Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/9B741CFE0C3411EDB8619843C4F9AE02.roa
File:                     9B741CFE0C3411EDB8619843C4F9AE02.roa (raw, json)
Hash identifier:          NVoTvNqptu8+2EEc4xwQ1XFeD946dIqVcf+QNOuWx54=
Subject key identifier:   60:85:89:5B:2D:BA:DE:82:EE:3F:B5:D6:7B:48:0E:BD:97:6B:B9:D2
Certificate issuer:       /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial:       0597
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/9B741CFE0C3411EDB8619843C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:59:42 +0000
ROA not before:           Sat 11 Oct 2025 01:55:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     47856
IP address blocks:        160.32.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
        Validity
            Not Before: Oct 11 01:55:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4545e-a737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:e0:96:e0:33:df:d1:cb:c5:88:f1:83:ec:
                    07:56:73:a6:ef:80:6f:2d:82:92:70:74:13:3b:8b:
                    32:83:27:23:2f:8b:f0:7b:22:0e:51:a9:21:74:04:
                    37:33:c9:51:b7:77:b5:dc:88:6c:aa:c8:98:4c:3a:
                    e5:58:26:b1:9c:7c:d6:81:bf:4d:3c:65:02:d3:a4:
                    51:e1:a0:45:ae:86:1f:39:ef:66:0c:f7:c6:52:78:
                    84:20:fb:70:b6:05:57:b7:9d:19:0d:d9:f0:8e:19:
                    7e:30:35:50:98:60:78:18:8e:83:27:32:5b:40:cc:
                    45:18:31:72:db:bc:f5:9e:0c:37:09:39:8b:3e:cb:
                    f5:29:e6:a0:b3:82:e8:96:68:88:5a:73:21:d6:a3:
                    5f:66:c1:b6:37:ce:44:f7:f6:ef:b3:fb:c1:ca:95:
                    0c:51:b1:4a:a1:7c:3e:b7:09:1f:44:44:55:24:c6:
                    66:d0:ff:25:c5:4e:0c:e7:c4:7b:6a:73:cf:4b:11:
                    f8:b5:bf:e0:eb:54:49:bd:35:c0:4e:3a:7f:ee:e7:
                    ad:8e:b8:12:a8:7c:23:1d:b2:a8:35:51:58:05:38:
                    d6:52:86:73:42:0e:a6:ad:0e:c2:26:69:5e:a9:19:
                    67:db:00:90:cd:ca:ee:e9:96:61:33:80:f9:15:4c:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:85:89:5B:2D:BA:DE:82:EE:3F:B5:D6:7B:48:0E:BD:97:6B:B9:D2
            X509v3 Authority Key Identifier:
                keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/9B741CFE0C3411EDB8619843C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:39:b4:e6:be:e1:3c:22:4d:fe:2b:77:9d:6d:c5:c1:48:eb:
         29:5f:39:34:17:c3:63:d2:71:08:49:83:fb:f6:16:71:5a:36:
         44:dc:df:b3:b4:e0:32:fc:cb:b9:a6:55:b0:fc:6c:ac:f7:1c:
         62:40:28:d3:4c:e1:40:c0:68:cc:47:da:f5:ca:bb:81:cf:d9:
         5a:c3:2d:36:cb:e1:80:8f:bb:b3:51:de:73:26:9f:06:f9:80:
         d6:7e:87:ad:c4:8c:36:c4:1a:21:d2:e1:1b:55:d2:c0:ac:94:
         7f:30:9b:17:d7:04:a0:0a:78:1c:bd:31:ed:10:2c:f2:39:30:
         27:f8:39:4e:a1:57:65:93:76:39:87:77:12:92:ea:4e:f9:65:
         9e:db:20:f9:fe:bc:de:b7:3a:30:dd:ef:a1:e5:a5:84:00:97:
         9f:f7:00:41:83:e5:6a:de:b5:75:0f:b1:51:4e:b3:89:15:cd:
         7a:90:bc:6b:c2:fe:1e:15:0a:41:5a:6b:2a:66:37:64:4d:80:
         a8:68:89:fa:45:bf:ea:af:db:bf:66:5e:b3:ed:a7:18:17:2d:
         83:05:2f:68:72:4e:12:61:2e:0f:4a:f1:7f:f6:dc:fb:ed:97:
         5b:61:01:0b:bf:73:ee:dc:88:3b:c6:52:6e:0d:64:2c:fa:b1:
         6c:21:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:20:13 2026 by rpki-client