer:       /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial:       0184
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/900E2938699411F19844B5108747A888.roa
Signing time:             Mon 21 Sep 2026 04:56:40 +0000
ROA not before:           Mon 21 Sep 2026 04:56:40 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134489
IP address blocks:        160.30.104.0/24 maxlen: 24
                          160.30.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 05:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Validity
            Not Before: Sep 21 04:56:40 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ab0b907-c65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:ba:ac:34:70:f3:84:24:92:8b:d1:fa:41:
                    7f:38:71:77:be:41:9e:16:13:d9:e5:cc:64:ac:64:
                    af:c9:ce:7d:8b:8c:02:5f:f0:0f:91:4b:42:45:ff:
                    04:fb:6f:bf:85:1d:be:f5:11:44:86:92:6c:0e:d3:
                    fa:92:04:c8:e5:3a:87:5d:08:66:f9:91:1d:68:a6:
                    69:67:ba:8b:99:17:97:03:33:93:37:57:a1:77:75:
                    10:24:9e:bb:d1:c8:b0:a4:27:66:46:50:e0:fb:c8:
                    24:96:60:09:47:1c:5e:df:fe:c3:72:40:e2:04:46:
                    e2:27:7b:a0:9d:74:b6:3a:ab:21:aa:59:7a:3d:ec:
                    1f:4e:4f:cb:9a:c0:ef:0e:86:68:67:86:04:5b:53:
                    01:0b:10:7d:01:54:88:71:04:23:f6:ef:d6:c7:d5:
                    f3:17:01:a3:fb:93:af:3b:37:ec:77:1e:eb:ed:b5:
                    ab:bb:c4:b2:30:a6:a7:31:6a:84:7c:ce:de:c0:2f:
                    79:00:6e:9a:b9:5a:18:f2:fd:f1:f3:ec:35:a7:27:
                    23:db:c1:67:1f:45:47:36:7e:08:0a:c0:08:9d:15:
                    e1:2b:00:60:32:d3:d7:cd:a1:7f:30:a4:e1:50:a0:
                    3c:83:e4:96:04:59:42:c2:a1:86:5e:3a:fc:94:f6:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:42:D2:3B:DD:E8:5A:0B:C9:DF:26:52:FF:56:31:24:C4:02:C1:0C
            X509v3 Authority Key Identifier:
                keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/900E2938699411F19844B5108747A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:68:50:dc:7a:3d:7f:84:34:34:63:9e:c5:8c:8c:d2:28:33:
         26:e4:29:f6:16:48:f7:50:6d:9f:e3:1a:6e:44:ca:72:17:cb:
         fd:06:95:d3:05:b5:eb:92:a2:64:44:99:34:4d:42:2b:8b:ce:
         59:58:f0:ad:01:e1:d9:e6:8c:67:84:30:c7:98:63:9e:96:df:
         e5:23:d2:b4:03:60:88:e7:5a:9f:b0:64:7c:4c:ae:6f:c6:97:
         2d:3b:b9:f9:5a:dd:7e:49:79:96:23:74:c4:08:ce:be:fd:e5:
         cb:91:ef:ef:f4:5c:52:7d:29:aa:07:ba:bc:c0:10:2a:8e:5c:
         f2:62:97:a3:a2:3c:85:fc:b9:8d:14:04:c4:7c:62:04:cf:c6:
         9f:9e:76:ff:63:6c:eb:5b:fa:42:86:e2:25:ef:04:a4:bb:7d:
         9e:c1:cc:6c:f9:f3:f8:9e:4b:80:e2:09:03:b5:2b:45:04:df:
         a9:79:1f:aa:b0:6c:46:17:a2:9f:ee:4f:03:ef:3c:e2:a2:b6:
         7a:42:17:49:ad:e3:b2:63:0a:3f:41:d9:bf:c3:2a:f1:d1:0c:
         4f:1e:01:7d:6b:8b:72:bd:11:73:09:d2:74:f2:4e:58:27:4b:
         17:cd:e9:86:49:ac:62:a9:8b:32:5c:90:59:9f:6f:13:a8:f8:
         b2:40:79:37
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI3QzUxMTAvBgNVBAUTKDU3NUE2RUQzMEMzNzNBRDQzNEQxNUE2NjVEREEyRTc2
NEVDODlBQ0EwHhcNMjYwOTIxMDQ1NjQwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIwYjkwNy1jNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvS66rDRw84QkkovR+kF/OHF3vkGeFhPZ5cxkrGSvyc59i4wCX/APkUtCRf8E
+2+/hR2+9RFEhpJsDtP6kgTI5TqHXQhm+ZEdaKZpZ7qLmReXAzOTN1ehd3UQJJ67
0ciwpCdmRlDg+8gklmAJRxxe3/7DckDiBEbiJ3ugnXS2Oqshqll6PewfTk/LmsDv
DoZoZ4YEW1MBCxB9AVSIcQQj9u/Wx9XzFwGj+5OvOzfsdx7r7bWru8SyMKanMWqE
fM7ewC95AG6auVoY8v3x8+w1pycj28FnH0VHNn4ICsAInRXhKwBgMtPXzaF/MKTh
UKA8g+SWBFlCwqGGXjr8lPZ5LwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKpC0jvd
6FoLyd8mUv9WMSTEAsEMMB8GA1UdIwQYMBaAFFdabtMMNzrUNNFaZl3aLnZOyJrK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EMDY1QUJCNDhB
RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9WMXB1MHd3M090UTAwVnBtWGRvdWRrN0lt
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1YxcHUwd3czT3RRMDBWcG1YZG91ZGs3SW1zby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODI3QzUvRDA2NUFCQjQ4QUQ5MTFFRjk4MUM4MjgzQzRGOUFFMDIvOTAwRTI5Mzg2
OTk0MTFGMTk4NDRCNTEwODc0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB5oMA0GCSqGSIb3DQEBCwUAA4IBAQCpaFDcej1/hDQ0Y57FjIzS
KDMm5Cn2Fkj3UG2f4xpuRMpyF8v9BpXTBbXrkqJkRJk0TUIri85ZWPCtAeHZ5oxn
hDDHmGOelt/lI9K0A2CI51qfsGR8TK5vxpctO7n5Wt1+SXmWI3TECM6+/eXLke/v
9FxSfSmqB7q8wBAqjlzyYpejojyF/LmNFATEfGIEz8afnnb/Y2zrW/pChuIl7wSk
u32ewcxs+fP4nkuA4gkDtStFBN+peR+qsGxGF6Kf7k8D7zziorZ6QhdJreOyYwo/
Qdm/wyrx0QxPHgF9a4tyvRFzCdJ08k5YJ0sXzemGSaxiqYsyXJBZn28TqPiyQHk3
-----END CERTIFICATE-----
Generated at Fri Oct 9 02:58:37 2026 by rpki-client